Introduction
Square One Pilates (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and safeguard your information, and your rights regarding it.
1. Information We Collect
- Personal data you provide us: name, email address, phone number, address (if needed) via the enrolment form or contact forms.
- Payment information (if applicable): though we prefer BACS or cash, we may temporarily collect transactional details.
- Usage information: data about how you interact with our website (e.g. pages visited) via cookies or analytics.
- Device & log data: browser type, IP address, operating system, timestamps, etc.
2. How We Use Your Data
We use your information to:
- Communicate class bookings, schedules, and administrative updates
- Process payments and refunds
- Provide tailored Pilates guidance or modifications
- Send occasional newsletters, updates, or promotional information (only if you opt in)
- Improve our services and website experience
- Comply with legal and safety requirements
3. Legal Basis for Processing
We process your data under these bases:
- Contractual necessity (e.g. to deliver Pilates sessions you signed up for)
- Legitimate interests (e.g. improving services, communicating with clients)
- Consent, where needed (e.g. marketing emails)
- Compliance with legal obligations
4. Data Sharing & Third Parties
- We do not sell or rent your personal data to third parties.
- We may share data with third-party service providers essential for operations (e.g. site hosting, email platform), always under contract to keep data secure.
- We may disclose data if required by law or to protect our rights/legal claims.
5. Cookies & Tracking
- We use cookies for analytics and basic site functionality (session, preferences).
- You can disable cookies in your browser settings, but note some site features may break.
- Analytics tools (e.g. Google Analytics) collect non-identifiable usage data.
6. Data Retention
- Personal data is kept only as long as necessary for business operations, legal compliance, or client safety.
- Payment and class history records may be retained for auditing/tax purposes (e.g. 6–7 years).
- After retention period, data is securely deleted or anonymised.
7. Your Rights
You have the right to:
- Access and receive a copy of your personal data
- Correct inaccurate data
- Request deletion or restriction of processing
- Withdraw consent (where applicable)
- Object to processing under certain circumstances
- Request portable transfer of your data
- Lodge a complaint with the UK’s Information Commissioner’s Office (ICO)
To exercise any of these rights, contact:
Email: contact@squareonepilates.co.uk
8. Data Security
We use administrative, technical, and physical safeguards to protect your personal data (secure servers, limited access, encryption where possible).
9. Children & Minors
We do not knowingly collect data from children under 13. If we learn that we inadvertently collected data from a minor, we will delete it immediately.
10. Changes to This Policy
We may update this policy occasionally to reflect changes in operations, law, or technology.
Last updated: October 2025
