












Last updated: April 06, 2025
Phoenix Breathwork Method (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, purchase tickets or courses, or participate in our events and trainings.
If you have questions, contact us at [email protected].
1) Who we are (Data Controller)
Controller: Phoenix Breathwork Method
Address: [Add registered address]
Email: [email protected]
If you are in the EU/UK and we appoint an EU/UK representative, their details will be published here.
2) What data we collect
We collect and process the following categories of personal data:
Identity & Contact: name, email, phone number, billing address, country, company (if applicable).
Purchase Data: products purchased, order ID, payment status, currency, VAT/tax info (note: card details are handled by our payment processor, not stored by us).
Event Participation: ticket/attendance records, date/time/venue, emergency contact (optional), and waiver/consent forms.
Health Disclosures (Special Category Data): information you choose to share on waivers (e.g., respiratory/cardiovascular conditions, pregnancy status, recent surgery, seizure history) for safety screening.
Online Course Access: account credentials, progress/completion, content access logs.
Communications: emails, WhatsApp or SMS messages, support chats, survey responses.
Marketing Preferences: newsletter opt-in/out, topics of interest.
Technical/Cookie Data: IP address, device type, browser, pages visited, referral source, approximate location, cookies or similar technologies (see Cookies below).
Media: photos/video captured at events (see notices onsite).
You are not required to provide health information; however, if you do not, participation in certain activities may not be possible for safety reasons.
3) How we collect data
Directly from you (checkout, forms, emails/messages, event registration, waivers, course portals).
Automatically via our website and analytics cookies.
From third parties: payment processors (payment status), CRM/email tools (delivery status), referral partners (if you signed up through them).
4) Why we use your data (Purposes) and legal bases
We process your data only when we have a lawful basis:
To provide our services (purchase processing, event admission, course access). Legal basis: contract (Art. 6(1)(b) GDPR).
Safety screening & waivers to identify contraindications and adapt facilitation. Legal basis: explicit consent for health data (Art. 9(2)(a)); vital interests (Art. 6(1)(d)) in emergencies; legitimate interests in participant safety.
Customer support & communications (service messages, changes to events). Legal basis: contract; legitimate interests.
Marketing (newsletters, event updates, promotions). Legal basis: consent (opt-in), or legitimate interests where permitted (you can opt out anytime).
Analytics and site improvement. Legal basis: consent (for non-essential cookies); legitimate interests for essential functionality.
Legal, tax, and compliance obligations (invoices, accounting). Legal basis: legal obligation.
Security & fraud prevention. Legal basis: legitimate interests; legal obligation where applicable.
Media usage from events (photos/video). Legal basis: consent or legitimate interests; you can object onsite and we’ll take reasonable steps to avoid capturing/using your image.
5) Special Category Data (health)
Health information is optional and processed only for safety screening and facilitation. We rely primarily on your explicit consent. You may withdraw consent at any time (see Your rights), but this will not affect processing already carried out and may limit participation for safety reasons. We store such data securely with access restricted to facilitators/authorized staff.
6) Sharing your data
We do not sell your personal data. We may share it with:
Service providers (processors):
Payment processing (e.g., Stripe/PayPal)
CRM & email/SMS/WhatsApp tools (e.g., GoHighLevel/LeadConnector, Mailchimp)
Website, hosting & analytics (e.g., Web host, Google Analytics)
Event management & ticketing tools
E-learning/video hosting (for online courses)
Customer support/chat tools
Professional advisors: legal, tax, or accounting.
Authorities where required by law or to protect rights, safety, or prevent fraud.
Event co-hosts/venue operators only as necessary for operations and safety.
We require processors to protect your data and use it only under our instructions.
7) International transfers
If your data is transferred outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) and additional measures where needed, or we rely on adequacy decisions. Details are available on request.
8) Data retention
We retain personal data only as long as needed for the purposes described:
Orders & invoices: typically 6–10 years (accounting/tax laws).
Event participation records & waivers: typically 3 years after the event (or longer if required for legal claims).
Online course accounts: as long as your account is active; we may delete inactive accounts after a reasonable period with notice.
Marketing data: until you opt out or your consent is withdrawn, or after a defined inactivity period.
Cookies/analytics: per cookie type (see your cookie settings panel and our cookie table).
We may retain limited data to comply with legal obligations or resolve disputes.
9) Your rights (EU/UK)
Subject to conditions and local law, you have the right to:
Access your data and obtain a copy
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”)
Restrict processing
Object to processing based on legitimate interests or direct marketing
Data portability (receive your data in a machine-readable format)
Withdraw consent at any time (for processing based on consent)
Lodge a complaint with your local data protection authority (in Spain: AEPD).
To exercise rights, contact [email protected]. We may verify your identity before responding.
10) Children
Our services are intended for adults 18+. We do not knowingly collect data from children. If you believe a child provided data, contact us to delete it.
11) Cookies & similar technologies
We use cookies and similar technologies to operate our website, remember preferences, analyze traffic, and (with consent) personalize marketing.
Essential cookies: required for core functionality (cannot be switched off).
Analytics/performance cookies: help us improve our site (consent-based).
Marketing/advertising cookies: used for remarketing and ad measurement (consent-based).
You can manage your preferences via our cookie banner/manager and through your browser settings. For details, see our Cookie Notice (or section below if combined).
12) Marketing communications
If you opt in, we’ll send newsletters or promotions. You can unsubscribe anytime via the link in our emails or by contacting us. Service and transactional messages (e.g., order confirmations, event updates) are not marketing and you’ll receive them even if unsubscribed from marketing.
13) Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, staff training, and vendor due diligence. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
14) Photography & media at events
We may capture photos/audio/video at events for documentation and marketing. Notices will be displayed onsite. If you prefer not to appear, tell a staff member at check-in; we’ll use reasonable efforts to accommodate (e.g., special wristband, seat placement).
15) Third-party links
Our website may link to third-party sites. We are not responsible for their content or privacy practices. Review their policies before providing data.
16) Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date shows the latest version. If changes are material, we’ll provide additional notice where appropriate. Continued use of our services after changes indicates acceptance.
17) How to contact us
Questions, requests, or complaints about privacy or this policy:
Email: [email protected]
Address: [Add registered address]