Privacy Policy

​

Last updated: [1st June 2025]

At Onya Pilates, we’re committed to protecting your privacy and ensuring that your personal data is handled responsibly. This privacy policy outlines how we collect, use, and protect your information in line with UK data protection laws.

 

Who We Are

Onya Wellness Ltd
3 Old Church, Hexham< NE461NG
onyapilates@gmail.com
Data Controller: Laura Westlake

 

What Information We Collect

We may collect and process the following types of personal data:

• Your name, email address, and phone number

• Health information relevant to your Pilates sessions (e.g. injuries, pregnancy status)

• Payment details (handled securely through third-party processors)

• Information you provide via our website, forms, or bookings

 

How We Use Your Information

We use your data to:

• Schedule and manage your Pilates sessions

• Tailor sessions to meet your individual needs

• Send class reminders, updates, and promotional offers (if you’ve opted in)

• Maintain health and safety records

• Process payments and manage bookings

We only collect the information we need and keep it only for as long as necessary.

 

Legal Bases for Processing

We rely on one or more of the following legal bases:

• Your consent (e.g. to receive marketing emails)

• Performance of a contract (e.g. booking and delivering classes)

• Legal obligations (e.g. health and safety requirements)

• Legitimate interests (e.g. improving services)

 

How We Store Your Data

We store your data securely using trusted software providers and systems. We regularly review our security practices to protect your personal information from unauthorised access or disclosure.

 

Sharing Your Data

We never sell your data. We may share it with:

• Payment processors (e.g. Stripe, Square)

• Booking platforms (e.g. TeamUp, Acuity)

• Health professionals (with your explicit consent)

 

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Correct or update inaccurate information

• Request deletion of your data (where applicable)

• Withdraw your consent at any time

• Object