PRIVACY NOTICE 

Controller 

Spirit Mountain Ltd a company registered in England and Wales 12784521 registered  address Flat 5 30 St. James's Place, London, England, SW1A 1NR (‘Company, we, us,  our’). The Company obtains, keeps and uses information about you for a number of  specific lawful purposes. The Company is a “data controller”. This means that we are  responsible for deciding how we hold and use personal information about you.  

Platform 

The company operates the website www.spiritmountain.co.uk . The website together with  any functionality through which you are able to purchase our products and services is  referred to as our Platform (Platform). The use of our Platform is subject to our Terms of  Use. Our Platform is not intended for children and we do not knowingly collect data relating  to children.  

Scope 

The Company respects your privacy and is committed to protecting your personal data. We  take the security and privacy of data seriously and are committed to complying with our  legal obligations under the Data Protection Act 2018 (the ‘2018 Act’) and the EU General  Data Protection Regulation (‘GDPR’) in respect of data privacy and security. Our use of your  personal data is subject to your instructions, the GDPR, other relevant UK and EU  legislation.  

This Privacy Notice applies to the personal data we process as a data controller. You  provide some of this data directly, and we get some of it by collecting data about your  interactions, use, and experiences within the Platform or when you receive the services.  The data we collect depends on the context of your interactions with us and the choices  you make, including the products and features you use. We also may obtain data about you  from third parties. 

When you use our Platform, through another account holder, the processing of your  personal data is determined and administered by that account holder under its privacy  policies. If you have questions about how and why your personal data is collected, the legal  basis for processing, or requests regarding your personal data, please refer to the account  holder’s privacy statement and direct your inquiries to the account holder or its  administrator. 

Purpose of the policy  

This privacy notice aims to give you information on how the Company collects and  processes your personal data including any data you may provide through our Platform  when you:  

• sign up to our newsletter;  

• enquire about our products and services;  

• when you purchase our products or services; 

• join us as a teacher. 

Please read this privacy policy carefully as it contains important information on who we are  and how and why we collect, store, use and share information about you. It also explains  your rights in relation to your information and how to contact us or supervisory authorities in  the event you have a complaint.  

This policy applies to all data, whether it is stored electronically, on paper or on other  materials.  

Changes to this policy  

We will review and update this notice regularly in accordance with our data protection  obligations. We will circulate any new or modified policies or notices in relation to your data  when it is adopted on our Platform. It is important that you read and understand this notice  before you share with us any personal data.  

Your queries and complaints 

We are not required to appoint Data Protection Officer however we have appointed an  Information Manager who is responsible for overseeing questions in relation to this privacy  notice. If you have any questions about this privacy notice, including any requests to  exercise your legal rights, please contact our Information Manager using the details set out  below.  

N:          Krystyna Butina  

E:           info@spiritmountain.co.uk  

T:           N/A  

A:           N/A  

We hope that Information Manager can resolve any query or concern you raise about our  use of your information. However, if you feel that we have failed to address your concerns  appropriately, you can contact the Information Commissioner at ico.org.uk/concerns/ or  telephone: 0303 123 1113 for further information about your rights and how to make a  formal complaint.  

Third Party Links 

Our Platform may include links to third-party websites, plug-ins and applications. Clicking  on those links or enabling those connections may allow third parties to collect or share data  about you. We do not control these third-party websites and are not responsible for their  privacy statements. When you leave our Platform, we encourage you to read the privacy  notice of every website you visit.  

When you purchase our services or products through another account holder, (i.e.  Facebook, Pintrest or any other platform), processing of your personal data is determined  and administered by that account holder under its privacy policies. If you have questions  about how and why your personal data is collected, the legal basis for processing, or  requests regarding your personal data, please refer to the account holder’s privacy  statement and direct your inquiries to the account holder or its administrator. 

Data protection principles 

When processing your data, the Company will comply with the following data protection  principles when processing information:  

• we will process personal information lawfully, fairly and in a transparent manner;  

• we will collect personal information for specified, explicit and legitimate purposes  only, and will not process it in a way that is incompatible with those legitimate  purposes;  

• we will only process the personal information that is adequate, relevant and  necessary for the relevant purposes;  

• we will keep accurate and up to date personal information, and take reasonable  steps to ensure that inaccurate personal information is deleted or corrected without  delay;  

• we will keep personal information in a form which permits identification of data  subjects (you) for no longer than is necessary for the purposes for which the  information is processed; and  

• we will take appropriate technical and organisational measures to ensure that  personal information is kept secure and protected against unauthorised or unlawful&n