Privacy Policy
How Jess Wicks Pilates collects, uses and protects your personal information.
1. Who we are
Jess Wicks Pilates (“we”, “us”, “our”) provides Mat Pilates classes in Surrey, live online classes, and Pilates sessions for workplaces and events. We are the data controller for the personal information described in this policy.
For any question about this policy, or to exercise any of the rights described below, email jesswickspilates@gmail.com.
2. What information we collect
- Information you give us. Your name, email address, telephone number and any details you choose to share when you enquire about or book a class, including relevant health information such as injuries, pregnancy or medical conditions, where you tell us about them so we can teach you safely.
- Booking and payment information. Records of the classes and blocks you have booked and paid for. We do not store your full card details; payments are handled by our payment provider.
- Information collected automatically. If you consent to analytics or marketing cookies, we (and the providers named in our Cookie Policy) collect information about your device, approximate location and how you use this website.
- Marketing preferences. Whether you have asked to receive class updates by email, and whether you have unsubscribed.
3. How we use your information, and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Answer your enquiries and arrange your classes | Contract, or legitimate interests where no contract is yet in place |
| Take payment and keep financial records | Contract; legal obligation (tax and accounting) |
| Adapt classes to your health needs and teach you safely | Explicit consent (health data is special category data) |
| Send you class updates, timetables and offers by email | Consent, or soft opt-in for existing clients. You can unsubscribe at any time |
| Analytics cookies, to understand how the site is used | Consent |
| Marketing cookies and pixels, including Meta Pixel | Consent |
| Keep records for insurance and to deal with any complaint or claim | Legitimate interests; legal obligation |
Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
4. Health information
Health details are treated as special category data. We collect them only where you volunteer them, use them only to teach you safely and to make appropriate modifications, keep them to the minimum necessary, and never share them with anyone else without your permission.
5. Who we share information with
We do not sell your personal information. We share it only with service providers who help us run the business, each acting under contract and only for the purposes we specify:
- Email and calendar providers used to correspond with you and manage bookings
- Payment providers who process class and block payments
- Website hosting and analytics providers
- Advertising platforms, where you have consented to marketing cookies
- Our insurers or professional advisers, where necessary to deal with a claim
- Regulators or law enforcement, where we are legally required to do so
Some of these providers are based outside the UK. Where information is transferred internationally, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Enquiries that don’t lead to a booking: up to 12 months.
- Client and booking records: for the duration of our relationship and then up to 6 years, to meet tax, accounting and insurance requirements.
- Health information: for as long as you attend classes, and then in line with our insurer’s requirements.
- Marketing consents and unsubscribes: for as long as needed to honour your choice.
- Cookie data: as set out in our Cookie Policy.
7. Your rights
Under UK data protection law you have the right to: be informed about how your data is used; access a copy of your data; have inaccurate data corrected; have your data erased in certain circumstances; restrict how we use it; object to processing based on legitimate interests; object to direct marketing at any time; receive your data in a portable format; and withdraw consent where we rely on it.
To exercise any of these, email jesswickspilates@gmail.com. We will respond within one month. There is normally no charge.
8. Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.
9. Security
We use appropriate technical and organisational measures to protect your information, including access controls, device encryption and limiting who can see health data to those who need it to teach you. No transmission over the internet can be guaranteed completely secure, but we take this seriously.
10. Children
Our classes and this website are intended for adults. We do not knowingly collect information about anyone under 16 without the consent of a parent or guardian.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be highlighted on this page.