Privacy policy.

Last updated: 2 July 2026

1. Who we are

Vanessa Flow Yoga Ltd is responsible for the personal data described in this Privacy Policy. We operate a yoga studio in the Ribble Valley and this website, vanessaflowyoga.co.uk.

• Company: Vanessa Flow Yoga Ltd
• Address: The Beauty Boutique, Link 59 Business Park, Unit 5, Deanfield Drive, Clitheroe BB7 1QJ
• Email: contact@vanessaflowyoga.co.uk
• Phone: 07519 677 644

If you have any questions about this policy or how we use your personal data, please get in touch using the details above.

2. What we collect

Depending on how you use our studio or website, we may collect:

• Identity and contact details: such as your name, email address, phone number and, where provided, your postal address.
• Booking and account information: including the classes, memberships, passes, packs and events you book, along with your attendance history and booking account.
• Payment information: payments are processed securely by our booking provider. We don't store your full payment card details.
• Health information: where you choose to tell us about injuries, pregnancy or health conditions so we can help keep you safe during classes. This is treated as special category data (see Section 4).
• Marketing preferences: whether you've chosen to receive marketing emails from us.
• Messages: anything you send us through our contact form, by email or via social media.
• Website and device information: such as your IP address, browser type and pages visited, collected through cookies and similar technologies. Please see our Cookie Policy for more information.

3. How we use your information

Under UK GDPR, we must have a lawful reason for using your personal data. We use your information to:

• Manage your bookings, memberships and payments. Lawful basis: performance of a contract.
• Help keep you safe in class using any health information you choose to share. Lawful basis: your explicit consent and, where appropriate, protection of your vital interests (see Section 4).
• Respond to your enquiries. Lawful basis: legitimate interests.
• Operate, maintain and improve our studio and website. Lawful basis: legitimate interests.
• Send updates about classes, events and offers. Lawful basis: your consent or, where permitted, our legitimate interests as described by UK marketing regulations. You can unsubscribe at any time.
• Meet our legal, accounting and tax obligations. Lawful basis: legal obligation.
• Measure website performance and advertising through cookies. Lawful basis: your consent.

4. Health information

Health information is treated as special category data under UK GDPR.

We only collect this information when you choose to share it with us so our teachers can adapt classes where appropriate and help keep you safe.

We won't use this information for any other purpose. You can ask us to update or delete it at any time, although we may retain a limited record where necessary to meet our legal responsibilities or defend a legal claim.

5. Who we share your information with

We never sell your personal data. We only share it with trusted service providers who help us operate the studio and website, and only where it's necessary. These currently include:

• Momence: our booking, scheduling and payment platform.
• Meta (Facebook & Instagram): used for advertising measurement and remarketing where you've accepted marketing cookies.
• Google: including Google Maps, Google Analytics 4 and Google Ads where you've consented to the relevant cookies.
• Behold: used to display our latest Instagram posts.
• Netlify: our website hosting provider, which processes website logs and contact form submissions.
• Our email provider: used to send booking confirmations, studio updates and marketing emails.
• Professional advisers or public authorities: such as our accountant, legal advisers or regulators where we're legally required to do so.

Some of these providers may process data outside the UK, including in the United States. Where this happens, we rely on approved legal safeguards such as UK adequacy regulations or Standard Contractual Clauses.

6. How long we keep your information

We only keep your personal data for as long as necessary.

• Booking, membership and financial records: up to 6 years after your last activity to meet legal and accounting requirements.
• Health information: while you're an active customer and for a reasonable period afterwards, before being securely deleted.
• Marketing preferences: until you unsubscribe or ask us to stop contacting you.
• General enquiries: only for as long as needed to deal with your enquiry and for a short period afterwards.

7. Your rights

Under UK GDPR, you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your personal data where we're no longer required to keep it.
• Ask us to restrict how we use your information in certain circumstances.
• Object to processing based on legitimate interests or for direct marketing.
• Request that we transfer your data to another provider.
• Withdraw your consent at any time where we've relied on it.

To exercise any of these rights, please email contact@vanessaflowyoga.co.uk. We'll respond within one month.

8. Complaints

If you have any concerns about how we've handled your personal data, we'd appreciate the opportunity to put things right first.

You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

9. Changes to this policy

We may update this Privacy Policy from time to time. Whenever we do, we'll update the "Last updated" date at the top of this page. We recommend checking this page occasionally to make sure you're viewing the latest version.