Privacy Notice

Firewalk Cymru
Effective Date: 2025


1. Who We Are

Firewalk Cymru provides wellness services including retreats, workshops, firewalking, breathwork, drum birthing, cold-water immersion, nature-based experiences, and wellbeing coaching.

We are committed to protecting your personal data and respecting your privacy in accordance with the UK GDPR and the Data Protection Act 2018.

Contact Details:
Email: hello@firewalkcymru.com


2. What Personal Data We Collect

We only collect information necessary to deliver our services safely and effectively.

2.1 Information You Provide Directly

  • Full name

  • Email address

  • Phone number

  • Postal address (when relevant)

  • Payment details (processed securely by a third-party provider; we do not store card details)

  • Emergency contact information

  • Health/wellbeing information voluntarily disclosed to ensure safety (e.g., medical conditions, allergies, accessibility needs)

2.2 Information Collected Automatically

  • IP address

  • Website usage data

  • Cookies (see Cookie Policy)

2.3 Information From Third Parties

  • Payment processors

  • Booking platforms

  • Email marketing platforms (when you subscribe)


3. Why We Collect Your Data

We process data to:

  • Manage and confirm retreat and workshop bookings

  • Deliver services safely, including risk assessments for firewalking, breathwork, cold-water immersion and other wellness activities

  • Communicate updates and essential event information

  • Respond to enquiries

  • Maintain business records and comply with legal obligations

  • Send optional newsletters or offers (only if you consent)


4. Lawful Bases for Processing

Under GDPR, we rely on:

Contract

To provide the services you have booked or requested.

Consent

For:

  • Marketing emails

  • Collecting optional health information
    You may withdraw consent at any time.

Legitimate Interests

To help us operate effectively, improve services, and ensure participant safety.

Legal Obligation

For financial, insurance, and health-and-safety requirements.


5. How We Protect Your Data

We use a combination of technical and organisational measures:

  • Encrypted digital storage

  • Password-protected systems

  • GDPR-compliant booking and payment platforms

  • Restricted staff access

  • Secure email and document handling

We never sell or share your data for marketing.


6. Data Sharing

Your data may be shared with:

  • Payment processors (e.g., Stripe, PayPal)

  • Booking platforms

  • Email marketing service providers

  • Insurance or emergency services if required for your safety

  • Legal or regulatory authorities when required by law

All third parties follow GDPR standards.


7. Data Retention

We keep your information only as long as necessary:

  • Client and safety records: 7 years (industry standard)

  • Mailing list: Until you unsubscribe

  • General enquiries: 12 months

  • Health information: Only for the duration of your event participation unless required longer for insurance purposes

Data is securely deleted or anonymised once no longer required.


8. Your Rights Under GDPR

You have the right to:

  • Access the data we hold about you

  • Request correction of inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict how your data is used

  • Object to certain types of processing

  • Withdraw consent at any time

  • Request a copy of your data in a portable format

To exercise your rights, contact: hello@firewalkcymru.com

We will respond within 30 days.


9. Marketing Preferences

We will only send marketing communications if you actively opt in.

You may unsubscribe at any time via:

  • The unsubscribe link in emails

  • Emailing us directly

  • Requesting removal verbally or in writing


10. Children’s Data

Our services are intended for adults aged 18+.
We do not knowingly collect personal information about children without parental consent.


11. Cookies

We use essential and analytical cookies to improve website functionality and user experience.
(If you like, I can provide a complete GDPR Cookie Policy.)


12. Changes to This Privacy Notice

This notice may be updated periodically.
The latest version will always be posted on our website with a new effective date.


13. Contact Us

For privacy concerns, GDPR requests, or more information:

Firewalk Cymru
Email: hello@firewalkcymru.com