Your privacy
Privacy policy
Last updated 25 October 2026
This policy explains what personal information I collect when you use twobytwo.me or book a session, why I need it, and how I look after it. I keep it to the minimum I need to run your sessions safely.
Who I am
Two by Two is run by Jason Goveia, a SOMA Breath Advanced Instructor based in Stirling, Scotland. I'm the data controller for the information described here. You can contact me about anything in this policy at hello [at] twobytwo [dot] me.
What I collect
- Contact details: your name and email address when you email me or book a session.
- Booking details: the date and time you choose and any notes you add when booking.
- Payment confirmation: Stripe tells me a payment was made and by whom. I never see or store your card details.
- Email list: if you ask for my free calm breath or news of group sessions, I keep your email address for that purpose until you ask me to remove it.
- Health information you choose to share: before or during a session you may tell me about health conditions, medication or how you're feeling, so I can keep the session safe for you. This is sensitive information and I only use it for that purpose.
I don't record sessions, and I don't use any tracking, advertising or analytics cookies on this website.
Why I use it, and the legal basis
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Arranging, delivering and following up on your sessions | Performing our contract |
| Taking payment and keeping financial records | Contract, and legal obligation (tax records) |
| Using health information to keep your session safe | Your explicit consent, which you can withdraw at any time |
| Replying to emails and enquiries | Legitimate interests |
| Sending you the free calm breath and news of group sessions, if you ask for them | Your consent, which you can withdraw at any time |
I will never sell your information or send you marketing unless you've asked me to.
Who I share it with
I use a small number of trusted services to run my sessions. Each only receives what it needs:
- Stripe: processes your payment securely.
- Calendly: manages your booking and sends confirmation emails.
- Zoom: hosts online sessions.
- 123 Reg: hosts this website and my email.
- Google Fonts: supplies the lettering on this site. Your browser fetches the fonts from Google, which sees your IP address.
Some of these companies may process data outside the UK. Where they do, they use legally approved safeguards such as the UK International Data Transfer Agreement or standard contractual clauses.
Cookies
This website doesn't set any cookies of its own. The booking calendar on the confirmation page is provided by Calendly, which may set cookies needed for booking to work. Stripe may set cookies on its checkout page to prevent fraud.
How long I keep it
- Email list: until you ask to be removed.
- Booking and contact details: up to 2 years after your last session, so I can help if you come back.
- Health information: deleted within 12 months of your last session, or sooner if you ask.
- Payment and tax records: 6 years, as required by HMRC.
Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how I use it, to withdraw consent, and to have it transferred to you. Email hello [at] twobytwo [dot] me and I'll respond within one month.
If you're unhappy with how I've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. I'd appreciate the chance to put things right first.
Changes
If I change this policy, I'll update it here and change the date at the top.