Last updated: 14 October 2026
This policy explains what personal information The Practice of Being collects, why, and what your rights are. I've kept it short and plain.
Who I am
The Practice of Being is run by Csaba Tibor Palotas, a sole trader based in Milton Keynes, UK. I am the "data controller" for the information described here. You can contact me about anything in this policy at hello@oneartstudio.uk.
What I collect and why
- When you contact me through the contact form: your name, email address and message, so I can reply. Lawful basis: legitimate interests.
- When you join the course list or newsletter: your first name and email address, so I can tell you about courses and send occasional letters. Lawful basis: your consent, which you can withdraw at any time using the unsubscribe link in every email.
- When you book a course: your name, email address and payment confirmation, so I can give you your place and send joining details. Lawful basis: to perform our contract.
- If your booking includes a book: your postal address, which I pass to the printer only so they can post it to you. Lawful basis: to perform our contract.
I never sell your information, and I only use it for the reasons above.
During the course
Sessions take place live on Google Meet and are not recorded. Anything you share in the circle stays in the circle. I keep no notes about individual participants beyond your booking details.
Who else handles your information
I use a small number of trusted services to run the site and the course:
- Kit (email list and newsletter), based in the USA.
- Google (Google Meet for sessions, and email), based in the USA.
- Bluehost (website hosting), based in the USA.
- The payment provider used at checkout, which handles your card details. I never see or store your card number.
- Bookvault (book printing and delivery), based in the UK, only if your booking includes a book.
- Wordfence (website security), which may log your IP address to protect the site from attacks.
Where information is transferred outside the UK, these providers use legal safeguards approved under UK data protection law, such as standard contractual clauses.
Cookies
This site uses only the cookies it needs to work and to stay secure. It does not use advertising or tracking cookies. If that ever changes, I will ask for your consent first and update this policy.
How long I keep it
- Mailing list: until you unsubscribe.
- Contact messages: up to two years.
- Booking and payment records: six years, as UK tax rules require.
Your rights
You have the right to ask for a copy of your information, to correct it, to have it deleted, to restrict or object to how it is used, and to receive it in a portable format. Just email me at hello@oneartstudio.uk and I will respond within one month.
If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.