Privacy Policy
Privacy - Empowered Crystals is committed to data security and the fair and transparent processing of your personal data. This Privacy Policy sets out how we will treat the personal data which you provide to us in compliance with applicable data protection law, in particular, the General Data Protection Regulation (EU) 2016/679 (GDPR).
Please read this Policy carefully as it contains important information on who we are, how and why we collect, store, use and share personal data, your rights in relation to your personal data and how to contact us.
​
Personal data - This is data that relates to an identified or identifiable person.
Empowered Crystals collect data from you in a number of different ways. For example, we will collect personal information directly when you complete a purchase on our social media sites, communicating by phone, e-mail or in writing etc. The personal information we collect might include name, date of birth, email address, postal address, telephone number, mobile number, IP address, communication preferences, Information may also be collected indirectly for example when you use our website or engage with our social media.
​
Information we collect about you - We take appropriate measures to ensure that the information disclosed to us is kept secure, accurate and up to date. We will only keep the data for as long as necessary for the purposes for which it was collected. It should be noted that we cannot guarantee the security or integrity of any personal information which is transferred from you or to you via the internet. Any transmission is at your own risk. Once we have retrieved your information, we will use strict procedures to try and prevent unauthorised access.
How the law applies to use of personal information - The law on Data Protection is covered in various pieces of legislation, including the Data Protection Act and the May 2018 General Data Protection Regulation (GDPR). The GDPR states that personal data (information relating to a person that can be individually identified) can only be processed if there is a legal ground to do so. Collecting, storing and using personal information come under the GDPR’s definition of processing.
​
How we may use your personal information - Empowered Crystals will only process (use) your personal information in the following circumstances:
​
Consent - Where you have provided your consent to allow us to use your data in a certain way; where the processing is necessary to carry out the performance of a contract with you e.g. delivery of a course; where it is in our legitimate interests to perform our functions; where the processing is necessary in order for us to comply with a legal obligation.
​
Using your personal information in these ways helps us provide and improve our services and to keep a record of our communications with you e.g. to promote the aims of Empowered Crystals or to inform you of upcoming events.
Empowered Crystals will always ask for your consent before we communicate with you for certain purposes. For example, we will only email or phone you about our activities if we have an accurate record of your recent and freely given consent to do so. If you have given us your consent, we will contact you with information and updates on our work, products, and services. This may be by post, email, telephone, or text message, depending on your preferences. We will also continue to ask about your marketing preferences, to ensure that you are still happy to be contacted by us and by which means.
You can withdraw your consent at any time by emailing: empoweredcrystals.uk@gmail.com
There are times when it is not practical to obtain and record consent. At those times, we will only process personal information if that processing would meet another legal ground e.g. legitimate interest, in which case we would only process in accordance with the law’s strict rules on legitimate interest processing.
Contract - We may use your personal data to fulfil a contract, or take steps linked to a contract: to provide the products and/or services to you; to communicate with you in relation to the provision of the contracted products and services; to provide you with administrative support such as account creation, security, and responding to issues; provide you with information, surveys, information about our qualifications and events, offers and promotions, related to the products and/or services.
Legitimate interests - This is using data in ways people would reasonably expect e.g. Where this is necessary for purposes which are in our, or third parties, legitimate interests. These interests are: providing you with newsletters, surveys, information about the courses, qualifications and events, offers, and promotions; communicating with you in relation to any issues, complaints, or disputes; improving the quality of experience when you interact with our products and/or services, including testing the performance and customer experience of our Website; performing analytics on sales/marketing data, determining the effectiveness of promotional campaigns.
We will not unduly prioritise our interests over your interests as an individual. We will always balance our interests with your rights. We will only use personal information in a way and for a purpose that you would reasonably expect in accordance with this Statement.
Legal obligation - We may disclose your personal information when required to by law, for example, to HMRC for tax purposes or to police forces for the prevention or detection of crime.
Who do we share your personal data with? - We take all reasonable steps to ensure that our staff protect your personal data and are aware of their information security obligations. We limit access to your personal data to those who have a genuine business need to know it, for example distribution partners.
We may also share your personal data with third parties including Google analytics and Facebook or the purpose of product sales and marketing.
Third party access and use of your Personal Information will be governed by the terms of this Privacy Policy and they will be prohibited from using or sharing your Personal Information except as necessary to perform the contracted services on our behalf, or to comply with legal requirements.
Where a third-party provider used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However certain third-party services providers such as payment gateways and other payment transaction processors have their own privacy policies in respect to the information, we are required to provide to them for your purchase-related transactions.
​
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So, if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
Once you leave our Empowered Crystals page or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.
When you click on links on our page, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
How long will you keep your personal data? - Where there is a contract between us, we will retain your personal data for the duration of the contract, and for a period of six years following its termination or expiry, to ensure we are able to comply with any contractual, legal, audit and other regulatory requirements, or any orders from competent courts or authorities.
Where you have consented to marketing communications, you may change your preferences or unsubscribe from marketing communications at any time by clicking the unsubscribe link in an email from us.
Where do we store your personal data and how is it protected? - We take reasonable steps to protect your personal data from loss or destruction.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
Data Analysis - to communicate with you more effectively, better understand your preferences and ability to support our work, we may analyse your data.
Empowered Crystals does not share, sell, or swap your information with other organisation for their own marketing outside of our group.
Changes to your data - We want to ensure that your personal information is accurate and up to date. If any of the information that you have provided us with changes, e.g. if you change your email address; or if you wish to change any of your preferences please email us at: empoweredcrystals.uk@gmail.com
Internet Privacy and Cookies - Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information e.g. how long visitors stay on our website. This information is used to track visitor use of the website and to compile statistical reports on website activity.
For further information visit www.google.com/policies/technologies/cookies
You can set your browser not to accept cookies and the above website tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.
Other websites - Our website may contain links to other websites. These links are provided for your convenience and to provide you with further information or our members’ services They do not signify that we endorse the website(s). We have no responsibility for the content of the linked website(s). We likewise have no control over availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within those websites.
​
Right to Access - You have the right to request a copy of the personal data that we hold about you by contacting us at the email or postal address given below. Please include with your request information that will enable us to verify your identity. We will respond with 30 days of request. Please note that there are exceptions to this right.
Right to rectification - We aim to keep your personal data accurate and complete. We encourage you to contact us using the contact details provided below to let us know if any of your personal data is not accurate or changes, so that we can keep your personal data up-to-date.
Right to erasure - You have the right to request the deletion of your personal data where, for example, the personal data are no longer necessary for the purposes for which they were collected, where you withdraw your consent to processing, where there is no overriding legitimate interest for us to continue to process your personal data, or your personal data has been unlawfully processed. If you would like to request that your personal data is erased, please contact us via empoweredcrystals.uk@gmail.com
Right to object - If you are dissatisfied with any aspect of the way in which we process your personal data please contact us using the details above. You also have the right to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office (ICO). The ICO may be contacted via its website which is https://ico.org.uk/concerns/, by live chat or by calling their helpline on 0303 123 1113.
Right to restrict processing - In certain circumstances, you have the right to request that we restrict the further processing of your personal data. This right arises where, for example, you have contested the accuracy of the personal data we hold about you and we are verifying the information, you have objected to processing based on legitimate interests and we are considering whether there are any overriding legitimate interests, or the processing is unlawful and you elect that processing is restricted rather than deleted. Please contact us using the contact details provided below.
Right to data portability - In certain circumstances, you have the right to request that some of your personal data is provided to you, or to another data controller, in a commonly used, machine-readable format. This right arises where you have provided your personal data to us, the processing is based on consent or the performance of a contract, and processing is carried out by automated means. If you would like to request that your personal data is ported to you, please contact us using the contact details provided below.
Please note that the GDPR sets out exceptions to these rights. If we are unable to comply with your request due to an exception, we will explain this to you in our response.
Changes to our policy - This policy was last updated in June 2025. From time to time, we will make changes to the information on this page. The updated policy will apply from the date it is posted on the site and will govern the way in which we collect, store and use personal information from then on.
Contact - If you have any queries about this Policy, the way in which Empowered Crystals processes personal data, or about exercising any of your rights, please send an email to empoweredcrystals.uk@gmail.com