top of page

GDPR PRIVACY POLICY Cara Bianca WiseRoots Shop (& Etsy)


Cara is now trading as:


Formerly MalalalaUK & Cara Amirah

1. Personal information

Your information is collected if you request:

  • A PURCHASE FROM MY ONLINE SHOP: To buy a product from me or service online:  I will have your details stored in my shop at Etsy which you authorise Etsy to provide to me, such as your name, postal and email address, payment information and the details of the product that youre ordering.  All information provided will only be used by myself and Etsy to fulfil and process your sales and comply with seller obligations to process your order in strict compliance with Etsy Privacy Policy, Etsy Seller Policy and their Terms of Use and will not be used in any other way.  For website sales at the same will apply as above but Etsy will not be a third party and there will be no other third parties involved in the transaction apart from the payment method (i.e Paypal etc)


  • MAILING LIST:  To join my mailing list (I will have your email address stored at  When you consent to join the mailing list at your information (email required)  is stored privately at and will only be used to send out information emails from Studio Amirah, MalaLalaUK and Cara Amirah to you on your request and is not passed on to any third parties.  You may revoke at any time from my mailing list by contacting me or unsubscribing.                                 


TREATMENTS: To have a treatment you will be required to fill out a consultation form so I can deliver the correct treatment for you and for insurance purposes.Your details on the consultation form (name, address, age, telephone number, occupation and health declaration) will be kept for treatment and insurance purposes only for the correct legal length of time and will then be destroyed thereafter, these forms will only be released to a third party if required by Insurers etc for legal reasons.  This may be in the form of an electronic consultation form or a paper copy 


  • ATTENDING A CLASS: To attend a class and fill out a Health and Fitness Declaration form.  Your details on this form (name, telephone, emergency contact details and signature) will be kept for treatment and insurance purposes only for the correct legal length of time and will then be destroyed thereafter, these forms will only be released to a third party if required by Insurers etc for legal reasons

All data is strictly PRIVATE and CONFIDENTIAL and is never passed to third parties of any kind.   

COMPLIANCE WITH LAWS                                                                                                             


I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.



I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 4 years.



If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below:

  • ACCESS - You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.

  • CHANGE RESTRICT DELETE – You also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons).   I will generally delete your personal information upon request.

  • OBJECT - You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.

  • COMPLAIN - If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.

My website does not use cookies other than those supplied by 

Your details are not used or stored in any way when you visit my website 



For purposes of EU data protection law, I, Cara Amirah (Cara Foulkes), am the data controller of your personal information. If you have any questions or concerns, you may contact me at

bottom of page