1. Who We Are
Strong Pilates Franchising UK Limited is the data controller responsible for your personal data. We are a company registered in England and Wales (company number 16140200). Our registered office is at C/O Stevens & Bolton LLP, Wey House, Farnham Road, Guildford, Surrey, GU1 4YD.
We are registered with the Information Commissioner’s Office (ICO). Our ICO registration number is ZC182561.
This Privacy Notice explains how we collect, use, store and share personal data when you visit or use our website at strongpilates.co.uk, use our mobile application, or otherwise interact with us (together, the “Platform”). It applies to customers, website visitors and suppliers.
If you have any questions about this Privacy Notice or how we handle your personal data, please contact our data controller at: john@strongpilates.co.uk.
2. Personal Data We Collect
We may collect and process the following categories of personal data about you:
- Identity data: first name, last name, username or similar identifier.
- Contact data: email address, postal address, telephone number.
- Account data: username, password (stored in encrypted form), account preferences.
- Transaction data: details of class bookings, membership purchases and payments made through the Platform.
- Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access the Platform.
- Usage data: information about how you use the Platform, including pages visited, links clicked and session duration.
- Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
- Health data (where provided voluntarily): any health or fitness information you choose to provide when completing registration forms or booking classes. This is special category data and we will only process it where you have given explicit consent or where processing is necessary for the purposes set out in this Notice.
We collect personal data directly from you (when you create an account, make a booking or contact us), automatically through your use of the Platform (via cookies and similar technologies, as described in our Cookie Policy), and from third parties such as our booking platform provider Hapana (see the Hapana Privacy Policy).
3. How We Use Your Personal Data and Our Lawful Bases
| Purpose | Type of data | Lawful basis |
|---|---|---|
| To register you as a user and manage your account | Identity, contact, account data | Performance of a contract with you |
| To process and manage class bookings and membership purchases | Identity, contact, transaction data | Performance of a contract with you |
| To send you booking confirmations and service communications | Identity, contact data | Performance of a contract with you |
| To manage our relationship with you, including notifying you of changes to our terms or this Privacy Notice | Identity, contact, marketing and communications data | Performance of a contract; legal obligation; legitimate interests (keeping records up to date) |
| To deliver relevant website content and measure the effectiveness of content | Technical, usage data | Legitimate interests (to study how customers use our Platform, to develop it and to grow our business) |
| To send you marketing communications by email or SMS (where you have opted in) | Identity, contact, marketing and communications data | Consent |
| To use data analytics to improve our Platform, products, marketing and customer relationships | Technical, usage data | Legitimate interests (to keep our Platform updated and relevant, to develop our business and to inform our marketing strategy) |
| To comply with legal and regulatory obligations | Identity, contact, transaction data | Legal obligation |
| To process health data provided voluntarily in connection with class participation | Health data | Explicit consent |
4. Sharing Your Personal Data
We may share your personal data with the following categories of third parties:
- Strong Franchisees: the independently owned and operated franchisee from which you book classes or purchase services. Your data will be shared with that franchisee to enable your booking and manage your membership.
- Hapana: our online booking platform provider. See the Hapana Privacy Policy for details of how Hapana processes your data.
- IT and system providers: companies that provide IT, system administration and platform services.
- Analytics providers: companies that provide analytics and search engine services that help us improve and optimise our Platform.
- Professional advisers: lawyers, accountants and insurers.
- Regulators and authorities: where required by law or to protect our legal rights.
We do not sell your personal data to third parties.
Where we share personal data with third parties outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including the use of the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual clauses where applicable.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting obligations. In general:
- Account and transaction data is retained for 6 years following the end of our relationship with you, to comply with tax and financial record-keeping requirements.
- Marketing data is retained until you withdraw consent or opt out.
- Technical and usage data is retained for up to 26 months in line with typical analytics retention periods.
To determine the appropriate retention period for other categories of personal data, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes by other means, and applicable legal requirements.
6. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to request that we correct inaccurate or incomplete personal data.
- Right to erasure: to request that we delete your personal data in certain circumstances.
- Right to restrict processing: to request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability: to request that we transfer your personal data to you or a third party in a structured, commonly used, machine-readable format, where processing is based on consent or a contract.
- Right to object: to object to processing of your personal data where we rely on legitimate interests as our lawful basis, and to object to processing for direct marketing purposes at any time.
- Rights in relation to automated decision-making: we do not currently make decisions about you using solely automated processing that produce legal or similarly significant effects.
- Right to withdraw consent: where we rely on consent as our lawful basis, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
To exercise any of these rights, please contact us at john@strongpilates.co.uk. We will respond to your request within one month. We may need to verify your identity before processing your request.
7. Cookies
Our Platform uses cookies and similar tracking technologies. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.
8. How to Complain
If you have concerns about how we handle your personal data, please contact us in the first instance at john@strongpilates.co.uk and we will do our best to resolve your concern.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the supervisory authority for data protection in the UK:
- Website: ico.org.uk/make-a-complaint
- Telephone: 0303 123 1113
9. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. When we make material changes, we will notify you through a prominent notice on the Platform or by other appropriate means. The date at the top of this page will always reflect when this Notice was last updated.
10. Contact Us
Strong Pilates Franchising UK Limited
C/O Stevens & Bolton LLP
Wey House, Farnham Road
Guildford, Surrey
GU1 4YD
United Kingdom
Data controller email: john@strongpilates.co.uk
General enquiries: support@strongpilates.co.uk
ICO registration number: ZC182561