Privacy Policy

1. Who we are

The Pilates Corner is a mat Pilates studio based in Baldock, Hertfordshire, operating as a sole trader business owned and run by Emma Lovelock.

Trading name: The Pilates Corner
Studio address: 15A October House, Baldock Industrial Estate, Baldock, Hertfordshire, SG7 6NG
Email: [email protected]
Phone: 07897 035 945

For the purposes of UK data protection law, The Pilates Corner is the data controller for the personal data we collect about you.

2. What data we collect

We may collect the following categories of personal data:

Identity and contact data

• Full name
• Email address
• Phone number
• Postal address (where provided)

Health and fitness data

• Information about injuries, medical conditions, or physical limitations that you share with us before or during classes
• Pregnancy or postnatal status (for relevant course bookings)

Health data is a special category of personal data under UK GDPR. We only collect it where you have freely provided it and where it is necessary to ensure your safety and adapt instruction to your needs. We never share this information with third parties.

Financial data

• Payment information processed through Momence (our booking platform). We do not store your card details - these are handled directly by Momence and their payment processors.

Usage and marketing data

• Email address and name provided when downloading our free guide or completing a contact form
• Your preferences and communication history with us

3. How we collect your data

We collect personal data through the following touchpoints:

• Class bookings made via Momence (momence.com), our online booking platform
• Contact forms on our website at thepilatescorner.co.uk, powered by GoHighLevel
• Lead magnet downloads where you submit your name and email in exchange for a free guide
• Direct contact by phone, email, text message or WhatsApp
• In-studio when you complete a health questionnaire or induction form

4. Why we use your data

We use your personal data for the following purposes:

• To process and manage your class bookings and membership
• To communicate with you about your bookings, schedule changes, or cancellations
• To adapt class instruction safely to any health conditions or limitations you have shared with us
• To send you information about our classes, offers, and updates where you have given consent or have an existing relationship with us
• To respond to enquiries submitted through our website or by direct contact
• To fulfil our legal and contractual obligations
• To improve our services based on feedback

We do not use your data for automated decision-making or profiling.

5. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases:

• Contract - processing necessary to fulfil your booking or membership agreement
• Legitimate interests - communicating with existing clients about their classes and relevant studio updates, where this does not override your rights
• Consent - for marketing communications to new contacts, such as those who download our free guide. You can withdraw consent at any time by unsubscribing or contacting us directly
• Legal obligation - where we are required to process data to comply with applicable law
• Vital interests / explicit consent - for health data shared for your safety in class

6. Third parties we share data with

We do not sell your personal data to any third party. We share data only with the following service providers, who process it on our behalf:

Momence

Our class booking and membership platform. Momence processes booking data, payment information and class attendance records. Momence Privacy Policy.

GoHighLevel (GHL)

Our website hosting and CRM platform. GoHighLevel stores contact form submissions, lead magnet sign-ups, and email communications. GoHighLevel Privacy Policy.

Google

We use Google Fonts on our website (loaded from Google's servers) and may use Google Analytics to understand how people use our site. Google's privacy policy applies to these services. Google Privacy Policy.

Email and messaging platforms

We may use email marketing tools integrated with GoHighLevel to send communications to contacts who have given consent. You can unsubscribe from any marketing email at any time.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes it was collected, or as required by law:

• Active members and clients - for the duration of the relationship and up to 3 years after it ends, in case of any follow-up queries
• Booking and payment records - up to 6 years, as required for financial record-keeping under HMRC guidelines
• Health and injury information - for as long as you are a client, then deleted promptly
• Marketing contacts (lead magnet downloads etc.) - until you unsubscribe or request deletion
• Enquiries that did not result in a booking - up to 12 months

After these periods, data is securely deleted or anonymised.

8. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

9. Cookies

Our website uses cookies - small text files stored on your device when you visit a site. We use the following types:

• Essential cookies - necessary for the website to function. These cannot be disabled.
• Analytics cookies - help us understand how visitors use our site (e.g. which pages are most visited). We use Google Analytics for this purpose.
• Third-party cookies - set by embedded tools such as the Momence booking widget and GoHighLevel forms.

Where required by law, we ask for your consent before placing non-essential cookies. You can manage or delete cookies through your browser settings at any time.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• Using reputable, GDPR-compliant third-party platforms (Momence, GoHighLevel)
• Password-protected access to systems containing personal data
• Encrypted communication via HTTPS across our website

While we take these steps, no method of transmission over the internet is 100% secure. If you have concerns about data security, please contact us directly.

11. Changes to this policy

We may update this Privacy Policy from time to time, for example if our practices change or if required by law. When we make significant changes we will update the "last updated" date at the top of this page.

We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the updated policy.

12. Contact us

If you have any questions about this Privacy Policy, want to exercise your rights, or have a concern about how we handle your data, please get in touch: