Privacy Policy

At Very Studios UK, we are committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all three of our UK locations and our online services.
1. Who We Are
Very Studios (“the Studio” , “we” , “us” , “our”) is the data controller responsible for your personal data. We operate three yoga and Pilates studios across Surrey, UK:
Very Yoga Reigate — 1st Floor Focus House, 23–25 Bell Street, Reigate, RH2 7AD.
Very Yoga Dorking — 217 High Street, Dorking, RH4 1RU.
Very Studios Oxted — 141–143 Station Road, East Oxted, RH8 0QE
2. Personal Data We Collect
We collect and process the following categories of personal data:
  • Identity Data – Full name, title, date of birth (where applicable).
  • Contact Data – Email address, phone number, billing/home address.
  • Health Data – Injuries, medical conditions, pregnancy status (Special Category Data).
  • Transaction Data – Booking history, membership records, payment/card details (encrypted).
  • Marketing Data – Marketing preferences, newsletter subscriptions, survey responses.

Health Data: We only collect health information with your explicit consent to ensure your safety during physical practice. This data is handled with the highest level of confidentiality.

 

3. How We Collect Your Data

We use various methods to collect data from and about you:

  • Direct Interaction: When you register on Mindbody, book a class, fill out a waiver, or contact us via email/phone. Automated
  • Technologies: As you interact with our websites, we may automatically collect Technical Data about your equipment and browsing patterns via cookies.
  • Third Parties: We receive payment data from our PCI-compliant payment processors and booking data from MindBody.

 

4. Legal Basis for Processing

Under the UK GDPR, we must have a “lawful basis” to process your data. We typically rely on:

  • Managing bookings and payments (Contractual Necessity)
  • Managing studio safety (Health info) (Explicit Consent)
  • Sending studio updates & newsletters (Consent | Opt-in)
  • Improving our studio services (Legitimate Interests)
  • Meeting accounting & tax laws (Legal Obligation)

 

5. Marketing Consents

We strictly follow “Opt-in” marketing practices. We will only send you promotional material if you have explicitly consented to receive it.

  • Withdrawal: You can unsubscribe at any time via the link in our emails or by contacting us.
  • Service Messages: We will still send you “Service Messages” (e.g., booking confirmations, class cancellations) regardless of your marketing status, as these are necessary to fulfill our contract with you.

 

6. Sharing & International Transfers

We do not sell your personal data. We only share it with trusted partners who help us run our business:

  • Mindbody: Our core booking and management software.
  • Mailchimp: For our email newsletters (where you have consented).
  • Payment Processors: To securely handle transactions.

International Transfers: Some of our partners (like Mindbody and Mailchimp) are based in the USA. We ensure they provide adequate protection for your data through the UK Extension to the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) approved by the UK government.

 

7. Data Retention

We keep your data only as long as necessary:

Financial Records: 6 years (statutory requirement for tax).

Health Waivers: 3 years after your last visit for insurance purposes.

Marketing Data: Until you unsubscribe or after 2 years of total inactivity.

 

8. Your Rights Under UK GDPR

You have significant rights over your data. We will respond to any request within one month.

  • Right of Access: Request a full copy of all data we hold about you.
  • Right to Rectification: Ask us to fix any incorrect or outdated information.
  • Right to Erasure: Ask us to delete your data (the “Right to be Forgotten”).
  • Right to Object: Object to our processing based on legitimate interests.
  • Data Portability: Receive your data in a portable electronic format.
  • Withdraw Consent: Stop processing based on your prior consent at any time.

 

9. Cookies Policy

Our website uses cookies to enhance your experience. A “cookie” is a small file stored on your browser.

How We Use Cookies

Strictly Necessary: Essential for you to log in and book classes. Performance/Analytics: Help us see which classes are popular (Google Analytics). Functional: Remember your preferences (like staying logged in)

 

10. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We limit access to your personal data to those employees and partners who have a business need to know

 

11. Children’s Privacy

Our services are generally intended for adults. If a child under 16 attends a class (with parental consent), we only collect the minimum data required, provided by the parent/guardian. We do not knowingly market to children.

 

12. Automated Decisions

We do not use any automated decision-making or profiling technologies that have a legal or significant effect on you.

 

13. How to Complain

If you have a concern, please contact us first so we can resolve it.