Privacy Policy
Last updated: June 2026
ⓘ This policy applies to Phoenix Yoga, 230 Upper Richmond Road, Putney, London SW15 6TG. We are the data controller for information you provide to us.
1. Who we are
Phoenix Yoga is a community-owned yoga studio based in Putney, London. We are the data controller for any personal information you provide to us when using our website, booking classes, joining our mailing list, or enquiring about our services.
If you have any questions about this policy or how we handle your data, please contact us at info@phoenixyoga.co.uk.
2. What information we collect
Information you give us directly
- Name and email address when you sign up to our mailing list
- Name, email address, and message content when you contact us via our contact form
- Name, contact details, and relevant health information when you register for classes or membership
- Payment information when you purchase a membership, class pack, or event ticket (processed securely by our payment provider — we do not store card details ourselves)
- Any information you share with us voluntarily, including health or injury information relevant to your yoga practice
Information collected automatically
- Basic analytics data about how visitors use our website (pages visited, time on site, device type)
- Cookie data (see Section 8)
Information from third parties
- If you book classes through Momence (our scheduling platform), we may receive booking and attendance information from them
3. How we use your information
| Purpose | Information used |
|---|---|
| Processing class bookings and managing your membership | Name, email, payment details, attendance history |
| Sending you the newsletter or class updates you signed up for | Name, email address |
| Responding to your enquiries and contact form submissions | Name, email, message content |
| Ensuring your safety during classes | Any health information you share with us |
| Improving our website and understanding how people use it | Anonymised analytics data |
| Complying with legal and financial obligations | Transaction records, contact details |
| Sending you occasional updates about new classes, events, or offers (only if you have opted in) | Name, email address |
We will never sell your personal data to third parties, or use it for purposes other than those listed above without first seeking your consent.
4. Lawful basis for processing
- Contract — to fulfil your booking, membership, or purchase
- Legitimate interests — to operate our business, respond to enquiries, and improve our services
- Consent — for marketing emails and newsletters. You can withdraw consent at any time by clicking "unsubscribe" in any of our emails
- Legal obligation — where we are required to retain financial records or comply with applicable law
5. Third parties
- Momence — our class scheduling and booking platform. Please review Momence's Privacy Policy.
- Payment processors — card payments are processed securely. We do not store full card numbers on our own systems.
- Google Analytics — we may use this to understand website traffic. Data is anonymised and aggregated.
- Email marketing services — used to send newsletters you have opted into.
We only share the minimum data necessary and require all third parties to maintain appropriate security standards.
6. How long we keep your data
- Membership and booking records — retained for 7 years from the end of your membership for financial and legal compliance
- Email marketing data — retained until you unsubscribe or request deletion
- Contact form submissions — retained for up to 2 years, or until your enquiry is resolved
- Health information — retained while you are an active member and for 1 year after your last class
- Website analytics — anonymised and aggregated; not retained as individually identifiable data
7. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate or incomplete data
- Right to erasure — you can ask us to delete your data where we have no lawful reason to continue holding it
- Right to restrict processing — you can ask us to pause how we use your data in certain circumstances
- Right to data portability — you can ask for your data in a machine-readable format where technically feasible
- Right to object — you can object to processing based on our legitimate interests, including direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please email info@phoenixyoga.co.uk. We will respond within one month.
If you are not satisfied, you have the right to lodge a complaint with the ICO at ico.org.uk.
8. Cookies
- Strictly necessary cookies — required for the site to function correctly. These cannot be disabled.
- Analytics cookies — help us understand how visitors use the site. These are anonymised. You can opt out by adjusting your browser settings.
We do not use advertising or tracking cookies.
9. Security
We take reasonable steps to protect your personal data against unauthorised access, loss, or disclosure. These include using secure, reputable third-party platforms for payment processing and booking, and limiting access to personal data to those who need it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised date at the top. Where changes are significant, we will notify active members by email.
11. Contact us
- Email: info@phoenixyoga.co.uk
- Post: Phoenix Yoga, 230 Upper Richmond Road, Putney, London SW15 6TG
