PRIVACY POLICY

PRIVACY POLICY
 
[Working draft — recommend a quick solicitor review before this goes live, particularly to confirm the payment processor, booking system and analytics tools once finalised.]
 
Last updated: [Date]
 
1. Who We Are
 Amy Bird Method ("we", "us", "our") is a Pilates and movement practice based in Llandrindod Wells, Mid Wales, operated by Amy Bird. This policy explains how we collect, use and protect your personal information when you visit our website, book a session, join a retreat, or otherwise get in touch with us.
 
If you have any questions about this policy or how we handle your data, contact us at [hello@amybirdmethod.co.uk].
 
2. The Information We Collect
 
  • Contact details: name, email address, phone number, address
  • Booking details: session dates, class preferences, and any health or injury information you choose to share so sessions can be taught safely
  • Payment information: processed securely by our payment provider [Stripe / GoCardless — TBC]. We do not store full card details
  • Retreat bookings: dietary requirements, accommodation preferences and emergency contact details
  • Communications: messages, enquiries and feedback you send us
  • Website usage: collected via cookies and analytics tools (see Cookies below)
 
3. How We Use Your Information
 
  • To manage bookings and deliver sessions safely and effectively
  • To communicate with you about your sessions, retreats or enquiries
  • To send marketing communications, only where you've opted in, and you can unsubscribe at any time
  • To improve our website and services
  • To meet our legal and regulatory obligations
 
4. Health Information
 Where you choose to share information about injuries, conditions or physical limitations, this is used solely to teach you safely and appropriately. This is treated as special category data under UK GDPR, is only used with your consent, is kept confidential, and is never shared without your permission.
 
5. Who We Share Your Information With
 We may share your information with trusted third parties who help us run the business, including:
 
  • [Website and booking platform — TBC]
  • [Payment processor — TBC]
  • [Email marketing platform — TBC]
 
We do not sell your personal information to third parties.
 
6. How Long We Keep Your Information
 We keep your information only for as long as necessary for the purpose it was collected, or as required by law. Financial records, for example, are typically kept for six years.
 
7. Your Rights
 Under UK GDPR, you have the right to:
 
  • Access the information we hold about you
  • Request corrections to inaccurate information
  • Request deletion of your information
  • Withdraw consent to marketing at any time
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk)
 
8. Cookies
 Our website uses cookies to improve your experience and understand how the site is used. You can control cookies through your browser settings. [Detail to be finalised once analytics and cookie tools are confirmed.]
 
9. Security
 We take reasonable steps to protect your personal information, including secure storage and limiting access to those who need it.
 
10. Changes to This Policy
 We may update this policy from time to time. The latest version will always be available on this page.
 
11. Contact Us
 If you have any questions about this policy or your data, please contact:
 Amy Bird Method
 Llandrindod Wells, Mid Wales
 [hello@amybirdmethod.co.uk]