privacy policy
At B. Reformer Pilates, we are committed to protecting your personal data and respecting your privacy. This privacy policy outlines how we collect, store, and use your personal information in accordance with the UK General Data Protection Regulation (UK GDPR).
1. Information We Collect
We collect and process personal data to provide our services effectively. This includes:
Your name, email address, phone number, and emergency contact information.
Health information or relevant medical conditions provided to ensure safe participation in Pilates sessions.
Any communications you have with us, such as email correspondence or messages via our booking platform.
2. How We Use Your Data
Your data is used to:
Manage bookings, memberships, and payments.
Communicate with you about your sessions, schedule changes, or studio updates.
Tailor our services to accommodate your health and fitness needs.
Ensure compliance with health and safety regulations.
Provide marketing communications, if you have opted in to receive them.
We will not share, sell, or lease your personal data to third parties for marketing purposes.
3. Data Storage and Security
We store all client data securely on our business Google Drive, which is password-protected and accessible only to authorised staff members. Google Drive complies with UK GDPR standards to ensure data security.
Physical documents are not stored; all information is digital.
Payment information is securely processed through third-party systems (e.g., Gymcatch and Stripe) and is not stored by us directly.
4. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including legal or regulatory requirements. For example, health information is retained for the duration of your relationship with us and securely deleted thereafter.
5. Your Rights
As a client, you have the following rights under UK GDPR:
Right to access: Request a copy of the personal data we hold about you.
Right to rectification: Request corrections to inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data, subject to any legal obligations requiring its retention.
Right to restrict processing: Request limits on how we use your data.
Right to data portability: Request transfer of your data to another service provider.
Right to object: Opt out of certain uses of your data, such as marketing.
If you wish to exercise any of these rights, please contact us at b.reformer.pilates@gmail.com. We aim to respond to all requests within 30 days.
6. Third-Party Services
We use the following third-party services to provide our booking and payment systems:
Gymcatch and Stripe: For session bookings and secure payment processing.
Google Drive: For secure data storage.
These third parties are GDPR-compliant and have their own privacy policies governing how they process your data.
7. Marketing Communications
We may send occasional emails or messages to inform you of new services, offers, or studio updates. You can opt out of receiving marketing communications at any time by clicking "unsubscribe" on our emails or contacting us directly.
8. Data Breaches
In the unlikely event of a data breach, we will notify affected clients and the relevant authorities as required by UK GDPR regulations.
9. Changes to This Privacy Policy
We may update this policy periodically to reflect changes in our practices or UK GDPR requirements. Clients will be notified of significant updates via email.
10. Contact Us
If you have any questions about this privacy policy or how we handle your data, please contact us at:
Email: b.reformer.pilates@gmail.com
By using our services, you agree to the terms of this privacy policy.