Your details, in plain English.

Who looks after your information

I’m Francesca, and I’m responsible for the personal information used by Soma Bloom. If you want to ask what I hold, correct it, take a copy, object to how it is used or ask me to delete it, use the contact form or call 07908 213057.

What I collect

• When you send an enquiry: the name, email address and message you choose to share.
• When you join the class list: your email address, where you joined, the wording you agreed to, and the times you requested, confirmed or left the list.
• If you create an optional app account: your name, optional phone number, class interests and contact preference. Your password is handled by the secure account provider, not shown to me.
• Basic security information needed to stop abuse. The durable rate limiter stores a one-way code made from the request address, not the raw address itself.

Your journal entries, arrival choices and quiet-practice activity stay in your browser. I cannot read or recover them. The website embeds the Acuity Scheduling calendar for dates and booking. The members’ app currently retains its separate legacy class feed and does not copy your private booking history.

Why I use it

I use enquiry details to answer what you asked and arrange a class, course, retreat or one-to-one session. I use class-list details only after you complete the confirmation step; that use is based on your consent, which you can withdraw at any time. I use optional account details to provide the profile and security features you requested and to protect the service from misuse.

I do not sell your information, use it for advertising profiles or add an unconfirmed address to the class list.

Who helps me run it

I use Vercel to host the website, Supabase for protected account and consent records, and Resend to deliver website and confirmation emails. Each receives only what it needs to provide that service. When you open Acuity Scheduling to see spaces or make a booking, Acuity Scheduling handles that visit, attendee details and payment under its own privacy terms.

Confirmation, leaving and retention

A class-list request does not add you immediately. I first email a link that expires after 48 hours, then ask you to press a confirmation button. Email security scanners cannot confirm or unsubscribe you simply by opening a link. The database stores only one-way token hashes, never the working confirmation or leaving links.

I keep a confirmed class-list record until you leave. When you unsubscribe, I retain a limited suppression record so the address is not accidentally treated as subscribed. Enquiries and account records are kept only while they are needed for the service, safety, accounting or legal obligations. You can ask me to explain or remove what is no longer needed.

Your choices

Every class-list welcome includes a leaving link. Leaving the list does not cancel an Acuity Scheduling booking or close an optional app account; those are separate. The app’s light or dark preference and private journal use local browser storage. Essential sign-in cookies are used only if you choose to sign in. There are no advertising trackers in this release.

If you are unhappy with how I handle your information, please tell me first so I can put it right. You can also contact the UK Information Commissioner’s Office at ico.org.uk.