Privacy Policy

Last updated: 21 October 2026

Yoga and Pilates Limited respects your privacy. This policy explains how we collect, use, store and share personal information when you visit our website, contact us, book our services or attend our classes, events and retreats.

Who we are

Yoga and Pilates Limited is the data controller responsible for the personal information described in this policy.

Website: https://yogaandpilates.co.uk
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Address: 8 Outred Place, Castle Hill, Ebbsfleet, Kent DA10 1DN

This policy should be read alongside our Terms and Conditions.

We handle personal information in accordance with applicable UK data protection legislation, including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, as amended.

Information we collect

Depending on the services you use, we may collect:

• Your name, date of birth and contact details.

• Account, booking, attendance and subscription information.

• Payment and transaction records.

• Relevant health information, including injuries, medical conditions, pregnancy and movement restrictions.

• Emergency contact details, where provided.

• Dietary, accessibility and other requirements relevant to events or retreats.

• Enquiries, correspondence, feedback and marketing preferences.

• Photographs, videos and testimonials, together with associated permissions.

• Technical information such as your IP address, browser details, website security logs and cookie preferences.

We collect information through bookings, health screening, forms, payments, correspondence and your use of our website. We may also receive information from someone booking on your behalf.

Please provide only information relevant to your booking or enquiry, and keep us informed of changes.

How and why we use information

We use personal information to:

• Respond to enquiries and manage bookings, accounts and subscriptions.

• Deliver classes, recordings, events, retreats and training.

• Assess participation needs and plan appropriate adaptations.

• Process payments and refunds.

• Maintain accounting and business records.

• Communicate booking information and service changes.

• Send permitted marketing communications.

• Manage feedback, complaints, security and legal claims.

• Publish promotional photographs, videos and testimonials where permission has been obtained.

Our legal bases include performing a contract with you, taking steps you request before a contract, complying with legal obligations, consent, and our legitimate interests in administering and protecting the business.

Where we rely on legitimate interests, we consider your rights and reasonable expectations alongside our business needs.

If information is necessary to provide a requested service, we will explain this. Without it, we may be unable to provide that service appropriately.

Health information

We collect relevant health information through our booking and screening process, usually using Momence.

We use this information to assess suitability for participation, understand your needs and plan adaptations. Relevant information may be shared with the teacher delivering or covering your session.

Where processing is necessary to deliver your requested service, our ordinary legal basis is performance of a contract. We seek your explicit consent as the additional condition for using your health information.

You can withdraw consent by emailing This email address is being protected from spambots. You need JavaScript enabled to view it.. We will then discuss whether we can continue providing the service appropriately without using that information.

Withdrawal does not affect processing already carried out lawfully. Limited information may need to be retained where another lawful basis and applicable special-category condition permit this, for example in connection with legal claims.

Providers and sharing

We use:

• Momence for booking accounts, registrations, attendance, subscriptions and health screening.

• Stripe for payments and refunds.

• QuickBooks for accounting records only, not client invoicing.

• MailerLite for mailing lists, newsletters and marketing emails.

• Google Forms for questionnaires, registrations and feedback.

• WhatsApp for client communication and class groups.

• SoftForge Ltd for website hosting and support.

• Cloudflare for website security, delivery and contact-form spam protection.

• Google Analytics 4 for consent-based website analytics.

• SociableKIT, including New Relic monitoring, for the Google reviews widget.

• Google Fonts for website fonts.

• Sentry, loaded through the embedded Momence video, for error monitoring.

We share information where needed with authorised administrative support, teachers, cover teachers, accountants, insurers and professional advisers. For retreats and events, relevant booking details and requirements may be shared with accommodation or activity providers.

We may disclose information where required by law or necessary for legal proceedings. We do not sell personal information.

Momence and other providers have their own privacy notices explaining their platform practices. These operate alongside this policy.

Website hosting and overseas processing

Our website is hosted by SoftForge Ltd on a server in the United Kingdom. Website contact-form and newsletter sign-up submissions are stored in the website database. Website traffic passes through Cloudflare.

Some external providers operate internationally and may process information outside the UK. Where a restricted international transfer occurs, UK data protection law requires an appropriate transfer mechanism, such as applicable adequacy regulations or approved contractual safeguards.

Contact us if you would like information about the arrangements relevant to your data.

Marketing

We send marketing where you have consented or where the existing-customer “soft opt-in” is permitted.

We only use the soft opt-in for our own similar services where we obtained your details during a sale or negotiations for a sale and offered an opportunity to opt out both when collecting your details and in each message.

You can unsubscribe through our emails or contact us directly. Essential booking confirmations, payment messages and class changes are separate from marketing.

WhatsApp groups

We use WhatsApp groups for class updates and relevant communications. Group participation is optional.

Your telephone number and, depending on your settings, profile information may be visible to other members. You can leave at any time and contact us directly for essential class information.

Please send health information privately rather than posting it in a group. Promotional messages are subject to applicable marketing rules.

Photographs videos and testimonials

We ask permission before using identifiable client photographs, videos or testimonials to promote our services on our website or social media. Declining permission does not affect access to our services.

You can withdraw consent by emailing us. We will stop further use and remove material from channels we control where reasonably possible. We cannot guarantee removal of copies already shared by other people.

Keeping information secure

We use appropriate technical and organisational measures to protect information and limit access to those who need it.

Payments are processed through Stripe. No online system is completely secure. Please contact us promptly if you suspect information has been lost, misused or accessed without authorisation.

How long we keep information

We retain information only as long as necessary for its purpose.

We determine retention by considering:

• The duration of your relationship with us and the administration of your bookings.

• Applicable accounting and tax requirements.

• Insurance requirements and relevant legal claim periods for health, attendance and incident records.

• Whether an enquiry, complaint or dispute remains unresolved.

• Whether promotional material remains relevant and permission remains valid.

• Security needs and the purpose of technical logs.

Marketing information is retained while needed for permitted communications. If you unsubscribe, we may keep a minimal suppression record to respect your preference.

Information is deleted or anonymised when no longer needed. Backup copies may remain until the relevant backup cycle expires. You can contact us for details about the retention of particular records.

Your rights

Depending on the circumstances, you may ask us to:

• Provide access to your personal information.

• Correct inaccurate or incomplete information.

• Delete information.

• Restrict its use.

• Provide certain information in a portable format.

• Stop processing based on legitimate interests.

You may withdraw consent where we rely on it.

You have the right to object to direct marketing at any time.

Contact This email address is being protected from spambots. You need JavaScript enabled to view it. to exercise your rights. Rights are subject to applicable legal conditions. We normally respond within one month, although lawful extensions may apply.

You can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113.

Cookies and browser storage

Our website uses cookies and similar browser storage for website functions, security, preferences and analytics.

Google Analytics runs only after you accept analytics cookies.

The website banner offers Accept all, Reject all and Manage cookies. You can change your choice using Cookie settings in the website footer. Withdrawing analytics consent removes the Google Analytics cookies.

At the date of this policy, our website provider is implementing consent controls for the MailerLite newsletter form and SociableKIT reviews widget, which have previously loaded before a cookie choice.

The classification and duration of the nrid form cookie are under review with our website provider.

Some pages load external services, including Momence, MailerLite, SociableKIT, Cloudflare, Google Fonts and Sentry. These services receive technical information, including your IP address, when a connection is made.

Bookings completed on momence.com are also subject to Momence’s privacy notice and cookie controls.

We do not use Hotjar or the Meta/Facebook Pixel. Our Facebook and Instagram icons are ordinary links.

You can also manage browser storage through your browser settings. Blocking essential technologies may affect website functions.

External links

Other websites linked from our site have their own privacy practices. Please read their privacy notices when using them.

Changes to this policy

We review this policy when our services, systems or legal requirements change. The current version will appear on our website with its update date. We will bring significant changes to your attention where required.