This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit thetatemple.com, make a purchase, book a retreat or appointment, or otherwise interact with us. We comply with UK GDPR and the Data Protection Act 2018.

1.  Who we are

EPO Performance Ltd (trading as “Theta Temple”) is the data controller responsible for your personal data.

2.  What data we collect

• Identity & Contact: name, email, phone, billing/shipping address.
• Order & Transaction: items purchased, order totals, delivery details (payment card data is processed by our payment provider; we do not store full card numbers).
• Account: login details, order history, preferences.
• Usage & Technical: IP address, device/browser, pages viewed, referral source (via cookies/analytics).
• Retreat/Service Information: information you provide about goals, relevant medical considerations or accessibility needs to help us deliver services safely (may include health data you choose to share).
• Marketing: your preferences for receiving updates.

3.  Why we use your data (lawful bases)

• Process and deliver orders; manage payments; provide customer support — Contract; Legal obligation (tax/invoicing).
• Operate the website; prevent fraud; secure our services — Legitimate interests.
• Bookings for retreats/classes; pre-event information and safety screening you choose to provide — Contract; Explicit consent for any health data; Vital interests in emergencies.
• Marketing communications — Consent (you can withdraw at any time).
• Record-keeping, finance and tax compliance — Legal obligation.

4.    Cookies & analytics

We use cookies and similar technologies to run the site and understand performance. Manage preferences via your browser or our cookie banner. See our Cookies Policy.

5. Disclosure & sharing

We share data with trusted service providers: Stripe (WooCommerce Payments), WooCommerce/plugins, our hosting and IT providers, email service provider, delivery partners, and professional advisers. We may disclose information to authorities where required by law.

6.  International transfers

Some providers may transfer data outside the UK. We use appropriate safeguards such as the UK IDTA/Addendum or Standard Contractual Clauses.

7.  Data security

We apply technical and organisational measures to secure your data (HTTPS, access controls, confidentiality obligations).

8. Data retention

• Orders/invoices: typically 6 years for tax/accounting.

• Account data: while your account remains active.

• Marketing consents: until you unsubscribe or withdraw consent.

• Health information for retreats/services: retained only as long as necessary for the booking and safety obligations, then securely deleted.

9. Your rights

You have rights to access, rectify, erase, restrict or object, and to data portability. Where we rely on consent, you can withdraw it at any time. Contact info@thetatemple.com. You can complain to the ICO (ico.org.uk, 0303 123 1113).

10. Children

Services are for adults (18+).

11. Third‑party links

We are not responsible for third‑party sites.

12) Changes to this policy

We may update this policy and will post the new version here.

13) Contact

EPO Performance Ltd (trading as “Theta Temple”), 161 Seaforth Rd, L21 4LB, Liverpool, England — info@thetatemple.com, +44 7512 518 976.