Privacy Policy
Last updated: April 2026 · Governed by UK GDPR
1. Who We Are
Elemental Embodiment is operated by Kyzam ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your personal data when you use our platform. We are committed to protecting your privacy in accordance with the UK GDPR and the Data Protection Act 2018.
2. Data We Collect
We collect: your name and email address when you register; payment information processed securely by Stripe (we do not store card details); content you post in the community (posts, journal entries, reflections); your progress and practice data within the platform; and basic usage analytics to improve the service.
3. How We Use Your Data
We use your data to: provide and maintain your membership; process payments via Stripe; send you transactional emails (welcome, receipts, important notices); personalise your experience within the platform; and improve our services. We do not sell your data to third parties. We do not send marketing emails without your explicit consent.
4. Legal Basis for Processing
We process your data on the following legal bases: contract performance (to deliver your membership); legitimate interests (to improve the platform and prevent fraud); and your consent (for any optional communications). You may withdraw consent at any time.
5. Data Sharing
We share data only with: Stripe, for payment processing (governed by Stripe's own Privacy Policy); Base44, our platform infrastructure provider; and where required by law. We do not share your data with advertisers or data brokers.
6. Cookies
We use essential cookies required for the platform to function (authentication, session management). We do not use tracking or advertising cookies. You can disable cookies in your browser settings but this may affect platform functionality.
7. Data Retention
We retain your account data for as long as your membership is active. If you cancel, we retain anonymised data for analytical purposes. You may request full deletion of your data at any time by contacting us. Payment records are retained for 7 years as required by UK law.
8. Your Rights (UK GDPR)
You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; restrict or object to our processing; and data portability. To exercise any of these rights, contact us at the email on your account. You also have the right to lodge a complaint with the ICO (ico.org.uk).
9. Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All data is transmitted over encrypted connections (HTTPS). Passwords are hashed and never stored in plain text.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active members by email of any material changes. Your continued use of the platform after notification constitutes acceptance of the updated policy.