Privacy Policy

Effective Date: 21 December 2024

At Rhiannon Moxham (The Rest is Yoga) ("we," "us," "our"), we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR).

Information We Collect

We collect and process the following types of personal data from clients:

  • Name

  • Email address

  • Address

  • Contact telephone number

  • Date of birth

  • Name and contact details of your emergency contact

  • Health information relevant to participation in yoga classes

  • Student disclaimer forms

  • Payment details

  • Class attendance and register

  • Full notes of any incidents or accidents during class (including RIDDOR reports and safeguarding information)

  • Consent forms for teaching children (if applicable)

  • Photo consent forms (if applicable)

  • SMS or WhatsApp messages

  • Modifications or changes made to lesson plans for individual students

Additional Information Collected Through Our Website
When you visit our website at the-rest-is.yoga, hosted on Squarespace, we may also collect the following data:

  1. Data Provided by You

    • Information submitted via webforms (e.g., name, email address, and other requested details).

    • Queries or messages sent via the contact form.

  2. Data Automatically Collected by Squarespace

    • Information about your browser, network, and device.

    • Web pages you visited prior to coming to our website.

    • Your IP address.

    • Pages viewed, links clicked, scrolling activity, searches, and timestamps during your visit.

  3. Embedded Google Maps

    • Our website includes an embedded Google Map to help you locate our classes. Google may collect your IP address and other information when you use this feature.

  4. Cookies and Tracking Technologies

    • This website uses cookies and similar technologies to enhance your browsing experience. Cookies are small files or pieces of text downloaded to your device when you visit our website.

  5. Types of Cookies Used:

    • Necessary Cookies: Essential for securely hosting and operating the website through Squarespace.

    • Analytics and Performance Cookies: Used (with your consent) to collect insights into website traffic and user behaviour.
      For more information about the cookies used by Squarespace, visit their documentation: Squarespace Cookies.

  6. Squarespace Analytics

    • We use Squarespace analytics to learn about website traffic and activity. This includes information such as:

      • Browser and device details.

      • Visitor behaviour (e.g., pages visited, clicks, searches).

      • Referrer data (e.g., how you found our website).

    • This information is shared with Squarespace, which processes it in a de-personalised form to improve platform performance.

  7. Data from Form Submissions

    • Information you provide via webforms is shared with Squarespace to enable website functionality and with Google Workspace to help us manage and respond to your enquiries.

How We Collect Data

We collect personal data through the following methods:

  • Google Forms: Health questionnaires, contact details, and consent forms.

  • Google Drive: Secure storage of personal data.

  • Google Mail: Communication regarding classes, schedules, and bookings.

  • In-person: Collection of health questionnaires, contact details, consent forms, and incident reports.

  • SMS and WhatsApp: Communication and arrangements with students.

  • Business bank account: For processing payments.

  • British Wheel of Yoga (BWY): Safeguarding information where applicable.

  • RIDDOR website: For reporting accidents or incidents.

  • Website: Data collected automatically and through form submissions as outlined above.

Purpose of Data Collection

We collect and process your data for the following reasons:

  • To manage bookings and attendance.

  • To communicate class schedules and updates.

  • To ensure health and safety during yoga classes.

  • To process payments.

  • To comply with legal obligations, including accident reporting (RIDDOR) and safeguarding.

  • To send communications and updates directly related to your yoga sessions.

  • To monitor website traffic and improve our online presence.

Legal Basis for Processing

We rely on the following legal bases to process your personal data:

  • Consent: You explicitly agree to provide your personal data for specific purposes.

  • Contractual necessity: Data is necessary to provide yoga services.

  • Legal obligation: We process your data to comply with UK laws, such as tax regulations or safeguarding obligations.

  • Legitimate interest: Processing data is necessary for the legitimate interests of running our business, such as managing class bookings, website traffic, and communications.

Use of Third-Party Services

We use the following third-party services to handle and store your data:

  • Squarespace: Website hosting and analytics.

  • Google Workspace including:

    • Google Drive: Secure storage of personal information.

    • Google Forms: Collection of health questionnaires, consent forms, and other relevant data.

    • Google Mail: To manage and respond to enquiries submitted via the website.

    • Google Contacts: Secure storage of contact details.

  • WhatsApp: Communication and arrangements with students.

These third-party services comply with GDPR regulations and ensure the security of your data.

Third-Party Content and Links

Our website may include links to external websites or embedded content provided by third parties (e.g., Google Maps, AccessAble). Please note that we are not responsible for the privacy practices, data collection, or content of any third-party websites or services. We encourage you to review the privacy policies of these third-party providers before interacting with their content.

Cookies and Data Retention

We retain personal data as follows:

  • Website analytics and cookie data: Retained in accordance with Squarespace's privacy policy.

  • General email correspondence: Retained for up to 7 years, or as long as the client continues attending classes.

  • Class attendance and modifications: Retained for 7 years or as long as the client attends classes.

  • Health records, student disclaimers, and consent forms: Retained for 7 years or as long as the client attends classes.

  • Incident reports and RIDDOR forms: Retained for 7 years.

  • Contact details, WhatsApp messages: Retained for 7 years or as long as the client attends classes.

  • Payment details: Retained for 5 years for legal and tax purposes.

Data Security

We take the following measures to ensure the security of your data:

  • Password protection on all devices and accounts that store personal data.

  • Multi-factor authentication (MFA) to access personal data.

  • Limited access to personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes.

Contact Us

For any questions or concerns regarding this Privacy Policy or your personal data, please contact us at:


Rhiannon Moxham

Email: dataprotection@the-rest-is.yoga

Accessibility

If you require this Privacy Policy in an alternative format, please contact us at dataprotection@the-rest-is.yoga, and we will provide a suitable version.