Privacy Policy

This Privacy Policy explains how Legnai, operated by Elevate Gateway Ltd (“Legnai”, “we”, “our”, or “us”), collects, uses, stores, and protects your personal information when you visit our website, contact us, book events or retreats, participate in our services, or otherwise engage with our offerings.

We are committed to protecting your privacy and processing personal data in accordance with:

  • the UK General Data Protection Regulation (“UK GDPR”) 
  • the Data Protection Act 2018 
  • and other applicable UK privacy and data protection laws. 

By using this website or engaging with our services, you acknowledge and agree to the practices described in this Privacy Policy.

  1. WHO WE ARE

Legnai is a trading name of Elevate Gateway Ltd, registered in England and Wales.

Company Number: 17208008

For any privacy-related enquiries, you may contact us through the contact details provided on our website.

  1. THE INFORMATION WE COLLECT

We may collect, store, and process the following categories of personal information:

Personal Identification Information

  • name 
  • email address 
  • telephone number 
  • billing address 
  • emergency contact information (where relevant) 

Booking & Event Information

  • event or retreat bookings 
  • workshop registrations 
  • attendance information 
  • booking history 
  • payment confirmations 

Health & Wellbeing Information

Where voluntarily provided and reasonably necessary for participation in wellness activities, retreats, yoga, movement, breathwork, somatic, or wellbeing experiences, we may collect limited health-related information such as:

  • allergies 
  • injuries 
  • accessibility requirements 
  • medical considerations relevant to participation 

We only collect such information where reasonably necessary for safety, wellbeing, accessibility, or operational purposes.

Technical Information

When you use our website, we may automatically collect:

  • IP address 
  • browser type 
  • device information 
  • pages visited 
  • website usage data 
  • cookies and analytics information 
  1. HOW WE COLLECT YOUR INFORMATION

We may collect information:

  • when you complete booking forms 
  • when you contact us 
  • when you subscribe to newsletters or mailing lists 
  • when you attend events or retreats 
  • when you complete health or participation forms 
  • when you use our website 
  • through cookies and analytics technologies 
  • through social media interactions 
  • through third-party booking or payment platforms 
  1. HOW WE USE YOUR INFORMATION

We may use your personal information for the following purposes:

  • processing bookings and payments 
  • communicating about events, retreats, or services 
  • customer support and enquiries 
  • health and safety management 
  • providing requested services 
  • improving our website and offerings 
  • internal administration and record keeping 
  • fraud prevention and security 
  • legal and regulatory compliance 
  • sending newsletters or marketing communications where consent has been provided 
  1. LEGAL BASIS FOR PROCESSING

Under UK GDPR, we process personal data on one or more of the following lawful bases:

Contractual Necessity

Where processing is necessary to fulfil bookings, provide services, or manage participation.

Legitimate Interests

Where processing is reasonably necessary for:

  • operating our business 
  • improving services 
  • maintaining security 
  • communicating with participants 
  • managing events and retreats 

Consent

Where consent is required, including:

  • email marketing 
  • optional mailing lists 
  • certain cookies 
  • voluntary health information 

You may withdraw consent at any time.

Legal Obligations

Where processing is necessary to comply with legal or regulatory obligations.

  1. HEALTH & WELLBEING INFORMATION

Certain activities offered by Legnai may involve wellness, movement, yoga, somatic, mindfulness, meditation, breathwork, or retreat participation.

Where participants voluntarily provide health-related information, we process such information solely for:

  • safety purposes 
  • accessibility support 
  • participant wellbeing 
  • operational management 

We do not provide medical or healthcare therapy and any health information shared should be limited to what participants feel is reasonably necessary for safe participation.

  1. PAYMENT INFORMATION

Payments may be made through our secure online payment systems using approved payment methods, including debit card, credit card, bank transfer, PayPal, Stripe, or other authorised payment providers made available through the website.

For security and data protection reasons, we do not accept debit or credit card details by email.

Users should review the privacy policies of relevant payment providers before making payments.

  1. SHARING YOUR INFORMATION

We may share personal information where reasonably necessary with:

  • payment processors 
  • booking systems 
  • retreat venues 
  • accommodation providers 
  • facilitators or instructors 
  • IT and website providers 
  • professional advisers 
  • insurers 
  • legal or regulatory authorities where required 

We do not sell personal data to third parties.

Information is shared only where reasonably necessary for operational, legal, safety, or service-related purposes.

  1. INTERNATIONAL TRANSFERS

Some third-party providers or systems we use may process data outside the United Kingdom.

Where international data transfers occur, we take reasonable steps to ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

  1. DATA RETENTION

We retain personal information only for as long as reasonably necessary for:

  • operational purposes 
  • legal obligations 
  • accounting requirements 
  • insurance purposes 
  • dispute resolution 
  • safety records 

When personal information is no longer required, it will be securely deleted or anonymised where appropriate.

  1. YOUR RIGHTS

Under UK data protection law, you may have rights including:

  • the right to access your personal data 
  • the right to correct inaccurate information 
  • the right to request deletion of personal data 
  • the right to restrict processing 
  • the right to object to certain processing 
  • the right to withdraw consent 
  • the right to data portability 
  • the right to complain to the Information Commissioner’s Office (ICO) 

To exercise your rights, please contact us using the contact information provided on our website.

  1. MARKETING COMMUNICATIONS

Where you have consented to receive marketing communications, we may send:

  • newsletters 
  • wellness updates 
  • retreat announcements 
  • event invitations 
  • promotional offers 

You may unsubscribe or withdraw consent at any time using the unsubscribe link provided in communications or by contacting us directly.

  1. COOKIES & WEBSITE ANALYTICS

Our website may use cookies and similar technologies to:

  • improve website functionality 
  • analyse website traffic 
  • personalise user experience 
  • support security and performance 

Users may control cookies through browser settings or cookie preference tools where available.

A separate Cookie Policy may also apply.

  1. WEBSITE SECURITY

We take reasonable technical and organisational measures to help protect personal information against:

  • unauthorised access 
  • misuse 
  • loss 
  • disclosure 
  • alteration 
  • destruction 

However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

  1. THIRD-PARTY LINKS

Our website may contain links to external websites, booking platforms, social media platforms, or third-party services.

We are not responsible for the privacy practices, content, or policies of third-party websites or providers.

Users should review the relevant privacy policies of external websites before submitting personal information.

  1. CHILDREN

Our services and website are not intentionally directed toward children under the age of 18 without parental or guardian involvement.

We do not knowingly collect personal data from children without appropriate consent where required by law.

  1. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or amend this Privacy Policy at any time.

Any updates will be published on this website and continued use of our services constitutes acceptance of the updated policy.

  1. CONTACT

If you have any questions regarding this Privacy Policy or your personal data, please contact:

Legnai
A trading name of Elevate Gateway Ltd
Company Number: 17208008