privacy policy
who is responsible
Maya (the “host”) runs these sessions and is responsible for your personal data as the “controller”. Holdspace, software operated by DRMAMU LLC, USA, provides the booking platform and processes your data on the host’s behalf, only in order to run it. if you have any question about your data, please write to maya@example.com.
what is collected
the host collects your email address and first name, which are needed to sign you in and to send you your tickets, reminders and access to the sessions; your timezone, so that times can be shown in yours; a record of your tickets, memberships (including a free trial), 1:1 packages and payments (the amounts only, never your card details); which discount codes you used, so that a code meant for one use per person works once only; the email addresses and first names you enter when you buy tickets for friends; and whether you joined a session. if you take part in the affiliate program, the host also stores who joined through your link, your commissions and the payout details you enter (for example a PayPal email address, a Wisetag, a Revolut phone number or bank details).
zoom
the sessions take place on zoom. to give you a personal link to join, your email address and first name are shared with zoom as a meeting registrant, and in zoom, the other participants see your first name. zoom processes your audio and video while you are in the meeting, under its own privacy policy. whether your camera is on is always your choice. the host does not record the sessions.
payments
payments are processed by Stripe on the host’s own Stripe account. neither the host nor Holdspace ever sees or stores your full card details; only the information needed to recognise your purchase is kept, namely the amount, the status and the Stripe identifiers. the host keeps payment records for as long as the law requires, for example for bookkeeping and tax purposes.
transactional emails, such as sign-in links, confirmations, reminders and notices about your membership, are sent through the email provider Resend. your email address is used to run your account and your bookings and to inform you about the sessions you have a place in.
friends’ email addresses
if you enter a friend’s email address and first name to buy them a ticket, this information is used only to invite them to that session. please only enter the details of people who are happy to hear about it.
cookies and analytics
necessary cookies keep you signed in and remember an affiliate link you followed (for 60 days); a discount code from a link is kept in your browser tab only, until you close it. on the booking, live and account pages, Holdspace uses product analytics (Amplitude, on servers in the EU) with a pseudonymous device ID, including a session replay that masks everything you type, in order to find problems and improve the platform. you can find more details in Holdspace’s privacy policy.
legal bases
your data is processed to perform the contract with you, that is, to give you your tickets and your membership; to meet legal obligations, such as keeping tax records; and on the basis of the legitimate interest in running, securing and improving the sessions and the platform, which is always weighed against your rights. where the law requires consent, for example for non-essential analytics, it is asked for first. your data is never sold.
how long it is kept
account and booking data is kept for as long as you have bookings with the host and for as long as the law requires, for example for payment records needed for tax purposes. all other data can be deleted at your request at any time.
your rights (GDPR)
you have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. to exercise these rights, please write to maya@example.com. the host can delete your personal data from their records on Holdspace: your name and email address are then removed, and only anonymised payment records remain for bookkeeping. this only affects the host’s own records, so if you also book with other hosts on Holdspace, your data with them remains as it is. you also have the right to lodge a complaint with your local data protection authority. you must be at least 18 years old to book.
changes
this policy may be updated from time to time, and material changes will be announced by email or on this page.