The controller of your personal data is: Jakub Latosi, trading as Shape of Everything Contact: connecttoecruos@gmail.com Based in the United Kingdom and Poland. As a sole trader providing wellness and breathwork facilitation services, I process your personal data in accordance with the UK GDPR, the EU GDPR (Regulation 2016/679), and the Polish Personal Data Protection Act (UODO).

I collect the following categories of personal data: Contact & Booking Data: Full name, email address, phone number, preferred session date and time, messages you send me. Health Data (Special Category): Information you voluntarily provide in the health questionnaire — medical history, conditions, medications, and previous experience with breathwork. Technical Data: Basic analytics (page visits, browser type). No invasive tracking. I do NOT collect payment card data directly — payments are processed by Stripe.

I process your data on the following legal bases: • Contract performance (Art. 6(1)(b) GDPR): Processing booking requests and providing sessions. • Legitimate interests (Art. 6(1)(f) GDPR): Responding to inquiries, maintaining business records. • Vital interests / explicit consent (Art. 9(2)(a) and (c) GDPR): Processing health data before sessions. • Legal obligation (Art. 6(1)(c) GDPR): Retaining financial records as required by UK/Polish law.

Your data is used exclusively to: • Confirm and schedule your breathwork sessions • Send session details and Zoom links • Send the health questionnaire before your session • Respond to your inquiries • Maintain legally required business records I do NOT sell, rent, or share your personal data with third parties for marketing purposes.

I only share your data with carefully selected processors: • Zoom Video Communications: For conducting online sessions. • Stripe Inc.: For payment processing (PCI-DSS compliant). • Base44 (app platform): Hosts the database storing your booking and form submissions, under GDPR-compliant infrastructure.

• Booking requests & contact messages: 2 years from the date of last contact. • Health questionnaire data: Deleted within 90 days after your session. • Financial/invoice records: 7 years as required by UK and Polish tax law. • Marketing communications (if applicable): Until you withdraw consent.

Under the GDPR, you have the following rights: • Right of access (Art. 15): Request a copy of the data I hold about you. • Right to rectification (Art. 16): Ask me to correct inaccurate data. • Right to erasure (Art. 17): Request deletion of your data. • Right to restriction (Art. 18): Ask me to limit how I use your data. • Right to object (Art. 21): Object to processing based on legitimate interests. Contact: connecttoecruos@gmail.com — I will respond within 30 days.

Health information is a special category of personal data under Art. 9 GDPR. I collect health data exclusively to assess whether breathwork is safe for you and adapt sessions to your individual needs. This data is stored securely, accessed only by me (Jakub Latosi), and never shared with third parties unless required by law.

This website uses minimal, privacy-respecting technology: • No advertising or cross-site tracking cookies. • No Facebook Pixel, Google Ads tracking, or similar tools. • Basic session/functionality cookies may be used for the app to function correctly.

9D Breathwork is a wellness and personal development practice, not a medical treatment. I am a certified 9D Breathwork facilitator, not a medical professional. By completing the health questionnaire and booking a session, you confirm that you have read and understood the contraindications and take personal responsibility for your participation.

By creating an account or booking a session, you agree to use this website lawfully and provide accurate information. Session availability, pricing and delivery details may change, but confirmed bookings will be handled with care and clear communication. Account access is protected through Base44 authentication, including secure session handling and email-based account verification where required by the platform.

You can request deletion of your account data from Account Settings using “Delete My Account”. This removes app records connected with your account and records a GDPR erasure request. You may also contact connecttoecruos@gmail.com to request access, correction or deletion of personal data. Requests are handled within 30 days unless a legal retention obligation applies.