Privacy Policy

Last updated: February 2025

1. Introduction

European Meditation Institute Ltd (“EMI”, “we”, “us”, “our”), Company No. 15542815, registered at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, is the data controller responsible for your personal data.

We are committed to protecting your privacy and processing your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website (europeanmeditationinstitute.com) or purchase our Course.

2. Data Protection Officer

Our Data Protection Officer can be contacted at:

European Meditation Institute Ltd
Email: contact@europeanmeditationinstitute.com
Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom

3. Personal Data We Collect

Data you provide directly:

When you purchase the Course: full name, email address, billing address, payment information (processed by Stripe — we do not store card details).

When you contact us: name, email address, WhatsApp number, message content.

When you join our community: name, professional background, location (as voluntarily shared).

Data collected automatically:

Technical data: IP address, browser type and version, device type, operating system, screen resolution, language preference.

Usage data: pages visited, time spent on pages, click patterns, referral source, scroll depth.

Cookie data: see Section 10 (Cookie Policy) below.

4. How We Use Your Data

We process your personal data for the following purposes and legal bases:

Contract performance (Article 6(1)(b) GDPR): To deliver the Course, issue your certification, provide customer support and manage your account.

Legitimate interests (Article 6(1)(f) GDPR): To improve our Website and Course, analyse usage patterns, prevent fraud, and send operational communications about your enrolment.

Consent (Article 6(1)(a) GDPR): To send marketing communications (you can withdraw consent at any time), place non-essential cookies, and use analytics tools.

Legal obligation (Article 6(1)(c) GDPR): To comply with tax, accounting and regulatory requirements.

5. Data Sharing & Third Parties

We share your personal data only with the following categories of trusted third parties, all of which are bound by data processing agreements:

Payment processing: Stripe, Inc. (USA) — processes your payment securely. Stripe is certified under the EU-US Data Privacy Framework.

Analytics: Google Analytics (Google LLC, USA) — analyses website traffic and user behaviour. Data is anonymised where possible.

Marketing: Meta Platforms, Inc. (USA) — Facebook Pixel for conversion tracking and ad optimisation. Data is pseudonymised.

Communication: WhatsApp (Meta Platforms, Inc.) — customer support communications initiated by you.

Hosting: Vercel, Inc. (USA) — hosts our website infrastructure.

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions.

We do not sell, rent or trade your personal data to any third party.

6. Data Retention

We retain your personal data for the following periods:

Account & course data: For the duration of your lifetime access, plus 6 years after your last interaction for legal and accounting purposes.

Payment records: 7 years, as required by UK tax law (HMRC).

Marketing data: Until you withdraw consent or unsubscribe.

Analytics data: 26 months (Google Analytics default).

Support correspondence: 3 years from the date of the last communication.

7. Your Rights Under GDPR

You have the following rights regarding your personal data. To exercise any of these rights, contact us at contact@europeanmeditationinstitute.com. We will respond within 30 days.

Right of access: Request a copy of all personal data we hold about you.

Right to rectification: Request correction of inaccurate or incomplete data.

Right to erasure (“Right to be forgotten”): Request deletion of your personal data, subject to legal retention requirements.

Right to restriction: Request that we limit how we process your data.

Right to data portability: Receive your data in a structured, commonly used, machine-readable format.

Right to object: Object to processing based on legitimate interests, including profiling and direct marketing.

Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Right to lodge a complaint: You have the right to file a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. If you are in the EU, you may also contact your local supervisory authority.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including: HTTPS/TLS encryption across our entire website, secure payment processing through PCI-DSS compliant Stripe, access controls and authentication for administrative systems, regular security reviews of our infrastructure, and data minimisation principles in all processing activities.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

9. Children's Privacy

Our Website and Course are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

10. Cookie Policy

Our Website uses cookies and similar technologies. A cookie is a small text file stored on your device when you visit a website.

Strictly necessary cookies:

These are essential for the Website to function properly. They include session cookies for the countdown timer and topbar preferences. Legal basis: legitimate interest. These cannot be disabled.

Analytics cookies (Google Analytics — G-SEP9WPHKR6):

We use Google Analytics 4 to understand how visitors interact with our Website. This collects anonymised data including pages viewed, session duration, traffic sources and device information. Legal basis: consent. You can opt out via the cookie banner or by installing the Google Analytics Opt-out Browser Add-on.

Marketing cookies (Facebook Pixel — 1727457291203174):

We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising and to serve relevant ads. This may track your browsing activity across websites that use Meta's advertising services. Legal basis: consent. You can opt out via the cookie banner or through your Facebook Ad Preferences.

Managing cookies:

When you first visit our Website, you will see a cookie consent banner. You can accept or reject non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site. Most web browsers also allow you to manage cookies through their settings.

11. Third-Party Links

Our Website may contain links to third-party websites (e.g. Stripe, WhatsApp, Instagram, Facebook). We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. If changes are significant, we will endeavour to notify you via email or a prominent notice on our Website.

13. Contact Us

For any questions about this Privacy Policy, your personal data, or to exercise your rights, please contact:

European Meditation Institute Ltd
Data Protection Officer
71-75 Shelton Street, Covent Garden
London WC2H 9JQ, United Kingdom
Email: contact@europeanmeditationinstitute.com
WhatsApp: +351 939 896 559 (Monday–Friday, 9:00 AM – 6:00 PM GMT)