Privacy Policy

In Flow Studio, Cheltenham

Last updated: May 2026

1. Who We Are

In Flow Studio is a yoga studio based in Cheltenham, UK. We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, In Flow Studio is the data controller. If you have any questions about this policy or how we handle your data, please contact us at:

In Flow Studio Cheltenham

Hands On Wellbeing Centre, Cheltenham, GL52 2PB

Email: hello@inflowstudio.co.uk

Website: www.inflowstudio.co.uk

2. What Personal Data We Collect

We may collect and process the following personal data:

Name and contact details (email address, phone number, postal address)
Date of birth (where relevant for class eligibility or insurance purposes)
Health and medical information you choose to share with us (e.g. injuries, conditions relevant to yoga practice)
Payment and billing information (processed securely via our payment provider)
Class booking and attendance history
Membership and account details
Communications you send to us (e.g. enquiries, feedback)
Technical data if you use our website (e.g. IP address, browser type, cookies)

3. How We Collect Your Data

We collect your personal data when you:

Sign up as a student or member, in person, online, or via our booking platform
Book a class, workshop, or event
Purchase a membership, class pass, or product
Complete a health questionnaire or intake form
Contact us by email, phone, or social media
Subscribe to our mailing list or newsletter
Visit our website

4. Why We Use Your Data (Lawful Basis)

We process your personal data on the following lawful bases

Contract Performance

To manage your bookings, memberships, and payments, and to deliver the services you have signed up for.

Legitimate Interests

To send you communications relevant to your membership and experience at In Flow Studio, such as timetable updates, class changes, studio news, workshops, events, and relevant offers. We believe this is proportionate and you would reasonably expect to receive this information as one of our students.

Legal Obligation

To comply with any legal or regulatory requirements, such as maintaining financial records or responding to legal requests.

Consent

Where we rely on your consent (for example, to send you specific marketing content beyond our regular studio communications), you may withdraw that consent at any time by contacting us or using the unsubscribe link in any email

5. How We Share Your Data

We do not sell your personal data. We may share it with trusted third parties who assist us in running the studio, including:

Our booking and scheduling platform provider, Momoyoga
Payment processors (who handle transactions securely on our behalf)
Email marketing platforms (used to send studio communications)
Accountants or professional advisers, where required

All third parties are required to handle your data securely and in accordance with UK data protection law.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

Active member data is retained for the duration of your membership and for up to 3 years afterwards
Financial records are retained for 6 years in line with HMRC requirements
Health and medical information is retained for as long as you remain a student, and deleted promptly upon request thereafter

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access – to request a copy of the data we hold about you
Right to rectification – to ask us to correct inaccurate or incomplete data
Right to erasure – to request deletion of your data in certain circumstances
Right to restrict processing – to ask us to limit how we use your data
Right to data portability – to receive your data in a structured, commonly used format
Right to object – to object to processing based on legitimate interests or for direct marketing
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [studio email address]. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our booking systems and payment providers use industry-standard encryption and security protocols

9. Cookies and Website Data

Our website may use cookies to improve your browsing experience and to analyse site traffic. You can control cookie settings through your browser at any time. For full details on how our website uses cookies, please refer to our Cookie Policy

10. Children’s Data

Where we offer classes or activities to individuals under the age of 18, we will collect and process the personal data of a parent or guardian, and obtain their consent on behalf of the child. We do not knowingly collect personal data directly from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website and, where appropriate, communicated to you directly. The date at the top of this document reflects when it was last revised

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: