Privacy Policy

1. Who We Are

The Zen Lab provides leadership development and mental training services based on neuroscience, applied psychology and contemplative practice.

The Zen Lab is responsible for the personal data collected through this website and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection legislation.

Website: thezenlab.org
Email: charlie@thezenlab.org

2. What Data We Collect

We may collect the following information:

• Contact information you provide through forms, including your name, surname, email address, telephone number and any information included in your message.
• Booking information when you schedule a private conversation, consultation or session.
• Information you voluntarily share with us during an enquiry or in preparation for our services.
• Client and contractual information required to provide services and manage payments, invoicing and administration.
• Technical and usage information such as your IP address, browser, device, pages visited and referral source.
• Cookies and similar technologies, where applicable and subject to your cookie preferences.

3. How We Use Your Data

We may use your personal data:

• To respond to enquiries and requests.
• To arrange private conversations, diagnostic sessions and appointments.
• To provide and personalise The Zen Lab's services.
• To communicate with prospective and existing clients.
• To manage contracts, payments, invoices and administrative obligations.
• To operate, secure and improve our website and services.
• To comply with applicable legal and regulatory obligations.

4. Information Shared During Sessions

The Zen Lab's work may involve discussions about leadership challenges, decision-making, workplace pressure, interpersonal situations and personal experiences.

Information voluntarily shared during private sessions is treated confidentially and used only as necessary to provide the agreed service, subject to applicable legal obligations.

The Zen Lab's services are focused on leadership development and mental training and are not intended to replace psychological, psychiatric, medical or other healthcare treatment.

5. Legal Bases for Processing

Under the GDPR, we process personal data on one or more of the following legal bases:

• Contract — where processing is necessary to provide services you have requested.
• Consent — where you have given permission for specific processing, such as certain cookies or marketing communications.
• Legitimate interests — where necessary to operate, secure and improve our website and services.
• Legal obligation — where processing is required to comply with tax, accounting or other legal requirements.

6. Sharing Your Data

We do not sell your personal data.

We may share personal information with trusted third-party service providers where necessary to operate our business and provide our services. These may include website and cloud-hosting providers, appointment and calendar services, email providers, payment processors, analytics providers, and accounting, legal or other professional advisers.

Where required, these providers are subject to appropriate contractual and data protection safeguards.

7. International Data Transfers

Some of the service providers we use may process personal data outside the European Economic Area (EEA).

Where personal data is transferred internationally, we use appropriate safeguards required under applicable data protection legislation, such as adequacy decisions or EU Standard Contractual Clauses where necessary.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting and contractual requirements.

Information relating to enquiries that do not result in an ongoing relationship will not be retained indefinitely.

Client, contractual and accounting records may be retained for the periods required under applicable Spanish law.

9. Your Rights

Under the GDPR, depending on the circumstances, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data.
• Restrict certain processing of your data.
• Object to certain processing.
• Request the portability of your personal data.
• Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact: charlie@thezenlab.org

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), the Spanish Data Protection Authority.

10. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

Access to personal information is limited to those who reasonably require it for the operation and delivery of The Zen Lab's services.

11. Cookies

Our website may use essential cookies necessary for its operation and, where implemented, analytics or other non-essential cookies.

Where consent is legally required, non-essential cookies will not be activated until you have provided your consent through the website's cookie controls.

You may change or withdraw your cookie preferences at any time through the available cookie settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website or legal obligations.

Any updated version will be published on this page together with a revised “Last updated” date.