Privacy Policy

Onavie Reformer Pilates ("we", "us", "our") is the data controller for the personal data described in this policy. Our studio is at 1 Babylon Ln, Adlington, Chorley PR6 9NR, United Kingdom.

For anything relating to your personal data, contact us at admin@onaviepilates.com.

We collect personal data through two routes.

Website enquiry form. When you send an enquiry we collect your name, email address, phone number if you give one, and the content of your message.

Class bookings through MindBody. Bookings, class passes and memberships are taken through MindBody, our third-party booking and payments provider. When you book, MindBody collects your name, email address, phone number, booking and attendance history, purchase history, and any health or injury information you choose to share with us so we can adapt an exercise safely. Card details are handled by MindBody and its payment processors; we never see or store your full card number.

We also receive basic technical information such as your IP address and browser type in our hosting provider's server logs, which are kept for security and troubleshooting.

• Enquiries that do not become bookings: kept for 12 months from your last message, then deleted.
• Client and booking records held in MindBody: kept for the life of your account and for 3 years after your last class, then deleted or anonymised.
• Health and injury information: kept for as long as you are an active client and for 3 years after your last class.
• Financial and transaction records: kept for 6 complete financial years, as required by HMRC.
• Marketing consents and unsubscribes: kept for as long as needed to honour your preference.
• Server logs: kept for up to 12 months.

We do not sell your personal data. We share it only with the suppliers we need to run the studio, each of whom acts on our instructions:

• MindBody (Mindbody Inc.) — our booking, class management and payments provider. Bookings, purchases and client records are held in MindBody, and its booking and pricing widgets are embedded on our Book and Offer pages.
• Our email provider — used to receive and reply to enquiries sent from this website and to send booking-related emails.
• Our website hosting provider — hosts this site and keeps short-lived server logs.
• Google Maps — the map on our Studio and Contact pages is embedded from Google, which receives your IP address when the map loads.
• Professional advisers, our accountant, and HMRC where the law requires it.

We do not run any advertising or analytics tracking on this website. Some of these suppliers, including MindBody and Google, are based outside the UK. Where personal data is transferred abroad it is protected by UK adequacy regulations or by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

This website does not use analytics, advertising or tracking cookies, and it does not set any non-essential cookies of its own. Because of that there is no cookie consent banner — there is nothing to consent to.

Two features on the site are embedded from third parties and may set their own cookies in your browser when the relevant page loads:

• MindBody booking and pricing widgets on the Book and Offer pages — strictly necessary for the booking process to work, including keeping your place in a booking session.
• Google Maps on the Studio and Contact pages — set by Google when the map loads.

You can block or delete cookies in your browser settings. Blocking cookies from MindBody will stop online booking from working. If we ever add analytics or marketing cookies, we will ask for your consent first and update this policy.

Under UK GDPR you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data where we no longer have a reason to keep it.
• Restriction — ask us to pause how we use your data while a concern is resolved.
• Object — object to processing we carry out under legitimate interests, and object to direct marketing at any time.
• Portability — receive the data you gave us in a portable format, or have it sent to another provider.
• Withdraw consent — withdraw consent at any time where we rely on it, including for marketing emails and health information.

Email admin@onaviepilates.com or write to us at 1 Babylon Ln, Adlington, Chorley PR6 9NR. Tell us which right you want to use and enough detail for us to find your records. We may ask for proof of identity so we do not disclose your data to someone else.

There is no charge, and we will respond within one month. If a request is unusually complex we may extend that by up to two further months and will tell you why.

If you are unhappy with how we have handled your personal data, please tell us first at admin@onaviepilates.com so we can put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113, or ico.org.uk.

We review this policy whenever our services or suppliers change. When we update it we change the date at the top of this page, and for significant changes we will let clients know by email.