Privacy Policy

1.1 What Personal Data We Collect

We may collect the following personal information:

• Name, email address, phone number, and date of birth
• Booking and attendance history
• Payment information (processed securely by third-party (Mindbody) — we do not store card details)

1.2 How We Use Your Data

Your data is used for the following purposes:

• Managing class bookings and attendance
• Communicating with you regarding classes, schedule changes, or studio updates
• Ensuring your safety during classes
• Processing payments through secure third-party providers

1.3 Legal Basis for Processing

We process personal data under the following lawful bases:

• Contractual necessity — to provide booked services
• Legitimate interest — studio operations, safety, and communication
• Consent — for marketing communications, where applicable

1.4 Data Storage & Security

• All personal data is stored securely on encrypted systems
• Access is limited to authorised KY Pilates staff only
• Payment details are handled exclusively by secure third-party payment processors

1.5 Data Retention

We retain your personal data only for the duration of your relationship with KY Pilates. Your data is stored securely while you are actively booking or attending classes with us and is removed once it is no longer necessary for operational, legal, or safety purposes.

1.6 Sharing of Data

We do not sell or share your personal data with third parties, except where necessary to operate our services:

• Our booking system is supported by Mindbody, which processes booking-related data securely on our behalf
• Payment processors
• Legal authorities where required by law

1.7 Your Rights (UK GDPR)

You have the right to:

• Request access to your personal data
• Request correction or deletion of your data
• Request data portability
• Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact:
Ky@kypilates.co.uk