Sign up for our newsletter to get 10% OFF your first order! Sign Up Now

Sign up for our newsletter to get 10% OFF your first order! Sign Up Now

Join our Community

Sign up for our newsletter to receive Ayurvedic insights, event updates, and 10% off your first order.

Subscribe

By signing up, you have read and agreed to our T&Cs, Privacy Policy and for us to send you a newsletter. You can unsubscribe at any time.

Privacy Policy

Last updated: 18 Aug 2026

1. Introduction

Welcome to Marma Ayurveda. We are committed to protecting your privacy and ensuring that your personal data is handled securely, transparently, and lawfully. This Privacy Policy has been designed in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and aligns with the data processing frameworks outlined in the Data Use and Access Act (DUAA).

This policy explains how we collect, use, process, and store your personal data when you interact with our website, book Ayurvedic consultations or Kalaripayattu training, undergo Marma therapy, or purchase physical and digital products from our shop.

2. Identity of the Data Controlle

Currently, services and products are provided by Karolina Raczynska as a sole trader. Later this year, operations will transition to a registered limited company, Marma Ayurveda Ltd.

For the purposes of data protection legislation, the data controller responsible for processing your data is: Karolina Raczynska trading as Karuna Yoga and Ayurveda (and Marma Ayurveda) Postal Address: Office 345, Unit 5, 399–405 Oxford Street, London, W1C 2BU, United Kingdom
Contact Email: hello@marmaayurveda.org

3. Legal Basis for Processing Your Data

Under the UK GDPR and DPA 2018, we process personal data only when we have a lawful basis for doing so:

  • 3.1. Contractual Obligation: To process shop orders (e.g., copperware, cosmetics), provide access to online courses, or fulfill bookings for consultations, therapies, and training sessions.
  • 3.2. Legitimate Interests: For essential business operations, including confirming appointments, managing website security, tracking non-intrusive analytics to improve our services, and maintaining our records (in line with DUAA guidelines for simplified business processing).
  • 3.3. Legal Obligation: To comply with HMRC tax and accounting regulations, as well as statutory health record-keeping requirements.
  • 3.4. Vital Interests: If we believe there is a serious, immediate risk to your health or safety, we may share information with emergency services.
  • 3.5. Consent (Marketing & Cookies): To send you newsletters, promotional offers (such as your 10% welcome discount), or use tracking cookies. You can withdraw this consent at any time.

4. Special Category Data (Health Data)

Because we offer Ayurvedic consultations and Marma therapy, we collect information concerning your health (e.g., dosha assessments, physical conditions, and medical history). Under UK GDPR, this is classified as "Special Category Data." We only process this highly sensitive data under the following conditions:

  • With your explicit written consent (gathered via our intake forms prior to your consultation or treatment).
  • For the purposes of providing preventative or occupational medicine, medical diagnosis, or the provision of health or social care.

5. Information We Collect

We collect personal data when you:

  • Book an Ayurvedic consultation, Marma treatment, or Kalaripayattu class.
  • Purchase a product, gift voucher, or online course from our shop.
  • Sign up for our mailing list to receive the 10% discount.
  • Fill out an intake, contact, or health history form.

5.1. Types of Data Collected

  • Identification & Contact Info: Name, email address, phone number, billing, and shipping address.
  • Health & Medical Data: Dosha constitution, relevant medical history, lifestyle details, and clinical notes (collected strictly for consultations and therapy).
  • Payment Data: Payment method details (processed securely via our payment gateway; we do not hold full credit card details on our servers).
  • Technical/Browsing Info: IP address, browser type, device type, and basic interactions with our website.
  • Minor Data: We do not knowingly collect data from minors unless it is essential for a consultation or training session, and strictly under explicit parental/guardian consent.

6. Cookies & Tracking Technologies

Our website uses cookies to function correctly, process shopping carts, and analyze site traffic. In line with DUAA reforms, we may utilize low-risk, non-intrusive analytics cookies to ensure website functionality without requiring disruptive banners, but we will always ask for explicit consent for marketing or third-party tracking cookies. Please see our separate [Cookie Policy] for full details and to manage your preferences.

7. Third-Party Services & Data Sharing

We do not sell your data. We only share it with trusted third parties necessary to run our business:

  • Payment Gateways: (e.g., Stripe, PayPal) for secure transaction processing.
  • Shipping & Fulfillment: (e.g., Royal Mail, Couriers) to deliver your physical shop orders.
  • Marketing Platforms: (e.g., Mailchimp) to deliver newsletters, provided you have opted in.
  • Healthcare Providers/Authorities: Only with your explicit request, or if legally mandated.

7.1 Sharing within our Partner Network:

To provide a seamless experience, fulfill your orders, and manage our administrative operations, we may share your personal data (such as name, contact details, and transaction history) between our two primary operating entities:

  • Karuna Yoga & Ayurveda (Registered in the UK: Office 345, Unit 5, 399–405 Oxford Street, London, W1C 2BU)
  • Marma Ayurveda Piotr Czopek (Registered in Poland: ul. Leżakowa 9, 93-430 Łódź, NIP: 9442127860) Both entities operate under strict data protection standards and act as Joint Data Controllers for the purposes of managing website operations, customer service, and business administration.

Note regarding health data: Highly sensitive health information, such as consultation notes from private Ayurvedic or Marma therapy sessions, will only be accessed by the specific practitioner you are working with, unless you give explicit, separate consent for us to share your case file between practitioners.

7.2 International Data Transfers (Transfers to the EEA)

Because our partner entity, Marma Ayurveda Piotr Czopek, is located in Poland, certain administrative and transactional personal data may be transferred outside the United Kingdom to the European Economic Area (EEA).

We conduct these transfers lawfully under Article 45 of the UK GDPR, relying on the UK Government’s Adequacy Regulations for the EEA. The UK officially recognises all EEA member states, including Poland, as providing an adequate level of data protection. This means your personal data remains fully protected under equivalent high legal standards when shared between our UK and EU entities.

8. Data Retention

We retain your data only for as long as necessary:

  • Health/Consultation Records: Retained for a minimum of 8 years after your last consultation (standard UK practice for health records), or until a minor client reaches age 25.
  • Transactional & Tax Data: Kept for 6 years from the end of the financial year in which the transaction occurred, to comply with UK HMRC requirements.
  • Marketing Data: Retained until you unsubscribe or withdraw your consent.

9. Your Rights Under UK GDPR

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request corrections to inaccurate or incomplete data.
  • Erasure: Request the deletion of your data (the "right to be forgotten"), subject to our legal obligations to retain tax or health records.
  • Restriction/Objection: Limit or object to how we process your data.
  • Portability: Request your data be transferred to another provider.

To exercise any of these rights, please contact us via our Contact page.

10. Complaints & Dispute Resolution

We take your privacy seriously. Under the Data Use and Access Act (DUAA), you have a statutory right to lodge a data protection complaint directly with us. If you have any concerns about how we have handled your personal data, you must contact us first via our Contact Form or at [Insert Email Address]. We will acknowledge your complaint and work to investigate and resolve the issue within 30 days.

If you remain unhappy with our response after following this internal procedure, you have the right to escalate your complaint to the UK's supervisory authority, the Information Commissioner’s Office (ICO). Website: www.ico.org.uk Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Policy Updates

We may update this policy occasionally to reflect changes in our services, the transition to Marma Ayurveda Ltd, or updates to UK data protection legislation. Updates will be posted on this page.

Last Updated: 5th August 2026