Privacy Policy
SophroFocus website is owned and operated by SophroFocus, a sole trader business based in Scotland, UK. SophroFocus is the data controller of your personal data.
We have adopted this Privacy Policy to explain how we process and protect information collected through the SophroFocus website and the SophroStudio app. Please read this Privacy Policy carefully before using our website or purchasing any course or programme.
We take care of your personal data and are committed to guaranteeing its confidentiality and security in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Personal information we collect:
When you visit SophroFocus, we automatically collect certain information about your device, including your web browser, IP address, time zone, and cookies installed on your device. As you browse the site, we collect information about the pages you view, how you arrived at the site, and how you interact with it. We refer to this as "Device Information."
We may also collect personal data you provide directly to us, including but not limited to:
Name and email address (when signing up for our newsletter or contact forms)
Name, email address and account credentials (when registering for a course or programme through the SophroStudio app)
Payment information (processed securely by Stripe — see below)
For course participants, we collect and process your name and email address through the SophroStudio app in order to provide access to course materials, recordings and communications. This data is stored securely on servers within the European Union.
Why do we process your data?
We process your personal data for the following purposes:
To operate and maintain our website
To fulfil contracts with you, including providing access to courses and programmes you have purchased
To send you our newsletter or marketing communications where you have consented to receive them
To respond to your enquiries and provide customer support
To comply with our legal obligations
To identify potential cases of abuse and maintain website security
We will only process the minimum data necessary for each purpose.
Third-Party Processors
We use the following trusted third-party services to operate our business. Each acts as a data processor on our behalf:
Stripe Inc. — processes all payment transactions securely. We do not store your payment card details. Please refer to Stripe's privacy policy at stripe.com/gb/privacy for more information.
Supabase — hosts the SophroStudio app and stores course participant data on servers within the European Union.
MailerLite — manages our email newsletter and marketing communications. Data is processed in accordance with MailerLite's privacy policy.
Your rights:
As a UK or European resident, you have the following rights in relation to your personal data:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision-making and profiling
To exercise any of these rights, please contact us at sarah@sophrofocus.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been processed unlawfully.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. For course participants, your data will be retained for the duration of your access period and for a reasonable period thereafter in accordance with our legal obligations.
Links to other websites:
Our website may contain links to third-party websites not owned or controlled by us. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal data.
Information security:
We store information you provide in a controlled, secure environment protected from unauthorised access, use or disclosure. We maintain reasonable administrative, technical and physical safeguards to protect your personal data. However, no data transmission over the internet or wireless network can be guaranteed to be completely secure.
Legal disclosure:
We will disclose personal data if required or permitted by law, such as to comply with a court order or legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect the safety of others, investigate fraud, or respond to a government request.
Contact information:
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Sarah Kiersgaard
SophroFocus
sarah@sophrofocus.co.uk
https://sophrofocus.co.uk
This Privacy Policy was last updated: August 2026
SophroFocus is based in Scotland, UK. This policy is governed by UK GDPR and the Data Protection Act 2018.
