Privacy Policy – Breathe With Rosie

We process personal data for the following purposes:

• Bookings and services: To manage and deliver breathwork sessions, coaching, workshops and events. Legal basis: performance of a contract or steps taken before entering into a contract. Payments and accounting: To process payments, invoices and legally required financial records. Legal basis: contract and legal obligation.

• Enquiries: To respond to messages and requests. Legal basis: legitimate interests or pre-contractual steps, depending on the enquiry.

• Newsletters: To send news, updates and offers to subscribers. Legal basis: consent.

• Website operation and security: To maintain a functioning and secure website. Legal basis: legitimate interests or another applicable legal basis.

• Health declarations: To assess safety considerations and potential adjustments before certain breathwork sessions. Processing takes place only where an appropriate legal basis under Article 6 and an applicable condition under Article 9 GDPR have been established.

We process personal data to:

• Manage bookings, registrations and payments.

• Communicate about sessions, events and services.

• Plan and deliver breathwork sessions and coaching.

• Assess relevant safety considerations before certain sessions.

• Send newsletters and marketing communications where legally permitted.

• Comply with legal obligations, including accounting requirements.

• Maintain and improve our website.

Before certain breathwork sessions, we may request relevant health information to assess whether a session requires adjustments or whether specific breathing techniques should be avoided.

​

Health information is classified as special category personal data under the GDPR.

Where processing relies on explicit consent, we request this separately for the specified purpose. Consent may be withdrawn by contacting us.

​

Access to health information is restricted, and it is not used for marketing purposes.

Health declarations are normally retained for no longer than 30 days after the relevant session or, for longer coaching programmes, 30 days after the programme ends. Longer retention may apply where necessary and legally justified.

We apply the following retention periods:

• Health declarations: normally 30 days after the session or coaching programme ends.

• Contact enquiries: normally up to 6 months after the enquiry is resolved.

• Booking and customer records: normally up to 12 months after the most recent booking, unless longer retention is justified.

• Newsletter subscriptions: until you unsubscribe or withdraw consent. Limited information may subsequently be retained to respect your opt-out.

• Accounting records: 7 years after the calendar year in which the financial year ended, in accordance with Swedish accounting law.
   

When information is no longer required, it is deleted or anonymised, subject to applicable legal requirements and backup retention procedures.