Privacy Policy
Privacy Policy
Breatheolution | Human Performance | Resilience
Website: www.breatheolution.com
Contact: hello@breatheolution.com
Last updated: 29 October 2026
1. Introduction
At Breatheolution, trust, safety and respect are at the heart of everything we do.
Whether you are visiting our website, booking a coaching session, attending a workshop or participating in one of our training programmes, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
Breatheolution is operated by Kevin O’Neill as a Sole Trader based in the United Kingdom.
We are responsible for the personal information we collect and use when providing our own services.
2. Information We Collect
Depending on how you interact with Breatheolution, we may collect:
Personal and contact information
Name, email address and telephone number.
Booking details and course registrations.
Billing information and payment records.
Communications through email, telephone or messaging services.
Health, coaching and wellbeing information
Relevant medical conditions and health history.
Medications and information relevant to participation safety.
Physical and emotional wellbeing.
Coaching goals, progress and personal reflections.
Information provided through health screening questionnaires.
Website information
IP address, browser and device information.
Website usage and interaction data.
Cookie preferences and information collected through applicable website technologies.
We aim to collect only information that is necessary and appropriate for the relevant purpose.
3. How We Use Your Information
We may use your personal information to:
Respond to enquiries and manage appointments.
Provide coaching, breathwork and nervous system regulation sessions.
Deliver cold-water, sauna and contrast therapy activities.
Deliver instructor training and educational programmes.
Conduct appropriate participant health and safety screening.
Process payments and maintain business records.
Support individual coaching progress.
Meet applicable legal, insurance and safeguarding requirements.
Improve the accessibility, quality and effectiveness of our services.
Send relevant marketing communications where legally permitted.
We do not sell personal information or use sensitive health information for unrelated marketing activities.
4. Legal Basis for Processing Personal Data — Article 6 UK GDPR
Under Article 6 of the UK General Data Protection Regulation, Breatheolution must identify a lawful basis for collecting and processing personal information.
Depending on the purpose, we may rely on the following:
Article 6(1)(a) — Consent
Where you have given clear permission for a specific purpose, such as receiving marketing communications or allowing certain optional cookies.
You may withdraw consent at any time.
Article 6(1)(b) — Performance of a Contract
Where processing is necessary to provide a service you have requested or to take steps before entering into a contract.
This may include managing coaching appointments, course bookings, participant registrations and communications necessary to deliver agreed services.
Article 6(1)(c) — Legal Obligation
Where processing is necessary to comply with applicable legal requirements, such as maintaining required accounting, tax or other statutory records.
Article 6(1)(f) — Legitimate Interests
Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
This may include responding to business enquiries, maintaining website security, preventing misuse, administering business relationships and improving our services.
Where we rely on legitimate interests, we assess the purpose, necessity and potential impact on individuals.
Where we process special category information, including health information, an additional condition under Article 9 must also apply.
5. Special Category Data — Article 9 UK GDPR
Certain information collected during our activities requires additional protection under data protection law.
Under Article 9 of the UK GDPR, information relating to an individual's physical or mental health is classified as special category personal data.
This may include:
Medical conditions and relevant medical history.
Prescription medications and contraindications.
Cardiovascular or respiratory health information.
Information about psychological or emotional wellbeing.
Relevant trauma-related information voluntarily disclosed during coaching.
Health screening responses associated with participation in our activities.
Breatheolution recognises the sensitivity of this information and the importance of maintaining appropriate confidentiality and security.
Article 9(2)(a) — Explicit Consent
Where appropriate, Breatheolution relies on Article 9(2)(a), which permits the processing of special category data where the individual has provided valid explicit consent for one or more specified purposes.
This may include collecting and reviewing relevant health information to:
Assess suitability for breathwork, cold-water immersion, sauna or contrast therapy.
Identify potential contraindications.
Understand individual safety requirements.
Make appropriate adjustments to coaching or activities.
Support informed participation decisions.
Where we rely on explicit consent, we will explain what information is requested, why it is needed and how it will be used.
Consent will be requested through a clear, specific statement, separately from unrelated permissions.
You may withdraw consent at any time by contacting us.
Withdrawing consent does not affect processing already lawfully undertaken. Where necessary information is no longer available, we may be unable to continue an activity if it cannot be delivered safely without that information.
Article 9(2)(f) — Legal Claims
Where necessary, Breatheolution may also process relevant special category information under Article 9(2)(f) for the establishment, exercise or defence of legal claims.
This may include information genuinely required to respond to an incident, obtain legal advice, address an insurance claim or establish or defend legal rights.
This condition is applied only where the processing is necessary for the relevant legal purpose.
Our Commitment to Sensitive Information
We aim to:
Collect only relevant and proportionate health information.
Restrict access to people with a genuine need to know.
Use appropriate security and confidentiality measures.
Avoid unnecessary disclosure.
Retain information only for an appropriate and justified period.
Respect individuals' data protection rights.
6. Health Screening and Participant Safety
Some Breatheolution activities require health and safety screening before participation.
Screening may consider medical conditions, medications, cardiovascular concerns, respiratory health and other relevant factors that could affect participation in breathwork, cold-water immersion, sauna or contrast therapy.
Where digital screening systems such as Sentinel are used, participants may receive safety indicators intended to support informed participation decisions.
These indicators do not constitute a medical diagnosis or replace appropriate professional medical advice.
[Confirm whether any Sentinel decisions are made solely through automation, whether human review is available and whether additional automated decision-making disclosures are legally required.]
Where Sentinel is provided to other organisations, the respective data protection responsibilities and any separate privacy notices will depend on how the system is operated.
7. Payments and Bookings
Breatheolution may use third-party services to manage bookings, payments and registrations.
These may include:
Stripe: Payment processing and subscriptions.
Calendly: Appointment scheduling.
Tally: Online forms and registrations.
These providers process relevant information in accordance with their applicable privacy terms and contractual responsibilities.
Full payment card details are processed by our payment provider rather than being collected directly by Breatheolution.
8. Communication and Third-Party Services
We may use services including Squarespace, email, Zoom and WhatsApp to communicate with clients, manage our website or deliver services.
Relevant information may also be shared with professional advisers, insurers or authorities where necessary and lawful.
We do not sell personal information.
9. Cookies and Website Analytics
Our website uses cookies and similar technologies for functionality, security and, where enabled, analytics or marketing.
Essential technologies help the website operate. Non-essential technologies are used only in accordance with applicable consent and privacy requirements.
Visitors can manage available cookie preferences through our website controls and browser settings.
[Insert link to cookie preferences or a separate Cookie Policy.]
10. Data Retention and Secure Deletion
Breatheolution is committed to protecting personal information and ensuring that sensitive data is not retained longer than necessary.
Sentinel Health Screening Records
Personal and medical information collected through our Sentinel health screening system is retained for one month following completion of the screening.
After this period, screening records are deleted from the Sentinel system in accordance with our data retention procedures.
This approach is designed to minimise the unnecessary storage of sensitive health information and support compliance with the storage limitation principle under Article 5(1)(e) of the UK GDPR.
Where fully anonymised statistical information is retained for reporting or service improvement, it will not contain information that can reasonably identify an individual.
Other Business Records
Other records, including coaching information, training registrations, payment transactions and business correspondence, may have different retention periods depending on applicable contractual, legal, accounting and insurance requirements.
When personal information is no longer required, it will be securely deleted or anonymised as appropriate.
11. Information Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, alteration, loss or disclosure.
These measures may include secure accounts, appropriate access controls, reliable service providers and careful handling of sensitive records.
No digital system is completely risk-free, but we take the protection of personal information seriously.
12. International Data Transfers
Some third-party technology providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that an appropriate legal transfer mechanism or safeguard is used where required.
These may include UK adequacy regulations or approved contractual safeguards.
13. Your Rights Under UK GDPR
Depending on the circumstances, you may have the right to:
Access your personal information.
Correct inaccurate or incomplete information.
Request deletion of information.
Restrict certain processing activities.
Object to certain types of processing.
Request data portability.
Withdraw consent where processing relies on consent.
Exercise rights relating to certain automated decisions.
These rights are subject to applicable legal requirements and exemptions.
To exercise your rights, please contact:
You also have the right to complain to the Information Commissioner's Office (ICO).
Website: www.ico.org.uk
14. Marketing Communications
Breatheolution may occasionally send information about coaching, training programmes, workshops or educational opportunities.
Marketing communications will only be sent where permitted by applicable law.
Where consent is required, we will obtain it.
You can unsubscribe or update your marketing preferences at any time.
15. Photography, Video and Testimonials
Photographs, videos or testimonials featuring identifiable individuals may be used for education, promotion or communication where an appropriate legal basis exists.
Where we rely on consent for promotional use, permission will be requested separately from agreement to participate in an activity.
You may contact us if you have concerns about content featuring you.
16. Changes to This Privacy Policy
We may update this policy to reflect changes in our services, legal obligations or technology.
The most recent version will be available through our website.
Where changes materially affect the handling of personal information, appropriate notice will be provided.
17. Contact Information
For questions about this Privacy Policy, your information or your data protection rights, contact:
Breatheolution
Human Performance | Resilience
Website: www.breatheolution.com
Email: hello@breatheolution.com
At Breatheolution, respecting personal information is part of our wider commitment to safety, trust, informed choice and responsible practice.