Forge Pilates (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and what rights you have over it, in line with UK GDPR and the Data Protection Act 2018.
1. Who We Are
We are the data controller for the personal information described in this policy. You can contact us at:
- Forge Pilates Ltd
- 18 Rose Drive, Cringleford, Norwich, NR4 7SZ
- becca@forgepilates.co.uk
2. Information We Collect
We collect information you give us directly, and some information automatically when you use our website:
- Enquiry form — name, email address, phone number (optional), and the content of your message.
- Class, workshop & event bookings — handled through our booking platform, GymFlow, which collects your name, contact details, and booking history on our behalf, as our data processor.
- Gift voucher purchases — your name, email address, and payment details, processed securely through GymFlow, which uses its own trusted third-party payment processors to handle card data; we do not store your full card details.
- Website usage data — automatically collected via cookies and similar technologies, such as your IP address, browser and device type, pages visited, and how you interact with the site. See our Cookie Policy for details.
3. How We Use Your Information
We use your information to:
- Respond to your enquiries and communicate with you;
- Process and manage your class, workshop, or event bookings and gift voucher purchases;
- Send you information you’ve asked for (e.g. class updates), where you’ve consented to this;
- Understand how our website is used and improve it;
- Meet our legal and regulatory obligations.
Our legal basis for using your information is: performance of a contract (e.g. processing a booking), your consent (e.g. marketing communications, non-essential cookies), and our legitimate interests (e.g. improving our website and services), as applicable.
4. Who We Share Your Information With
We work with trusted third parties who process personal information on our behalf, under contract, including:
- GymFlow — our class, event, and gift voucher booking and payment platform. GymFlow processes your booking and payment information as our data processor, using its own secure third-party payment processors to handle card data;
- Google — for Google Maps/Places (studio location and reviews) and Google Analytics (website usage);
- Complianz — our cookie consent management plugin, which records your cookie preferences;
- Email/communication providers — for sending enquiry responses and any communications you’ve opted into.
We do not sell your personal information to third parties. We will only share your information beyond this where required by law.
5. Cookies
Our website uses cookies and similar technologies to operate correctly and to understand how visitors use the site. Full details, including how to manage your preferences, are set out in our Cookie Policy.
6. How Long We Keep Your Information
We keep personal information only for as long as necessary for the purposes it was collected for — for example, enquiry details are kept only for as long as needed to respond to and resolve your enquiry, and booking records are kept in line with GymFlow’s retention practices and our accounting/legal obligations.
7. Security
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to keep your information safe.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you;
- Ask us to correct inaccurate information;
- Ask us to delete your information, in certain circumstances;
- Restrict or object to how we use your information;
- Request a copy of your information in a portable format;
- Withdraw consent at any time, where we rely on consent.
To exercise any of these rights, contact us at becca@forgepilates.co.uk. If you’re unhappy with how we’ve handled your information, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Children’s Privacy
Forge Pilates classes and our booking system are for those aged 18 and over only, so we don’t knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will remove it.
10. Third-Party Links
Our website may link to third-party sites (such as Instagram or Google Maps). We are not responsible for the privacy practices of any site we don’t operate ourselves.
11. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page with an updated “last updated” date.
12. Contact Us
If you have any questions about this policy or how we handle your information, please contact us at becca@forgepilates.co.uk.