Last updated: June 2026

We take protecting online privacy and data security seriously. Please read the whole of this statement carefully as it sets out our approach to processing personal data including what information we may collect from you, how we may use it, store it and protect it, and your rights as a data subject.

Our Privacy Statement governs any kind of processing where we are acting as a data controller or co-controller (including collection, use, transfer, storage and deletion) of personally identifiable information about natural persons. This statement applies to our processing of data collected through any means, actively as well as passively, from persons located anywhere in the world.

Our Data Processing Principles

We are guided by the following principles when processing data:

1. We will only collect data for specific and specified purposes.
2. We will not collect data beyond what is necessary to accomplish those purposes; we will minimise the amount of information we collect from you to what we need to deliver the services required.
3. We will collect and use your personal information only if we have sensible business reasons for doing so, such as making available to you our services and products.
4. We will not use your data for purposes other than those for which it was collected, accepted as stated within our policy, or with your prior consent.
5. We will seek to verify and/or update your data periodically and we will accept requests from you for amendment of the data held.
6. We will apply high technical standards to make our processing of data secure.
7. Except otherwise stated, we will not store data in identifiable form longer than is necessary to accomplish its purpose or as required by law.

How We Collect and Use Personal Data

Most personal information is provided directly and voluntarily by you when you engage with us in order to enquire about, or purchase, our services or products. We will collect information from you when:

8. You contact us for information via our website or social media channels, by phone or email.
9. You purchase our services or products.
10. You post on our social media channels, website or blog.

We collect this information to make available to you our services or products and to communicate with you in relation to our services or products. We may use the information collected to:

11. Allow us to process a booking for a service or product you purchase.
12. Create a profile for you on our database.
13. Send you our newsletters and/or provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
14. Respond to enquiries you make about our services or products.
15. Ensure that content from our site is presented to you in the most effective manner for you and your computer or device.
16. Allow you to access and utilise the service or product you have purchased from us.
17. Notify you about changes to our services or products.
18. Get feedback from you regarding the quality of our services or products.
19. Analyse booking and customer data using AI-assisted tools to improve our business planning and service delivery. This processing uses aggregated and transactional data only and is carried out under our legitimate interests.

We will not sell or lend your personal data to third parties or share your personal data for marketing purposes.

What Information We Collect

In accordance with Data Protection Legislation, we only collect and process information which we require to meet the specific purposes as stated above. The information we may collect about you could include, but is not limited to:

20. Contact details.
21. Personal details and identifiers.
22. Bank details and financial information.
23. Details about your occupation and business.
24. Details about your lifestyle and social circumstances.
25. Details about how you use our website including technical data such as IP address.

Occasionally we may ask for special category data if necessary for delivery of a particular service or product, such as medical information. As per our Data Processing Principles we will only ask for information that is necessary to deliver our services, and therefore we encourage you not to provide us with personal data or special category data which we do not ask for.

Third-Party Service Providers and Data Processors

In order to deliver our services effectively, we use a number of trusted third-party platforms to store, manage, transfer and process your personal data. Each acts as a data processor on our behalf and is bound by a Data Processing Agreement (DPA) or equivalent contractual obligations. We have satisfied ourselves that appropriate safeguards are in place in each case.

HubSpot (CRM and Customer Data Management)

We use HubSpot, Inc. as our customer relationship management (CRM) platform. HubSpot stores and manages customer contact records, booking history, communications, and related business data. Data processed by HubSpot may be stored on servers located in the United States; however, HubSpot participates in appropriate data transfer mechanisms, including Standard Contractual Clauses (SCCs), to ensure compliance with UK GDPR requirements.

For further information, please refer to HubSpot’s Privacy Policy at https://legal.hubspot.com/privacy-policy

Bookwhen (Booking and Scheduling Platform)

We use Bookwhen Ltd, a UK-based booking platform, to manage class and session bookings. When you make a booking through our website, your name, contact details, and payment information are processed by Bookwhen in order to confirm and manage your booking. Bookwhen stores data on servers located within the UK and European Economic Area (EEA).

For further information, please refer to Bookwhen’s Privacy Policy at https://bookwhen.com/privacy

Zapier (Workflow Automation)

We use Zapier, Inc. to automate data flows between our platforms (for example, passing booking data from Bookwhen into HubSpot). Zapier processes personal data in transit between systems solely for the purpose of enabling these automated workflows. Data transferred via Zapier is not stored permanently by Zapier and is subject to Standard Contractual Clauses for transfers outside the UK.

For further information, please refer to Zapier’s Privacy Policy at https://zapier.com/privacy

Claude by Anthropic (AI-Assisted Business Analysis)

We use Claude, an AI assistant developed by Anthropic, PBC, to assist with internal business analysis tasks, including analysis of booking trends, revenue patterns and customer behaviour. This processing is carried out solely for internal business planning purposes under our legitimate interests.

When using Claude for this purpose, we share transactional and operational data (such as booking counts, revenue figures and dates) rather than detailed personal information wherever possible. We do not share sensitive personal data, special category data, or unnecessary identifying information with AI tools.

Anthropic does not use data submitted through Claude.ai conversations to train its AI models by default. Data is processed in accordance with Anthropic’s data handling commitments and applicable UK GDPR obligations.

For further information, please refer to Anthropic’s Privacy Policy at https://www.anthropic.com/privacy

How We Store Your Information

We have in place appropriate technical and organisational measures to ensure the security, confidentiality, integrity and availability of personal data we control. Your information is securely stored on our company database which is not publicly accessible or stored in any public domain – it is accessible to our employees only, and is password protected.

We may store or process your data on cloud-based platforms or service providers whose servers are based outside of the UK. We will only use such third-party service providers where we are confident that appropriate safeguards are in place to ensure that any personal data is subject to a similar level of security and protection as required under UK Data Protection Legislation.

We also have in place appropriate procedures to handle any potential Personal Data Breaches, in accordance with Data Protection Legislation. Any such breaches will be reported to the relevant supervisory authority and notified to the affected data subjects where we are legally required to do so.

We will only keep your personal data for as long as is necessary to meet the requirements for which it was collected. This will vary depending on the nature of the requirements and the processing. After this period of time, we will delete your personal data unless there is a legitimate business reason to retain all or parts of the data we hold.

Legal Basis for Processing Your Data

The General Data Protection Regulation (GDPR) provides that processing of your data shall only be lawful if and to the extent that at least one of the following applies:

26. You have consented.
27. For the performance of a contract.
28. For compliance with a legal obligation which we must perform.
29. To protect the vital interests of you or another person.
30. It is in the public interest.
31. It is in the legitimate interests pursued by us or a third party.

We collect data for the purposes set out above. All personal data is managed to ensure that it is either erased from our system when it is no longer required for the purpose for which it was collected, retained for legal reasons or minimised and retained.

Any special category data collected from you has special protection and is limited to that permissible by law. In all instances where special category data is collected, we will obtain your express consent.

Where we rely on legitimate interests as our lawful basis – including for AI-assisted business analysis – we have assessed that this processing is necessary, proportionate, and does not override your fundamental rights and freedoms.

Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

32. The right to be informed about how your data is used (as set out in this policy).
33. The right of access to the personal data we hold about you.
34. The right to rectification of inaccurate or incomplete data.
35. The right to erasure (‘the right to be forgotten’) in certain circumstances.
36. The right to restrict processing in certain circumstances.
37. The right to data portability.
38. The right to object to processing based on legitimate interests.
39. Rights in relation to automated decision-making and profiling.

To exercise any of these rights, or if you have any questions about this policy, please contact us directly. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk