Privacy Policy

1. Data Controller

Elleve Pilates Studio is operated by Elleve Movement Ltd, registered in England & Wales under Company Number 12345678. For any data protection inquiries, please contact us at hello@ellevepilates.com.

2. Personal Data We Collect

We collect personal data to provide a safe, efficient Pilates studio experience. This includes:

• Contact Details: Your name, email address, telephone number.
• Booking and Account Data: Managed via our booking partner, Gymcatch. This includes account credentials, class attendance history, and purchase logs.
• Financial Data: Payments are processed securely via Gymcatch's integrated payment providers. We do not store credit/debit card numbers directly on our servers.
• Health and Special Category Data: To ensure your safety on reformer and mat equipment, we require a health questionnaire/declaration detailing injuries, medical conditions, or pregnancy status. Under UK GDPR, this is classified as Special Category Data.

3. Health Data Consent & Legal Basis

We process your standard personal data (contact info, bookings) on the basis of Contractual Necessity to manage your studio access.

We process your health details on the basis of your Explicit Consent, which you grant when completing our pre-class physical readiness questionnaire. You can withdraw this consent at any time, but doing so may mean we cannot safely host you in classes.

4. How We Use Your Data

We use your information to:

• Schedule and manage your Reformer and Mat Pilates class bookings.
• Assess your physical readiness for exercise and modify exercises to protect your health.
• Send transactional emails, class schedule alerts, and administrative updates.
• Send newsletters or marketing campaigns, provided you have actively opted in.

5. Sharing with Gymcatch

We share your data with Gymcatch (our scheduling platform) to facilitate bookings. Gymcatch acts as a data processor. Please review Gymcatch's privacy policy at their website for details on how they process your data.

6. Your UK GDPR Rights

As a UK resident, you have the following rights under data protection laws:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
• Right to Withdraw Consent: Stop processing based on consent (such as health details or marketing).
• Right to Complain: Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Data Retention

We store your personal details and booking history only for as long as you maintain an active account with us. Health history declarations are archived securely or updated annually to ensure accuracy.