Privacy Policy
Last updated: 28 April 2026
Intara exists for women navigating some of the most tender and difficult experiences of their lives — pregnancy loss, birth trauma, and the complex journey of trying to conceive again. We take your trust seriously, in everything we do. That includes how we handle your personal information.
We are especially mindful of the sensitivity of this space. Our systems and processes are designed to minimise the amount of personal and health information we collect wherever possible. What we do collect, we protect carefully. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and (where applicable) the EU GDPR.
This policy explains what information we collect, why we collect it, how we protect it, and the rights you have over it. We’ve written it in plain language, because legalese helps no one.
Questions? You can reach us at connect@intaraspace.com.
Who we are
Intara Space Limited is a private limited company (number 16922441) with a registered address at 4 Bush Road, Richmond, TW9 3AN. We are the data controller responsible for your personal information under UK data protection law. This means we decide how and why your personal information is processed. We are registered with the Information Commissioner's Office (ICO) under registration number ZC135351.
If you have any questions about this Privacy Policy - including any requests to exercise your legal rights - please contact Izzy Huzzey, who is responsible for overseeing data protection matters at Intara Space Limited. You can reach them at connect@intaraspace.com or by writing to us at 4 Bush Road, London, TW9 3AN.
A quick summary
Here are the key points before you read the full policy below:
What we collect: Information you give us when you join or get in touch, plus some technical data collected automatically when you use our site.
Sensitive information: Because of the nature of Intara and the specific programmes Intara offers, some of the data you share may relate to your health, for example by virtue of which programme you enrol in, even if you do not share clinical or medical information with us directly. This data is treated as Special Category data under UK GDPR and we handle it with particular care, and only with your explicit consent, which we will seek separately at sign-up. You can withdraw that consent at any time.
Why we collect it: To run the platform, provide your membership, communicate with you, and keep everything secure.
Who we share it with: Only the service providers who help us operate — never sold to third parties.
How long we keep it: For as long as your account is active, and no longer than necessary after that.
Your rights: You can access, correct, or delete your data at any time. Full details below.
1. What information do we collect?
Information you give us
When you join Intara, join our waiting list, request marketing to be sent to you, or otherwise get in touch with us, you may provide
Your name and email address
A username and password
Contact and marketing/communication preferences
Health-related information — because of what Intara is for, some of the information you share with us (for example, your experience of pregnancy loss or birth trauma) may constitute Special Category data under Article 9 of the UK GDPR. This is because: (a) the programmes you enrol in are targeted at specific health experiences (including pregnancy loss, birth trauma, and trying to conceive after loss), and enrolment data therefore reveals or implies something about your reproductive or mental health history; and (b) where we ask you to confirm that you have no contraindications to exercise, that self-declaration is itself a statement about your health. We only collect and process this Special Category data on the basis of your explicit consent under Article 9(2)(a) UK GDPR. We will ask for your explicit consent to this processing separately at the point of sign-up, and you may withdraw that consent at any time by contacting us at connect@intaraspace.com. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal. This data is treated with the highest level of confidentiality and is protected through appropriate technical and organisational measures, including data encryption and access controls
All information you provide must be accurate. Please let us know if anything changes.
Payment information
If you take out a paid membership, your payment is processed securely by Stripe. We do not store your card details. You can read Stripe’s privacy policy at stripe.com/gb/privacy.
Information collected automatically
When you visit intaraspace.com, our systems automatically collect some technical information, including:
Your IP address and approximate location
Browser type and device information
Pages visited, time spent, and how you navigate the site
Referring website (how you found us)
This data does not directly identify you. It helps us keep the site running well and understand how it’s being used.
We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature or feature of our services in order to analyse general trends in how users are interacting with our website/services to help improve the website and our service offering.
We also use cookies for this purpose — see our separate Cookie Policy for full details.
2. How do we use your information?
We use your personal information to:
Create and manage your account
Deliver your membership — including content, programmes, and resources
Respond to your questions and support requests
Send you service and account communications
Process payments and manage your subscription
Request feedback to help us improve
Send marketing emails, if you’ve opted in (you can opt out at any time, and we will always get your express consent before we share your personal data with any third party for their own direct marketing purposes)
Maintain the security of the platform
Understand how members use Intara so we can make it better
Comply with legal obligations
Protect someone’s vital interests — in rare circumstances where processing is necessary to prevent serious harm to you or another person
We only process your information when we have a lawful reason to do so — see Section 3 below.
3. Our legal basis for processing your information
Under the UK GDPR and GDPR, we’re required to have a legal basis for collecting and using your data. We rely on:
Explicit consent (Article 9(2)(a) UK GDPR): For Special Category data - specifically, data relating to your health, including data that is revealed or implied by your programme enrolment and any contraindication declaration you make at sign-up. We will ask for your explicit consent to this processing separately at the point of registration. You can withdraw this consent at any time without affecting the lawfulness of prior processing.
Consent (Article 6(1)(a) UK GDPR): We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example for marketing communications. You can withdraw consent at any time.
Contract performance: To provide your membership and the services you’ve signed up for.
Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for things like site security, fraud prevention, analytics, and improving the platform. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Legal obligation: Where we’re required to process or retain information by law. We will identify the relevant legal obligation when we rely on this legal basis.
Vital interests: In rare circumstances where processing is necessary to protect your safety or that of another person.
4. Who do we share your information with?
We don’t sell your data. We share it only with trusted third-party service providers who help us run Intara. Some of these providers - particularly those involved in membership management and email communications - may, in the course of providing their services, process data from which health-related information about you could be inferred (for example, programme enrolment data). All providers are selected with care and are bound by data processing agreements that restrict their use of your data strictly to the services they provide to us, including appropriate restrictions on the processing of Special Category data. Our current providers include:
Payment processing: Stripe
Website hosting: Squarespace
Membership platform: MemberSpace
Email communications: Kit
Video hosting: Vimeo
Analytics: Google Analytics
All providers are bound by contracts requiring them to respect the security of your personal data and to treat it in accordance with the law, and preventing them from using your data for any purpose other than the services they provide to us.
We may also need to share information in the event of a business transfer, merger, or acquisition — in which case we’d notify you. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
In some limited circumstances, wemay be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
5. International data transfers
Some of our service providers — including Stripe, Vimeo, Google Analytics, and Kit — may process your data outside the UK or European Economic Area. These are known as “third countries” and may not have data protection laws that are as strong as those in the UK and/or the EEA. This means that we will take additional steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UK and will be fully protected under the UK GDPR, EU GDPR, Data Protection Act 2018 and/or to equivalent standards by law. Where this happens, we ensure appropriate safeguards are in place to protect your information, such as transferring your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission, or using Standard Contractual Clauses approved by the UK Information Commissioner’s Office which give personal data the same protection it has in Europe. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.
6. Cookies and tracking technologies
We use cookies and similar technologies on our website. Full details are set out in our separate Cookie Policy.
7. How long do we keep your information?
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
We retain your personal information for as long as your account is active. Once you close your account, we’ll delete or anonymise your data unless we’re legally required to retain it for a longer period (for example, for tax or accounting purposes), as further described below.
The following retention periods apply to the different categories of personal information we hold:
Account and membership data (including your name, email address, username, and communication preferences): held for the duration of your active account, and for up to one year following account closure to allow for any queries or disputes arising from your membership.
Payment and financial records: retained for six years from the date of the relevant transaction, as required by HMRC and applicable accounting rules.
Special Category data (including programme enrolment data and any contraindication declarations): deleted promptly following account closure, or earlier if you withdraw your explicit consent to its processing. We will not retain health-related data beyond the period strictly necessary for the purpose for which it was collected.
Technical and analytics data (including IP address, browser data, and usage data): retained in accordance with our Cookie Policy, and for no longer than 26 months in relation to analytics data.
Marketing preferences and correspondence: retained until you opt out or withdraw consent, plus a short administrative period to give effect to that withdrawal. General support correspondence is retained for two years from the date of last interaction.
Subscription cancellation and account closure: if you cancel your Intara subscription but do not close your account, your personal data will continue to be held in accordance with this policy and the retention periods above, and will not be deleted until you close your account entirely. Where a subscription lapses or is cancelled and you do not re-enrol within a reasonable period, we will review whether programme enrolment data and any contraindication declarations remain necessary and will delete them if they do not. To close your account entirely, please contact us at connect@intaraspace.com.
We anticipate that in a future release of the Intara platform we will introduce a programme specifically for women who are pregnant after loss. That programme will involve the collection of additional health-related data (including gestational information) to tailor programme content. We will update this Privacy Policy before that programme launches, and will seek your explicit consent to any additional processing at that time.
Where deletion isn’t immediately possible (for example, information held in backup archives), we’ll restrict access to that data and isolate it from active use as soon as reasonably practicable. The data will not be accessed or used for any purpose during that period and will be permanently deleted at the next practicable opportunity and in any event within 90 days. Where the data in question is Special Category data, enhanced access controls will apply during the isolation period.
8. How do we keep your information safe?
We have technical and organisational measures in place to protect your information and to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed — including secure hosting, access controls, and encrypted data transmission. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
That said, no system is completely impenetrable. While we do everything reasonable to protect your data, we can’t guarantee absolute security, and transmission of information via the internet is always at some degree of risk.
9. Children and minors
Intara is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. While we do not currently use technical age verification at sign-up, by registering you confirm that you are aged 18 or over. If you become aware that a person under 18 has registered, please contact us at connect@intaraspace.com and we will take prompt action, including deleting any data held in relation to that account.
10. Your rights
Under UK and EU data protection law, you have the following rights in relation to your personal information, including any Special Category (health-related) data we hold about you:
Access a copy of the personal information we hold about you
Request correction of inaccurate information
Request deletion of your data
Restrict or object to certain processing
Data portability (receive your data in a portable format)
Withdraw consent at any time, without affecting the lawfulness of prior processing
Withdraw explicit consent to the processing of your Special Category (health-related) data at any time - this will not affect the lawfulness of processing carried out before withdrawal, but we will cease processing that data and, where relevant, delete it
To exercise any of these rights, please contact us at connect@intaraspace.com or visit intaraspace.com/contact.
No fee is usually required to exercise any of the rights listed above. However, we may charge a reasonable fee if a request is manifestly unfounded, repetitive, or excessive. In those circumstances, we may alternatively refuse to comply and will explain our reasons for doing so. To help us process your request efficiently and securely, we may ask you to verify your identity before we respond. This is to ensure that personal information is not disclosed to anyone who does not have the right to receive it. We will respond to all valid requests within one month of receipt. If your request is particularly complex, or you have submitted a number of requests at the same time, we may extend this period by a further two months. We will notify you if this is the case and keep you updated on our progress.
If you’re in the UK or EEA and feel your rights haven’t been respected, including in relation to the processing of your health-related information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113, or your local data protection authority if you are in the EEA. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
Withdrawing consent
You can withdraw consent for processing at any time by contacting us. This won’t affect anything processed lawfully before your withdrawal.
Opting out of marketing
Every marketing email includes an unsubscribe link. You can also contact us directly to be removed from our marketing list. If you are a member, you’ll continue to receive essential service communications related to your account.
Managing your account
You can review or update your account information by logging into your account settings. To close your account entirely, please contact us at connect@intaraspace.com.
11. Do-Not-Track signals
Some browsers allow you to send a Do-Not-Track signal. There is currently no agreed standard for how websites should respond to these signals, so we don’t act on them. If this changes, we’ll update this policy accordingly.
12. Updates to this policy
We’ll update this Privacy Policy from time to time — for example, to reflect changes in our services or legal requirements. We’ll indicate the date of the latest update at the top of this document. If we make significant changes, we’ll let you know directly.
13. How to contact us
Email: connect@intaraspace.com
14. Reviewing, updating, or deleting your data
To request access to, correction of, or deletion of your personal information, please visit intaraspace.com/contact or email us directly.