Privacy Policy

Last updated: 23 July 2026

Haven (“Haven”, “we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal information we collect when you use haven.ist, why we collect it, and what rights you have over it.

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Data controller: Urownpath
Email: info@urownpath.com

If you have any questions about this policy or how we handle your information, please contact us at the email address above.

2. Information we collect

Information you give us directly

• Urownpath sign-up: your name, email address, and (optionally) your phone number.
• Discovery calls and enquiries: your name, email address, and anything else you choose to share when you contact us.
• Sessions and services: if you become a client, we may keep notes relating to your sessions and the support you have asked for.

Information collected automatically

• Technical data such as your IP address, browser type, device type, pages visited, and time spent on the site. This is collected through our website hosting and any analytics tools we use.
• Cookies and similar technologies — see section 8.

Special category data

Some of what you share with us during sessions or enquiries may relate to your health or wellbeing. This is treated as “special category data” under UK GDPR and given additional protection. We only process it where you have given us your explicit consent, and you can withdraw that consent at any time.

3. Why we use your information, and our lawful basis

You can withdraw consent at any time by emailing us or using the unsubscribe link in any email. Withdrawing consent does not affect processing carried out before you withdrew it.

4. Who we share it with

We do not sell your personal information, and we do not share it for advertising purposes.

We may share it with service providers who help us run Haven, including:

• Website hosting and website platform providers
• Email and newsletter providers
• Booking and scheduling tools
• Payment processors
• Analytics providers

These providers only process your data on our instructions and are bound by their own confidentiality and data protection obligations.

We may also disclose information where we are legally required to do so, or where there is a serious risk of harm to you or another person.

International transfers: some of our providers are based outside the UK. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum.

5. How long we keep it

• Circle and mailing list data: until you unsubscribe, plus a short period to record your opt-out.
• Enquiries that do not become bookings: up to 12 months.
• Client and session records: 1 years after our last contact with you, in line with professional and insurance requirements.
• Financial records: at least 6 years, as required by HMRC.
• Website analytics: 12 months.

6. How we protect it

We use appropriate technical and organisational measures to keep your information secure, including encrypted connections (HTTPS), access controls, and secure storage of session notes. No system is completely secure, but we take our responsibility here seriously — particularly given the sensitive nature of the work.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”) in certain circumstances
• Restrict how we process your data
• Object to processing based on legitimate interests, and to direct marketing at any time
• Data portability — receive your data in a portable format
• Withdraw consent at any time
• Not be subject to solely automated decision-making

To exercise any of these rights, email info@urownpath.com. We will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office:

ICO — ico.org.uk — 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would appreciate the chance to address your concerns first.

8. Cookies

Our website uses cookies to function properly and to understand how visitors use the site.

• Essential cookies — required for the site to work. These do not need your consent.
• Analytics cookies — help us understand which pages are visited and how the site performs.
• Functional cookies — remember your preferences.

Under UK law we must obtain your consent before setting non-essential cookies. You can manage your preferences through our cookie banner or by adjusting your browser settings. Blocking cookies may affect how parts of the site work.

[If you use a cookie banner or consent tool, name it here and link to the preference settings.]

9. Children

Haven’s services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with their information, please contact us and we will delete it.

10. Third-party links

Our website may link to other sites. We are not responsible for their privacy practices, and we encourage you to read their policies before sharing any information with them.

11. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the date of the most recent update shown at the top. Where changes are significant, we will let you know directly.

12. Contact

urownpath
info@urownpath.com