top of page

PRIVACY POLICY

Last updated: September 2026

​

HASU High Performance Zen respects your privacy and is committed to protecting your personal information.

​

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit hasuzen.com, contact us, enquire about our services, participate in a programme, workshop or event, or otherwise interact with us.

​

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK data protection legislation.

​

1. Who we are

HASU provides high-performance training in the form of workshops, programmes and related services.

​

For the purposes of UK data protection law, the data controller is:
HASU Zen Ltd
Registered in the United Kingdom: 16120807
Registered address: 219 Burton Road, Derby, Derbyshire, DE23 6AE
Email: stef@hasuzen.com
Website: hasuzen.com

​

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.

​

2. What personal information we collect

The personal information we collect will depend on how you interact with us.

​

This may include:

  • your name;

  • email address;

  • telephone number;

  • job title and organisation;

  • billing or business address;

  • information provided through contact, enquiry or booking forms;

  • correspondence between you and HASU;

  • information you provide when registering for a workshop, programme, immersive experience or event;

  • responses to questionnaires, assessments or feedback forms;

  • information relevant to programme delivery;

  • payment and transaction information;

  • marketing preferences;

  • technical information about how you use our website, such as your IP address, browser type and device information;

  • website usage information collected through cookies or analytics tools.

​

We only collect personal information that is reasonably necessary for the purposes described in this policy.

​

3. How we collect your information

We may collect personal information directly from you when you:

  • submit a form through our website;

  • contact us by email, telephone or social media;

  • book a call, programme, workshop or event;

  • complete an assessment or questionnaire;

  • sign up to receive emails or other communications from us;

  • become a client;

  • attend an event or programme;

  • provide feedback or a testimonial.

​

We may also collect information automatically when you use our website through cookies and similar technologies.

​

In some circumstances, we may receive information about you from a third party, for example where an organisation books a leadership programme or workshop on behalf of its employees.

​

4. How we use your personal information

We may use your information to:

  • respond to enquiries;

  • provide information about our services;

  • arrange consultations or introductory calls;

  • deliver workshops, programmes, retreats or other services;

  • administer bookings and payments;

  • communicate with participants before, during and after a programme;

  • personalise the services we provide;

  • maintain records relating to our clients and services;

  • improve our programmes, services and website;

  • request or manage feedback and testimonials;

  • send marketing communications where permitted;

  • maintain the security and functionality of our website;

  • comply with legal, regulatory, accounting or tax obligations;

  • establish, exercise or defend legal claims.

​

We will not use your personal information for purposes that are incompatible with those described in this policy unless we have a lawful reason for doing so.

​

5. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for using your personal information.

​

Depending on the circumstances, we may rely on:

​

Contract

Where processing is necessary to provide services you have requested or to take steps before entering into a contract with you.

​

For example, when you enquire about a programme, book a workshop or become a client.

​

Legitimate interests

Where processing is necessary for the legitimate interests of HASU or a third party, provided those interests are not overridden by your rights.

​

This may include:

  • responding to business enquiries;

  • managing client relationships;

  • improving our services;

  • maintaining appropriate business records;

  • protecting our business and website;

  • communicating with existing clients about relevant services.

​

Consent

Where you have actively given us permission to use your information for a particular purpose.

​

For example, where you choose to receive certain marketing communications or agree to the use of non-essential cookies.

​

You may withdraw your consent at any time.

​

Legal obligation

Where we are required to process information to comply with the law, for example accounting, tax or regulatory requirements.

​

6. Special category information

Some performance or wellbeing-related conversations, assessments or programmes may involve information concerning your physical or mental wellbeing.

​

Health information is classed as special category personal data under UK data protection law and receives additional protection.

​

Where we need to process special category information, we will only do so where there is an appropriate legal basis and additional condition under UK data protection law.

​

Where appropriate, we may ask for your explicit consent before collecting or using this information.

​

You are not required to provide more personal or health information than is necessary for the service you are receiving.

​

HASU does not provide medical diagnosis, medical treatment or emergency healthcare services.

​

7. Assessments and profiling

HASU may use questionnaires, assessments or performance profiles as part of its services.

​

These may be used to help identify patterns relating to areas such as performance, attention, pressure, recovery, leadership or personal development.

​

These tools are intended to support discussion, reflection and development.

​

We do not use automated decision-making that produces legal or similarly significant effects about you without meaningful human involvement.

​

8. Marketing communications

We may occasionally send you information about HASU programmes, services, events or resources where:

  • you have asked to receive them;

  • you have given us consent; or

  • we are otherwise permitted to contact you under applicable UK electronic marketing rules.

​

You can unsubscribe at any time by using the unsubscribe link in an email or by contacting us directly.

​

Unsubscribing from marketing communications will not prevent us from contacting you where necessary in connection with an existing booking, programme, contract or service.

​

9. Cookies and website tracking

Our website may use cookies and similar technologies.

​

Cookies are small files placed on your device which can help websites function, remember preferences and understand how visitors use a website.

​

Some cookies are necessary for the website to operate correctly. Others, such as analytics or marketing cookies, may require your consent before they are used.

​

Where required, you will be given the opportunity to accept, reject or manage non-essential cookies through our cookie consent tools.

​

You can also control cookies through your browser settings.

​

For more information about the cookies used on this website, please see our Cookie Policy or cookie settings.

​

10. Analytics

We may use website analytics services to understand how visitors use our website.

​

Depending on our website configuration, these services may collect information such as:

  • pages visited;

  • approximate location;

  • device type;

  • browser type;

  • how visitors arrived at the website;

  • interactions with website pages.

​

Where analytics technologies require consent, they will not be activated until you have provided appropriate consent.

​

11. Payments

Where payments are made online, payment information may be processed by a third-party payment provider.

​

HASU does not normally store complete debit or credit card details.

​

Payment providers process information in accordance with their own privacy policies and security procedures.

​

12. Who we share personal information with

We do not sell your personal information.

​

We may share information with trusted third parties where necessary to operate our business or provide our services.

​

These may include:

  • website and hosting providers;

  • email providers;

  • customer relationship management systems;

  • booking and scheduling services;

  • payment processors;

  • accounting and financial service providers;

  • analytics providers;

  • IT and technical support providers;

  • professional advisers such as accountants, insurers or legal advisers;

  • subcontractors or associates involved in delivering HASU services.

​

We only provide third parties with the information reasonably necessary for them to perform their services.

​

Where required, we use appropriate contractual and data protection safeguards.

​

We may also disclose personal information where required by law or where reasonably necessary to protect our legal rights.

​

13. International transfers

Some of the technology providers we use may process or store information outside the United Kingdom.

​

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place.

​

These may include:

  • UK adequacy regulations;

  • approved contractual safeguards;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to the EU Standard Contractual Clauses; or

  • another legally recognised transfer mechanism.

​

14. How long we keep your information

We only keep personal information for as long as reasonably necessary.

​

Retention periods depend on the type of information and why we collected it.

​

For example:

  • enquiry information may be retained while an enquiry remains active and for a reasonable period afterwards;

  • client and contractual records may normally be retained for up to six years following the end of the relationship where required for legal, accounting or contractual purposes;

  • financial records may be retained for the period required under UK tax and accounting legislation;

  • marketing information may be retained until you unsubscribe or we determine that it is no longer appropriate to retain it;

  • assessment or programme information will be retained only for as long as reasonably necessary for delivery of the service and legitimate record-keeping purposes.

​

When information is no longer required, we will delete, anonymise or securely dispose of it.

​

15. How we protect your information

We take appropriate technical and organisational measures to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • misuse;

  • disclosure;

  • alteration; and

  • destruction.

​

These measures may include secure systems, restricted access, password protection, encryption and appropriate security procedures.

​

No internet-based system can be guaranteed to be completely secure, but we take reasonable steps to protect the personal information entrusted to us.

​

16. Your data protection rights

Depending on the circumstances, you may have the right to:

  • ask us for a copy of the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete your information;

  • ask us to restrict how we use your information;

  • object to certain types of processing;

  • request the transfer of your information to another organisation;

  • withdraw your consent where we rely on consent;

  • object to direct marketing;

  • raise concerns about how we use your information.

​

These rights are not absolute and certain exemptions may apply.

​

You will not normally have to pay a fee to exercise your rights.

​

To make a request, contact us using the details at the beginning of this policy.

​

We may need to verify your identity before responding.

​

17. Complaints

If you have concerns about how your personal information has been handled, please contact HASU first so that we have the opportunity to investigate.

​

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

​

Information Commissioner's Office
Website: ico.org.uk
Telephone: 0303 123 1113

​

18. Third-party websites

Our website may contain links to websites, services or social media platforms operated by other organisations.

​

HASU is not responsible for the privacy practices or content of those websites.

​

We recommend reviewing the privacy information provided by any third-party website you visit.

​

19. Children's privacy

HASU's services are primarily intended for adults and professional or organisational clients.

​

We do not knowingly collect personal information from children through this website unless this is necessary for a specific service and appropriate arrangements have been put in place.

​

If services involving anyone under the age of 18 are introduced, we will ensure that appropriate safeguards, consent processes and privacy information are provided.

​

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements.

​

The latest version will always be published on this website.

​

Where appropriate, significant changes may also be communicated directly to clients or subscribers.

​

21. Contact us

If you have any questions about this Privacy Policy or how HASU handles your personal information, please contact:


HASU Zen Ltd
Registered in the United Kingdom: 16120807
Registered address: 219 Burton Road, Derby, Derbyshire, DE23 6AE
Email: stef@hasuzen.com

Website: hasuzen.com

bottom of page