Effective Date: 18th June 2024
This Privacy Policy explains how Charlotte Walker Yoga (“we,” “us,” or “our”) collects, uses, and protects your personal data when you use our website, attend our classes in Liverpool, or interact with our services.
1. Data Controller & Contact Details
Charlotte Walker Yoga is the Data Controller responsible for your personal data. If you have any questions or wish to exercise your rights, please contact us:
- Data Controller: Charlotte Walker Yoga
- Email Address: charlottewalkeryoga@gmail.com
2. The Data We Collect and Our Legal Basis
We only collect and process personal data where we have a lawful basis to do so under the UK General Data Protection Regulation (GDPR).
| Type of Data | What We Collect | Lawful Basis for Processing |
| Contact & Booking Data | Name, email address, phone number, and booking preferences. | Contractual Need: Necessary to manage your booking, confirm your place, and provide the service you are paying for. |
| Health Data | Information regarding injuries, medical conditions, or specific needs (e.g., in Pregnancy Yoga). | Explicit Consent: Required to ensure your safety and tailor postures during the session. |
| Website Usage Data | IP address, browser type, and pages visited (collected via cookies and analytics). | Legitimate Interest: To monitor our website performance, identify popular content, and improve user experience. |
| Marketing Data | Email address provided when signing up for a newsletter or promotional offer. | Consent: Based on your explicit agreement to receive marketing communications. |
3. How We Use Your Personal Data
We use your data strictly to manage and provide the services you request:
- To process, manage, and confirm your yoga class bookings and private sessions.
- To communicate important information to you, such as schedule changes, cancellations, or updates regarding your chosen service.
- To modify classes and ensure your safety and well-being based on any health data you have provided.
- To process secure payments for online video courses or classes (payment data is securely handled by third-party processors).
- To send you marketing communications, only if you have explicitly consented.
4. Third-Party Sharing
We only share your data with essential, trusted service providers necessary for operating our website and delivering services:
- IT Services: Our web hosting provider and the WordPress platform itself.
- Analytics: Providers like Google Analytics to track site traffic and performance.
- Payment Processors: Services that handle secure transactions (e.g., Stripe or PayPal).
- Email Service Providers: The service we use to send newsletters or marketing emails (if applicable).
We will never sell your personal data to any third party.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
- Health and Safety Records: Retained for seven years after your last session to comply with insurance requirements.
- Marketing Consent: Retained until you withdraw your consent or unsubscribe.
6. Your Rights Under UK GDPR
As a data subject, you have the right to request:
- Access: A copy of the personal data we hold about you.
- Rectification: The correction of any inaccurate or incomplete data we hold.
- Erasure (The Right to be Forgotten): The deletion of your personal data where there is no good reason for us to continue processing it.
- Restriction of Processing: The suspension of processing your personal data.
- Objection to Processing: Objection to processing where we are relying on a legitimate interest.
To exercise any of these rights, please contact us using the email address provided in Section 1. If you have a complaint regarding our data handling, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.
7. Changes to This Policy
We may update this policy periodically. We encourage you to review this page regularly for any changes