Privacy Policy: Studio Align Ltd
Last updated: May 2026
Introduction
Studio Align Ltd respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your personal data when you visit our website, use our app, purchase our services, attend our studio(s) and/or attend our sessions. It also explains your privacy rights and how the law protects you.
1. Important Information and Who We Are
Studio Align Ltd is the Data Controller and is responsible for your personal data.
Company Number: 16816288
Trading Address: 293A Harborne Lane, Birmingham, B17 0NT
Registered Office: 293A Harborne Lane, Birmingham, B17 0NT
Email Address:hello@studioalign.uk
Website:www.studioalign.uk
For privacy-related queries, please contact us at info@studioalign.uk. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO) (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns first, so please contact us in the first instance.
2. The Personal Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, including:
Identity Data: Includes first name, last name, title, date of birth, and gender.
Contact Data: Includes billing address, email address, and telephone number.
Transaction Data:Includes details about payments, memberships, class packs, bookings, and attendance history.
Financial Data: Includes transaction status and limited payment info. Payments are processed securely by Stripe; we do not store your full payment card numbers.
Technical Data: Includes IP address, browser type, cookies and usage data, time zone, and device platform.
Profile Data: Includes your username, password, purchase history, and feedback.
Marketing Data: Includes your preferences in receiving marketing from us.
Health Data (Special Category): Information relating to your health (information provided on your PAR-Q form, injuries, pregnancy status, or medical conditions and emergency contact details) provided so we can ensure your safe participation in classes. This is treated as special category data and handled with extra care (see Section 6).
Image Data: Photographs or video recordings occasionally taken in our studio for marketing or promotional purposes. We will only capture and use images where we have a lawful basis to do so (see Section 5). Where you are the main subject of the content, we will obtain your explicit consent before capturing or using the image. You may appear incidentally in the background of wider studio images or videos.
CCTV Data: CCTV footage captured in the main studio area for security, safety and incident investigation purposes. Footage may capture clients, instructors, staff and visitors.
3. How Your Personal Data is Collected
Direct Interactions: Creating an account, booking classes, completing health waivers/PAR-Qs, contacting us by email, phone, social media*, attending sessions or events, signing up for marketing communications or requesting information.
Automated Technologies: Technical Data collected via cookies as you interact with our website.
Third Parties: Data from Mariana Tek (booking platform and app), Stripe (payments), and analytics providers (Website and app use).
Studio Photography and Videography: On occasion, we may take photographs or videos in the studio for marketing or promotional purposes. Where you are the main subject, we will ask for your explicit consent before capturing or using the content. You may appear incidentally in the background of wider studio images; this is not the primary purpose of the recording and is processed under legitimate interests.
Studio CCTV: CCTV footage is collected from cameras operating in the main studio area for security, safety and incident investigation purposes.
* If you contact us via social media such as Instagram, any personal data we receive by us will be processed in accordance with this policy. However, we do not control these third-partyplatforms and are not responsible for their privacy policies or statements. You are encouraged to review these to ensure you understand how the process any personal data they collect when you use these platforms.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. We use your data to:
Manage your account and membership and process bookings and payments.
Provide safe and appropriate Pilates instruction and ensuring your safety by reviewing health information and waivers.
Operate CCTV for security, safety, incident investigation, insurance, legal or regulatory purposes.
Communicate service updates, timetable changes, and reminders.
Send marketing communications where permitted by law.
Maintaining financial records.
Comply with legal obligations, e.g. tax or insurance obligations.
Improve our services and website.
Create Marketing and Promotional Content- we may use photographs or videos taken in the studio to promote our services on our website and social media channels and in printed promotional materials.
5. Lawful Bases for Processing
We rely on the following bases as set out within data protection legislation:
Performance of a Contract: To provide the services you have purchased; to manage your bookings, membership and payments; to communicate with you about service updates, timetable changes, and reminders.
Legitimate Interests: To run and improve our business and website; to keep records updated; to communicate with you about service updates etc; to manage accidents, accidents or insurance claims; to promote and grow our business by creating general marketing content that may include incidental images of clients in the background of studio photographs or videos. We take steps to ensure this does not override your rights or interests.
CCTV footage: To be processed under our legitimate interests in protecting our premises, equipment, clients, staff and business, and in managing security, safety, incident investigation, insurance, legal or regulatory matters.
Legal Obligation: To comply with legal obligations including tax and health and safety.
Consent: To process your health information; for specific marketing communications; where you are the main or identifiable subject of a photograph or video intended for marketing or promotional use, we will ask for your explicit consent before capturing or using the content.
6. Special Category Health Data
Processing your health data requires an extra layer of protection by law. We process your health information based on your explicit consent. By completing a PAR-Q or waiver, you provide consent for us to use that information to assess your suitability for classes. If you do not provide this information, we may be unable to allow you to participate for safety reasons.
We will never share your health data without your explicit consent unless required by law.
7. Marketing Communications
Service Communications: You will receive emails regarding bookings and payments regardless of marketing preferences.
Marketing: We only send marketing emails/SMS if you have opted in (or via "soft opt-in" for existing customers).
Opting Out: You can unsubscribe at any time via the link in our emails or by contacting info@studioalign.uk.
8. Disclosures of Your Personal Data
We do not sell your personal data.
We may share your data with trusted third parties who help us operate our business:
Mariana Tek (Studio Management; booking platform and app) and Stripe (Payments).
Our freelance instructors who run our sessions.
Professional advisers (lawyers, insurers, accountants, and bankers).
HMRC or regulators where required by law.
Third parties to whom we may choose to sell, transfer, or merge parts of our business.
CCTV footage may be shared with professional advisers, insurers, law enforcement, regulators or other third parties where necessary for security, safety, incident investigation, insurance, legal or regulatory purposes, or where required by law.
Marketing Platforms: We may publish photographs or videos in printed promotional materials and on our website and social media platforms (such as Instagram or Facebook). These platforms may process your data in accordance with their own privacy policies.
All third parties must keep your personal data secure and comply with GDPR.
9. International Transfers
Some of our providers may process data outside the UK. We ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or UK Addendums, are in place to ensure your personal data receives the same protection it has in the UK.
10. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, including secure systems, password protection, restricted access and regular data reviews. We limit access to your personal data to those service providers who have a genuine business need to know.
11. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We typically keep personal data for the following periods:
- Booking and attendance records: 6 years
- Payment records and invoices: 6 years
- Health and medical information: 7 years after your last interaction
-Accident/incident reports: 3 years, or until a child turns 21
- Marketing contact details: until you unsubscribe or become inactive
- Website analytics/cookie data: typically up to 26 months
- General enquiries: up to 12 months
- Image data: up to 3 years
- CCTV footage: kept only for as long as reasonably required, unless needed for an investigation, insurance, legal or regulatory purpose
After these periods, your personal data is securely deleted or anonymised.
12. Your Legal Rights
Under UK data protection laws, you have rights including:
Access: Request a copy of your personal data.
Correction: Request correction of inaccurate data.
Erasure: Request that we delete your data in certain circumstances.
Object/Restrict:Object to or restrict the processing of your data.
Portability: Request your personal data in a structured form or have it transferred elsewhere.
Withdraw Consent: Withdraw consent at any time where we rely on it. This will not affect the lawfulness of any use prior to withdrawal.
To exercise these rights, please email hello@studioalign.uk. You may also complain to the ICO at https://ico.org.uk.
13. Children and Under-18s
Our services are primarily intended for adults. Where we permit those under 18 to attend, we require explicit parental or guardian consent to process their data and manage their safety.
14. Cookies
We use cookies to distinguish you from other users and improve your experience, analyse traffic and support functionality. You can adjust your browser settings to refuse cookies, though some parts of our site may not function correctly as a result.
15. Third-Party Links
Our website or app may include links to third-party websites or plugins. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy policies or statements, which you are encouraged to review.
16. If You Fail to Provide Personal Data
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with a Pilates class). In this case, we may have to cancel your booking, but we will notify you if this is the case at the time.
17. Photography and Videography in the Studio
We may occasionally take photographs or videos in the studio for marketing or promotional purposes. We will always inform you in advance when photography or filming is taking place.
If you are the main or identifiable subject of the content, we will request your explicit consent before capturing or using the image.
You may appear incidentally in the background of wider studio images; this is processed under our legitimate interests.
You can object to being included in any photography or videography by informing a member of staff before your session.
You may withdraw your consent at any time by contacting info@studioalign.uk.
18. CCTV in the Studio
We operate CCTV in the main studio area for security, safety and incident investigation purposes.
Footage may capture clients, instructors, staff and visitors.
CCTV is not used in toilet areas.
We process CCTV footage on the basis of our legitimate interests in protecting our premises, equipment, clients, staff and business.
Footage is stored securely, accessed only where necessary, and kept only for as long as reasonably required unless needed for an investigation, insurance, legal or regulatory purpose.
For questions about CCTV or your data rights, contact info@studioalign.uk.
19. Changes to this Policy
We may update this Privacy Policy occasionally. The latest version will always be available on our website.