Privacy Policy

ELK Evolution is the data controller for the personal information you provide. Our founder and principal contact is Emma-Louise Kelly. We are based on the Fylde Coast, United Kingdom. If you have any questions about this policy or how we handle your data, contact us at emmalouise@elkevolution.co.uk.

• •Account information: your name, email address and password (stored securely).
• •Profile information: phone number, date of birth, home address, emergency contact details, allergies, dietary requirements, medical notes and pregnancy status - collected to keep you safe during ceremonies, breathwork and gatherings.
• •Booking information: events booked, ticket types, payment details (processed by our payment provider; we do not store full card numbers), discount codes used and order history.
• •Ticket information: unique ticket codes and QR data for entry and verification.
• •Support communications: the subject, category and message content of any support ticket you raise with us.
• •Contact messages: your name, email, phone number and message when you use our contact form.
• •Technical data: IP address, browser type and usage data collected through cookies and analytics (see our Cookie Policy).

Under UK GDPR we must have a lawful basis for processing your personal data. Our bases are:

• •Creating and managing your account and sanctuary dashboard.
• •Processing bookings, issuing tickets and verifying entry via QR codes.
• •Keeping you safe during gatherings using your allergy and medical information (shared only with the facilitator caring for you).
• •Responding to support tickets and contact messages.
• •Sending booking confirmations, ticket reminders and essential event updates.
• •Occasionally emailing you about new events, retreats and free sessions - only if you have agreed to receive these, and you can unsubscribe at any time.
• •Maintaining the security and integrity of the platform.

Because our offerings are trauma-informed and breathwork-based, we ask for health-related information such as allergies, medical notes and pregnancy status. Under UK GDPR this is special category data. We process it only with your explicit consent and for the purpose of protecting your health and safety during sessions. You are not obliged to provide it, but doing so helps us care for you properly.

We never sell your personal data to third parties.

• •Our payment provider - to process payments securely (card data is handled by them, not us).
• •Our email delivery provider - to send booking confirmations and event communications.
• •Facilitators leading a session you have booked - strictly your health and safety information, on a need-to-know basis.
• •Hosting and analytics providers that support this website.
• •Authorities or regulators where required by law.

We keep your data only as long as necessary:

• •Account and profile data: while your account is active, and up to 12 months after closure unless a longer period is required by law.
• •Booking, order and payment records: up to 7 years to meet accounting and tax obligations.
• •Tickets and QR data: until the event passes plus 12 months for reporting.
• •Support tickets: up to 24 months after resolution.
• •Contact messages: up to 12 months.

Your data is stored on secure servers and processed primarily within the UK and European Economic Area. Where any provider transfers data internationally, we ensure appropriate safeguards (such as UK adequacy decisions or standard contractual clauses) are in place.

To exercise any of these rights, email us at the address below. We respond within one month.

• •The right to be informed (this policy).
• •The right of access - you can request a copy of your personal data.
• •The right to rectification - correcting inaccurate or incomplete data.
• •The right to erasure (“right to be forgotten”).
• •The right to restrict processing.
• •The right to data portability.
• •The right to object to processing.
• •Rights relating to automated decision-making and profiling.

We use cookies to keep the platform working and to understand how it is used. For full details, see our Cookie Policy.

Our services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with data, please contact us so we can delete it.

We take appropriate technical and organisational measures to protect your data, including encrypted storage, access controls and secure payment processing. No method of transmission over the internet is completely secure, but we do all we reasonably can to protect your information.

We may update this Privacy Policy from time to time. The date at the top shows when it was last revised. Continued use of the platform after changes indicates acceptance of the updated policy.

If you are unhappy with how we handle your data, please contact us first at emmalouise@elkevolution.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.