Privacy Policy

Mind Body Energy Matters · Last updated 18 September 2026

Data Controller

Helen Mc Crarren, trading as Mind Body Energy Matters

County Monaghan, Ireland

What This Policy Covers

This privacy notice explains how Mind Body Energy Matters collects, uses, stores, and protects your personal information when you visit our website, make an enquiry, book or receive a service, attend a workshop, participate in an online course, or join our mailing list.

Information We Collect

Contact information, including your name, email address, telephone number, and postal address where required.
Booking and transaction information, including the service booked, appointment dates, payment status, and correspondence relating to your booking.
Health and wellbeing information that you choose to provide in an intake form, consultation, session, or related communication. This may include special category personal data under the GDPR.
Relevant household or personal-circumstance information, but only where it is appropriate to the service you have requested.
Technical information, such as IP address, browser type, device information, pages visited, and referral information. Non-essential analytics and advertising information is collected only after you consent through our cookie controls.
Marketing preferences and records of the consent you have given or withdrawn.

How and Why We Use Your Information

We process personal information only where we have a lawful basis. Depending on the circumstances, we rely on:

Contract: to respond to your booking, take payment, schedule and provide the service, and send information connected with that service.
Explicit consent: where required to process health and wellbeing information that you voluntarily provide.
Consent: for email marketing and for non-essential analytics or advertising technologies.
Legitimate interests: for proportionate business administration, service improvement, responding to enquiries, protecting the security of our website and systems, and establishing or defending legal claims. We balance these interests against your rights and expectations.
Legal obligation: for records that must be retained for tax, accounting, insurance, safety, or other legal purposes.

Marketing Communications

Booking a service does not automatically subscribe you to general marketing. We send marketing messages only when you have separately asked to receive them. You may withdraw your consent at any time by using the unsubscribe link in an email or contacting us.

Payments

Payments made through the website are processed by Stripe. Stripe receives the card and payment information needed to process the transaction. Mind Body Energy Matters receives transaction and payment-status information but does not receive your full card number.

Service Providers and Other Recipients

We do not sell your personal information. We use service providers where necessary to operate the business, including:

Squarespace for website hosting and, where used, website communications.
Stripe for payment processing.
Zoom for online sessions, workshops, and courses.
Google Workspace and Google Calendar for email, scheduling, and administration.
Google Analytics for website analytics, but only after consent.
Meta technologies for advertising measurement, but only after consent.

These providers process information under their applicable agreements and privacy notices. Depending on the service and activity, a provider may act as our processor or as a separate controller. We may also disclose information where required by law, to protect someone from a serious risk of harm, or to establish or defend a legal claim.

International Transfers

Some providers may process information outside the European Economic Area. Where an international transfer requires a safeguard, the relevant provider or Mind Body Energy Matters will rely on an applicable lawful transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, as appropriate.

How Long We Keep Information

Client and intake records: for the period reasonably necessary for the service and afterwards in accordance with applicable legal, insurance, professional, and safeguarding requirements. These records are reviewed periodically and are not retained indefinitely without a reason.
Financial and tax records: generally six years, or longer where Irish law requires it.
Booking correspondence and workshop or course attendance records: normally two years after the service ends, unless needed for a legal, accounting, safety, or complaint-related reason.
Marketing records: until you unsubscribe, followed by a minimal suppression record where needed to respect your request.
Course recordings: normally available for 12 months after the course ends and deleted within 30 days after access closes, unless a shorter period is stated before booking or retention is required for a specific legal reason.

Course Recordings

Where a course is recorded, we aim to record teaching content rather than personal sharing. Recording details will be provided before registration. You may keep your camera off, mute your microphone, and use a first name or agreed display name. If your identifiable contribution is intentionally included, we will ask for your separate consent. Further rules appear in the Terms and Conditions.

Security

We take reasonable organisational and technical measures to protect personal information. No internet-based system can be guaranteed completely secure, but access is limited to what is reasonably necessary for the services and administration.

Your Data Protection Rights

Access your personal information.
Correct inaccurate or incomplete information.
Request erasure where the legal conditions are met.
Request restriction of processing.
Object to direct marketing or to processing based on legitimate interests.
Request data portability where applicable.
Withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that was lawful before withdrawal.

To exercise a right, contact hello@mindbodyenergymatters.com. We may need to verify your identity before acting on a request.

You may complain to the Irish Data Protection Commission if you are dissatisfied with how your information is handled: www.dataprotection.ie.

Information Needed to Provide a Service

Some information is necessary to arrange payment, assess whether a service can be provided safely, or deliver what you have requested. We will identify optional information where appropriate. If necessary information is not provided, we may be unable to provide the service.

Changes to This Policy

We may update this policy from time to time. The current version and its last-updated date will be published on our website.