Your data
Privacy Policy
Last updated: [DATE – Kirsten to confirm before launch]
Hi, I'm Ella. I take care of your personal information the same way I'd want mine looked after. This page explains, in plain English, what I collect, why, and what your rights are under UK data protection law (UK GDPR and the Data Protection Act 2018).
Who I am
Ella Lane Yoga is run by Ella Lane, a sole trader. I'm the "data controller" for your information. You can reach me any time at [email protected]. Postal address: [ADDRESS – to be confirmed].
What I collect and why
- Account and booking details (name, email, the classes and packages you book, attendance). I need these to take your booking and run classes. Lawful basis: contract.
- Payment details. Card payments are handled securely by Stripe. I never see or store your full card number; I only see that a payment was made. Lawful basis: contract, and legal obligation for keeping financial records.
- Booking emails (confirmations and class reminders). Lawful basis: contract.
- Messages you send me through the contact form or by email. Lawful basis: legitimate interests (replying to you).
- Newsletter (only if you sign up). Lawful basis: consent. You can unsubscribe any time.
- Health information you choose to share (for example an injury or pregnancy) so I can keep you safe in class. Lawful basis: your explicit consent. Only share what you're comfortable with.
Who helps me (processors)
- Siteglide: hosts this website and stores account and booking records.
- SendGrid (Twilio): sends booking confirmation and reminder emails.
- Stripe: processes card payments.
- Google Fonts: serves the fonts on this site, which means your IP address is shared with Google when a page loads.
Some of these providers may process data outside the UK. Where they do, they use approved safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses. I never sell your data.
How long I keep it
- Account and booking records: while your account is active, then [2 years – to confirm] after your last booking.
- Payment and accounting records: 6 years, as HMRC requires.
- Contact messages: up to 12 months.
- Newsletter: until you unsubscribe.
Your rights
You can ask to see, correct or delete your data, to restrict or object to how I use it, or to get a copy to take elsewhere. Where I rely on consent, you can withdraw it at any time. Just email me; I'll reply within one month.
Complaints
If you're unhappy, please talk to me first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
Cookies
See my Cookie Policy.
