GDPR Compliance Policy

Effective Date: 2/12/2025

Last Updated: 2/12/2024

Calm Oasis Holistic Therapy is committed to complying with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and related data protection laws. This GDPR Compliance Policy explains how we collect, process, and protect personal data to ensure compliance with these regulations.

1. Definitions

• Personal Data: Any information relating to an identified or identifiable individual, such as name, email address, and location.

• Processing: Any operation performed on personal data, such as collection, storage, use, or deletion.

• Data Controller: Calm Oasis Holistic Therapy is the data controller responsible for determining how and why personal data is processed.

• Data Subject: Any individual whose personal data is processed.

2. Lawful Basis for Processing

We process personal data based on the following lawful bases:

Consent: Users provide consent when they add listings or contact us.
Contractual Obligation: Processing is necessary to provide the services requested by users (e.g., adding or searching listings).

3. What Data We Collect

Legitimate Interests: We process data to improve our platform and ensure its security, provided these interests do not override data subject rights.

Data Provided by Users:

• Listing Owners: Name, email address, farm shop/business information (e.g., shop name, location, and product details).

• Search Users: Any personal data provided when contacting listing owners or submitting inquiries.

Automatically Collected Data:

Device information, IP address, and usage data collected via cookies or similar technologies.

Special Category Data:

We do not intentionally collect or process sensitive personal data (e.g., health, religion, or ethnicity).

4. Legal Obligation: We may process data to comply with legal or regulatory requirements.

5. Data Subject; Your Rights

Under UK GDPR, data subjects have the following rights:

Right to Access:

You can request a copy of the personal data we hold about you.

Right to Rectification:

You can request that we correct inaccuracies in your personal data.

Right to Erasure (“Right to Be Forgotten”):

You can request the deletion of your personal data, subject to legal obligations.

Right to Restrict Processing:

You can request that we limit how your data is processed.

Right to Data Portability:

You can request that your personal data be transferred to another service provider in a machine-readable format.

Right to Object:

You can object to processing based on legitimate interests or direct marketing.

Rights Related to Automated Decision-Making:

Calm Oasis Holistic Therapy does not engage in automated decision-making or profiling.

To exercise these rights, please contact us at admin@calmoasisinternational.com. We will respond within one month unless an extension is required.

6. Data Security

While we strive to protect your data, no system is completely secure. Users are encouraged to ensure they have in place their own data security and encryption services in place. Users are encouraged to report any suspected data breaches to admin@calmoasisinternational.com

7. Data Sharing and Transfers ; Sharing with Third Parties:

We may share personal data with:
Service Providers: third-party vendors who assist with platform hosting, analytic, or email services.
Legal Authorities: if required by law or to protect our legal rights.
International Data Transfers: if personal data is transferred outside the UK, we ensure it is protected by appropriate safeguards, such as adequacy decisions or standard contractual clauses.

8. Data Breach Notification

In the event of a personal data breach, we will:

• Notify affected individuals without undue delay if the breach poses a high risk to their rights and freedoms.

• Report the breach to the Information Commissioner’s Office (ICO) within 72 hours if required.

9. Cookies and Tracking Technologies

Calm Oasis Holistic Therapy uses cookies to improve functionality and analyze usage.

• Necessary cookies are essential for the platform to function.

• Analytics cookies help us improve user experience but are optional.

You can manage cookie preferences through your browser settings. For more details, please refer to our Cookie Policy.

10. Children’s Data

Our platform is not intended for use by children under 13 up to 18 years of age. We do not knowingly collect personal data from children. If we discover that a child’s data has been provided, we will delete it promptly.

11. Contact Information and Complaints

For questions, concerns, or to exercise your rights, contact us at:

Email: admin@calmoasisinternational.com

If you believe your data rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: https://ico.org.uk

• Telephone: 0303 123 1113

12. Changes to This Policy

By using calmoasisinternational.com you acknowledge that you have read, understood, and agreed to this GDPR Compliance Policy.

13. Changes to This Policy

We may update this GDPR Compliance Policy to reflect changes in our practices or legal requirements. Updates will be posted on this page, and significant changes will be communicated to users where appropriate. You are required to our read terms of service in tandem with this policy as it creates our contract with you

By using calmoasisinternational.com you acknowledge that you have read, understood, and agreed to this GDPR Compliance Policy.