Privacy Policy
Sep 27, 2026
1. Introduction
AP Pilates Studios Limited ("AP Pilates," "we," "us" or "our") is committed to protectingyour personal data. This Privacy Policy explains what data we collect when you use ourwebsite, booking platform or studio at Unit 8, Hersham Centre, KT12 4HL, why we collectit, and the rights you have over it under UK GDPR and the Data Protection Act 2018.
2. What Personal Data We Collect
Identity and contact details — name, email address, phone number and address.
Emergency contact details — provided at registration.
Health information — injuries, medical conditions or pregnancy you disclose before aclass, so instructors can teach you safely.
Booking and attendance data — classes booked, cancelled or attended, membershipor pack held, and check-in data (our booking app uses geofenced check-in to confirmarrival at the studio).
Payment data — processed by our payment provider; we do not store full card detailsourselves.
Marketing preferences — whether you've opted in to studio communications andoffers.
Website usage data — collected via cookies and analytics when you browse ourwebsite (see Section 8).
3. How We Use Your Data
We use your personal data to:
create and manage your account, bookings, membership or class pack;
process payments and manage billing;
teach classes safely, taking into account any health information you've disclosed;
send booking confirmations, schedule changes and essential studio communications;
send marketing communications and offers, where you've opted in;
run our retreats and outdoor events for clients who book onto them; and
comply with our legal and regulatory obligations.
4. Legal Basis for Processing
We process your data under the following UK GDPR bases:
Contract — to provide the booking, membership and class services you've signed upfor.
Legitimate interests — to run and improve the studio, including safety records andcheck-in data.
Consent — for marketing communications, which you can withdraw at any time.
Legal obligation — where we're required to keep or disclose records, for example fortax or health and safety purposes.
5. Sharing Your Data with Third Parties
We share your data with trusted providers who help us run the studio:
Mariana Tek — our booking and membership management platform, which holds yourbooking, attendance and check-in data.
Stripe — our payment processor, which handles and stores your payment detailssecurely; we do not see or store full card numbers.
We do not sell your personal data. We only share data with other third parties whererequired by law or with your consent.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
6. Data Retention
We keep your personal data for as long as your account is active, and for a reasonableperiod afterwards to meet our legal, accounting and insurance obligations (includinghealth disclosures, which we retain in case of a future claim). We'll delete or anonymiseyour data once it's no longer needed.
7. Your Rights Under UK GDPR
You have the right to:
access the personal data we hold about you;
have inaccurate data corrected;
ask us to erase your data, subject to our legal retention obligations;
restrict or object to certain processing;
request a portable copy of your data; and
withdraw consent to marketing at any time.
To exercise any of these rights, contact us using the details in Section 11. You also have theright to complain to the Information Commissioner's Office (ico.org.uk) if you're unhappywith how we've handled your data.
8. Cookies and Website Analytics
Our website uses cookies and similar technologies to remember your preferences andunderstand how visitors use the site. You can control cookies through your browsersettings; disabling them may affect some website features. We may also appear in localsearch results (for example, via our Google Business Profile), which is governed by thatprovider's own privacy terms.
9. Data Security
We take reasonable technical and organisational measures to protect your personal dataagainst unauthorised access, loss or misuse. Payment data is handled directly by ourpayment processor under its own security standards; we do not store full payment detailsourselves.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be notifiedby email or via a notice on our website; continued use of our services after changes areposted constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or want to exercise your data rights,contact us at:
AP Pilates Studios Limited Unit 8, Hersham Centre, KT12 4HL