PRIVACY POLICY
Welcome to Rise Pilates Studio
Last updated: 20th June 2025
We take your privacy seriously. This policy outlines how we collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Rise Pilates Studio (also referred to as "we", "our", or "us") is a Pilates studio based at 9 & 9a The Square, Keyworth, NG12 5JT. We are the data controller of your personal information.
If you have any questions about this policy, you can contact us at:
📧 jade@risepilates.studio
2. What Personal Data We Collect
We may collect and process the following types of personal data:
-
Identity Data – name, title, date of birth
-
Contact Data – address, email address, phone number
-
Health Data – medical history, injuries, pregnancy status (with your explicit consent)
-
Booking & Payment Data – session bookings, transaction history (we do not store full card details)
-
Marketing Preferences – your preferences for receiving updates from us
-
Usage Data – how you use our website, booking system, and studio services
We only collect what we need to provide safe, effective services tailored to you.
3. How We Collect Your Data
We collect data through:
-
Our website and online booking system
-
In-studio registration forms and waivers
-
Emails or messages you send us
-
When you attend a class or consultation
Some data is collected automatically through cookies on our website (see Section 8).
4. Why We Collect It (Legal Basis)
We use your personal data to:
-
Deliver Pilates sessions safely and effectively (legitimate interest & consent for health data)
-
Communicate with you about bookings and studio updates (contractual obligation)
-
Process payments (contractual obligation)
-
Send occasional marketing (if you opt in) (consent)
-
Comply with legal obligations (e.g. safeguarding or insurance compliance)
5. Sharing Your Data
We will never sell your data. We may share it only with:
-
Trusted service providers (e.g. our booking or payment platform)
-
Medical professionals (with your consent, in an emergency)
-
Legal authorities when required by law
All third parties are required to respect your data and treat it in line with UK law.
6. How Long We Keep It
We retain your data only as long as necessary:
-
Health and registration data: 7 years (standard insurance requirement)
-
Booking and payment data: 6 years (HMRC requirement)
-
Marketing consent: until you unsubscribe
-
Website cookies: see Section 8
When we no longer need it, we delete it securely.
7. Your Rights
Under the UK GDPR, you have rights, including:
-
To access the data we hold about you
-
To rectify incorrect or outdated information
-
To erase your data in some cases
-
To restrict or object to processing
-
To withdraw consent at any time
-
To complain to the ICO if you believe we’ve mishandled your data
To exercise your rights, email: jade@risepilates.studio
8. Cookies & Website Usage
Our website uses cookies to enhance your browsing experience and understand how our site is used. You can control cookie settings through your browser.
9. Third-Party Links
Our site may contain links to external websites. We’re not responsible for their privacy practices, so always check their policies too.
10. Policy Updates
We may update this policy from time to time. The most current version will always be available on our website, and significant changes will be communicated to you directly where appropriate.