This Privacy Policy will explain how we collect, use and protect your personal data in order to provide our service.

The personal information we hold about you will be collected directly from you when you are assessed for and attend the pilates class. 

What personal data we collect

• Identity information including Name, date of birth and address
• Contact information such as a telephone number and/or an email address
• History of your health, any related conditions you have, your medication, exercise interests and history.
• GP name and address

This information will primarily be collected from you with your permission. Where it is lawful to do so and with your permission, we may collect information from other sources such as the NHS or other healthcare providers authorised to provide it. This includes parents or carers who have permission to give information on your behalf.

How we use your data

Prior to attending a Pilates class you will be asked to complete a paper registration form and a health screening questionnaire. This allows Abi-Pilates to gather the relevant information from you prior to attending a class.  This information allows us to provide a suitable pilates class with relevant due care and consideration for your safety, age and requirements.

We will only use the data for the purpose it was collected. We do not share your data with any other third party. If relevant, and only with your prior consent, we may share your information with other Healthcare professionals such as your GP or physiotherapist to ensure you are fit to receive our service and to provide the correct service for your needs.

How we store and protect your data

If your registration form and health questionnaire are in paper form they are stored securely for a period of 7 years, as required by law, after which time they will be destroyed.  If your registration form and health questionnaire are in electronic form they are stored on an encrypted memory stick which is password protected and only accessible by Abigail Shepherd.  The data will be stored securely for a period of 7 years, as required by law, after which time they will be permanently deleted.   We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in suitable physical, procedures to secure the information we collect from you. Any retention of personal data will be done in compliance with legal and regulatory obligations and with industry standards. These data retention periods are subject to change without further notice as a result of changes to associated law or regulations.

Your Rights

You have the following rights in accordance with GDPR and the Data Protection Act 1998