Privacy Policy

3. What information we collect and why

Website enquiry form:

When you submit an enquiry via our website, we collect your full name, phone number, email address, home address, and which services you are interested in.

We use this to respond to your enquiry and, if you proceed, to set up your place in our classes or personal training sessions.

Lawful basis: Performance of a contract (or steps taken at your request prior to entering a contract) — UK GDPR Article 6(1)(b). Where we follow up with you after receiving an enquiry, we rely on our legitimate interests in responding to people who have contacted us — Article 6(1)(f).

Client registration and health information:

Before you attend any class or personal training session, we ask you to complete a Client Registration Form. This includes your name, date of birth, address, phone number, email, GP practice details, emergency contact details, and answers to health screening questions (equivalent to a standard PAR-Q).

Your health information is special category data under UK data protection law and receives the highest level of protection.

We collect and use it to:

• Ensure we can deliver safe and appropriate instruction

• Fulfil our duty of care and health and safety obligations

• Contact someone on your behalf in an emergency

Lawful basis: Performance of a contract — Article 6(1)(b). Legal obligation (health and safety) — Article 6(1)(c). Vital interests in an emergency — Article 6(1)(d).

Condition for processing your health data: Your explicit consent — Article 9(2)(a), given when you sign the Client Registration Form. In a life-threatening emergency, we may also rely on vital interests — Article 9(2)(c).

You may withdraw your consent to us holding your health data at any time by contacting us. Please be aware that if you do, we may not be able to safely provide our services to you.

Payment:

We accept payment by payment link or direct bank transfer. We do not see or store your card or full bank account details. We record the fact of payment for our business accounts.

Lawful basis: Performance of a contract — Article 6(1)(b). Legal obligation for financial record-keeping — Article 6(1)(c).

Communication about classes:

We may contact you by email or phone to let you know about class schedules, changes, cancellations, or other information relevant to your sessions. We may also occasionally contact you to invite you to leave a review of your experience on Google.

Lawful basis: Legitimate interests — Article 6(1)(f). We have a legitimate interest in keeping clients informed about services they have signed up for or enquired about.

Google's privacy policy can be found at policies.google.com/privacy.

WhatsApp Community (optional):

We run an optional WhatsApp Community for clients. Joining is entirely your choice. Once you are a member, other participants will be able to see your profile name and picture in line with your own WhatsApp privacy settings. We use the community to share announcements and class-related polls.

Lawful basis: Consent — Article 6(1)(a). You can leave the community at any time.

WhatsApp is operated by Meta Platforms, Inc. and is governed by its own privacy policy, which you can read at whatsapp.com/legal/privacy-policy. We are not responsible for how WhatsApp processes your data as a platform.

Photography:

We do not photograph or film you during classes without your prior, express consent. If we arrange a marketing shoot, we will ask you to sign a separate photography consent form before any images are taken or used.

Testimonials:

If you agree to provide a testimonial for use on our website, we will collect and publish your words alongside your first name, age, town and county. We will only ever do this with your explicit prior consent, given by email. You can withdraw your consent and have your testimonial removed at any time by contacting us at pb.movement@icloud.com.

Lawful basis: Consent — Article 6(1)(a).