Privacy Policy
Last updated: January 2, 2026
1. Introduction
Studio Solena ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our services, visit our studio, or interact with our website. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect and process the following categories of personal information:
2.1 Information You Provide Directly
- Personal details: name, email address, phone number, date of birth
- Payment information: billing address, payment method details (processed securely through our payment providers)
- Health information: medical conditions, injuries, fitness levels relevant to Pilates practice
- Account information: username, password, preferences
- Communications: messages, feedback, and correspondence with us
2.2 Information We Collect Automatically
- Website usage data: IP address, browser type, pages visited, time spent on site
- Booking patterns: class preferences, attendance history, cancellation patterns
- Device information: device type, operating system, mobile device identifiers
- Cookies and tracking technologies as detailed in our Cookies Policy
3. How We Use Your Information
We process your personal data for the following purposes based on the legal bases outlined:
- Service Provision: Managing bookings, processing payments, providing Pilates instruction (Contract Performance)
- Communication: Responding to inquiries, sending booking confirmations, class updates (Contract Performance/Legitimate Interest)
- Safety: Ensuring appropriate instruction based on health information provided (Vital Interests/Consent)
- Marketing: Sending newsletters, promotional offers, class announcements (Consent)
- Business Operations: Improving services, analyzing usage patterns, maintaining records (Legitimate Interest)
- Legal Compliance: Meeting regulatory requirements, handling disputes (Legal Obligation)
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following limited circumstances:
- Service Providers: Payment processors, booking systems, email marketing platforms (under strict data processing agreements)
- Legal Requirements: When required by law, court order, or to protect our rights and safety
- Business Transfers: In the event of a merger, sale, or transfer of business assets
- Emergency Situations: To protect the vital interests of clients or others
5. Data Security and Retention
We implement appropriate technical and organizational security measures to protect your personal data:
- Encrypted data transmission and storage
- Access controls and authentication measures
- Regular security assessments and updates
- Staff training on data protection
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Typically, client records are retained for 7 years after your last interaction with us.
6. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of Access: Request copies of your personal data
- Right of Rectification: Request correction of inaccurate or incomplete data
- Right of Erasure: Request deletion of your personal data in certain circumstances
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis
To exercise these rights, please contact us at info@studiosolena.co.uk. We will respond within one month of receiving your request.
7. Contact Information
For any questions about this Privacy Policy or to exercise your data protection rights, please contact us:
Email: info@studiosolena.co.uk
Data Protection Officer: Available upon request
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.