Privacy Notice

Last updated: 19 October 2026.

This notice explains how Gül Ayan, operating Glowdom Face Yoga in London, United Kingdom, handles your personal information. Gül is the person responsible for this information (the data controller). For privacy questions or requests, email glowdom.london@gmail.com.

Information we receive

• Your name, email address, telephone number, and any address or date-of-birth details you provide in an enquiry or consultation form.
• Class or session bookings, attendance, payment amounts, dates and transaction references, and related correspondence.
• Your face-yoga experience, goals and preferences.
• Relevant health information you choose to provide through consultation, such as allergies, medicines, illness, injuries, pregnancy, pain, skin conditions, sleep or stress concerns, or recent cosmetic procedures.

Please provide only information relevant to your enquiry or participation, rather than a full medical history. Please do not include health details in an initial enquiry or an Instagram message. Consultation forms are sent after booking and payment and completed before the first session.

Why we use information and our lawful bases

• Enquiries and bookings: to discuss a session, arrange your booking, communicate practical details and provide the service you request. We rely on taking steps at your request before a contract and performing that contract (UK GDPR Article 6(1)(b)).
• Other correspondence and administration: to respond to general questions, maintain necessary service records and resolve problems. We rely on our legitimate interests in running a small face-yoga service, balanced against your rights (Article 6(1)(f)).
• Financial records: to meet applicable tax and accounting obligations. We rely on compliance with legal obligations (Article 6(1)(c)).
• Health information: to understand relevant participation needs, adapt exercises where appropriate and maintain a limited consultation record. We rely on your consent (Article 6(1)(a)) and your explicit consent for this special-category information (Article 9(2)(a)).

Client records and health information are not used by Gül for advertising and are not sold. We do not make solely automated decisions about you or carry out automated profiling.

Your choice about health information

Before you submit health information, Gül asks for a separate, affirmative health-data consent statement, alongside access to this notice. This is separate from acknowledging participation and safety guidance. Consent is recorded with the consultation information, including the date and the wording you agreed to.

“I explicitly consent to Gül Ayan, operating Glowdom Face Yoga, using the health information I choose to provide to understand my participation needs, adapt my face-yoga sessions where appropriate and keep a limited consultation record as described in the Privacy Notice. I understand that I can withdraw this consent by emailing glowdom.london@gmail.com.”

You can decline to provide health information or withdraw consent at any time by emailing Gül. Withdrawal does not affect processing that was lawful before you withdrew. If missing information means a session cannot be adapted appropriately, Gül will discuss the available options with you. Refusing health-data consent does not prevent you from making a general enquiry.

Where information is kept and the services involved

Gül manages client records using her Gmail account and laptop. The retention rules below apply to copies held in email and on the laptop. Client records and completed consultation forms are kept separately from the public website. Gül is responsible for restricting access and protecting these records against unauthorised access, loss or disclosure.

• Google / Gmail: handles email enquiries, booking correspondence and forms sent or returned by email. See Google’s Privacy Policy.
• Meta / Instagram: handles messages you send to the Glowdom Instagram account. Instagram also handles information under its own platform terms. See Instagram’s Privacy Policy.
• GitHub Pages: hosts this website and may process IP addresses and technical request information for hosting and security. See GitHub’s Privacy Statement.
• IONOS: supplies the domain and DNS services. See IONOS’s Privacy Policy.

There is no payment checkout on this website. Payment arrangements, and any third-party payment service involved, will be explained before you pay. The consultation form should not contain card details.

These service providers operate internationally and may process information outside the United Kingdom, including in the United States. Their privacy and transfer information explains the applicable processing locations and protections, including UK adequacy arrangements or contractual safeguards where applicable. Contact Gül for information about the services used for your records and how to obtain details of the relevant transfer safeguards.

Information is otherwise shared only when necessary and lawful, for example to meet a legal obligation or obtain advice about an actual dispute. Any disclosure is limited to the relevant information.

How long records are kept

Records are kept only while needed for the purpose below. The deletion criteria apply to copies in Gmail and on Gül’s laptop, and are reviewed when the relevant purpose ends.

• Enquiries that do not lead to a booking: deleted once the enquiry has been answered and any follow-up you requested is finished, unless a specific unresolved issue requires a relevant record.
• Consultation forms, health notes and associated consent records: kept while needed to prepare and provide your booked session or agreed course and any specific agreed follow-up. They are reviewed for deletion when that purpose ends. Withdrawal of consent may require earlier deletion.
• Necessary booking, payment and financial records: retained separately from health information for applicable UK tax and accounting record-keeping requirements. For individual self-employed tax records, this is normally at least five years after the 31 January submission deadline for the relevant tax year; different or longer requirements can apply to particular filing circumstances. See HMRC’s record-keeping guidance.

A limited relevant record may be kept longer where necessary and legally permitted for an actual dispute, legal claim or other legal obligation. For necessary legal-claim processing, we rely on legitimate interests (Article 6(1)(f)) and, where health information is strictly necessary, the legal-claims condition (Article 9(2)(f)). Health information is not automatically retained with financial records. Records are not kept indefinitely simply in case they might be useful.

Website cookies and external links

The current website does not use analytics, advertising trackers or an embedded booking or payment service. Following a link to Instagram or another website takes you to a separate service whose privacy and cookie arrangements apply.

Your rights and how to contact us

Depending on the circumstances, you can ask to access or correct your information, request deletion or restriction, object to processing based on legitimate interests, or request a portable copy where that right applies. You can withdraw consent where we rely on it. Some records may need to be retained to meet a legal obligation or address a legally permitted claim.

Email glowdom.london@gmail.com to exercise your rights or raise a concern. We normally respond within one month; if a lawful extension is needed, we will explain it. We may need to verify your identity before releasing personal information.

You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.