Privacy policy

Self Awareness Lab™ (“we”, “us”, “our”) respects your privacy. This Policy explains what personal information we collect, how we use it, and the choices available to you when you visit our website, enquire about a cohort, apply to participate, book a consultation, or join our mailing list.

We operate self-awareness workshops for young adults (from age 16) hosted at Casa Shalimar in La Herradura, Spain, and we often communicate with both participants and their parents or guardians.

1. Who is responsible

For the purposes of applicable data protection law (including the EU General Data Protection Regulation, “GDPR”), the data controller is Self Awareness Lab™. For privacy questions, contact us at hello@selfawarenesslab.org.

2. Information we collect

We may collect:

• Identity and contact details — name, email address, phone number, postal address, and relationship to a participant (e.g. parent/guardian).
• Enquiry and application information — messages you send us, consultation notes you choose to share, programme interests, preferred cohort dates, and any background you provide to help us assess fit.
• Participant information — age or date of birth, emergency contacts, relevant health or accessibility needs you voluntarily disclose for safe programme delivery, and travel or stay logistics related to Casa Shalimar.
• Communication preferences — newsletter signup status and marketing opt-ins/opt-outs.
• Technical data — IP address, browser type, device information, and approximate location derived from standard web logs or analytics, if enabled.

We do not require sensitive information to browse the site. If you share health, wellbeing, or other special-category information during an application or consultation, we process it only as needed to deliver the programme safely and with your (or a guardian’s) appropriate consent or another lawful basis.

3. How we use information

We use personal information to:

• Respond to enquiries and schedule consultations
• Evaluate applications and manage cohort admissions
• Plan and deliver workshops, including logistics at Casa Shalimar
• Communicate with participants and parents/guardians
• Send occasional updates about upcoming cohorts if you have opted in
• Improve our website and understand aggregate traffic patterns
• Meet legal, accounting, and safeguarding obligations

4. Legal bases (EEA / UK visitors)

Where GDPR or UK GDPR applies, we rely on:

• Contract / pre-contract steps — to handle applications, bookings, and programme delivery
• Legitimate interests — to operate and improve our services, ensure safety, and respond to general enquiries, balanced against your rights
• Consent — for optional marketing emails and, where required, for certain special-category data
• Legal obligation — where we must retain or disclose information under applicable law

You may withdraw consent at any time without affecting prior processing.

5. Young adults and parents

Our programme is for young adults from age 16. Where a participant is under the age of legal majority, we may collect and share necessary information with a parent or guardian for enrolment, consent, travel, emergency contact, and wellbeing purposes. We ask adults submitting information about a young person to confirm they have authority to do so.

6. Sharing

We do not sell personal information. We may share information with:

• Service providers who help us operate (e.g. email, hosting, payment, or scheduling tools), under appropriate agreements
• Venue or logistics partners connected to Casa Shalimar, only as needed for accommodation and on-site delivery
• Professional advisers or authorities when required by law or to protect rights, safety, and security

If we transfer data outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses where required.

7. Retention

We keep personal information only as long as needed for the purposes above: typically for the duration of an enquiry or programme relationship, and thereafter for a limited period to meet legal, safeguarding, and legitimate business record requirements. Marketing contacts are retained until you unsubscribe or we retire the list.

8. Security

We use reasonable technical and organisational measures to protect personal information. No method of transmission or storage is completely secure; please use caution when sending sensitive details by email.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information; to object to certain processing; to data portability; and to withdraw consent. You may also lodge a complaint with your local supervisory authority.

To exercise these rights, email hello@selfawarenesslab.org.

10. Cookies and analytics

Our site may use essential cookies to function and, if enabled, limited analytics to understand aggregate usage. Where required, we will request consent before non-essential cookies are set. You can control cookies through your browser settings.

11. International visitors

Our workshops take place in Spain and we may process information in the EU and other countries where our providers operate. By using the site or submitting information, you understand that your data may be processed in those locations subject to this Policy.

12. Changes

We may update this Policy from time to time. The effective date at the top will change when we do. Continued use of the site after an update constitutes acceptance of the revised Policy where permitted by law.

13. Contact

Self Awareness Lab™
Programme location: Casa Shalimar, La Herradura, Spain
Email: hello@selfawarenesslab.org

This Policy is provided for transparency and is not legal advice. We recommend reviewing it with counsel for your jurisdiction before relying on it as a final compliance document.