GDPR

PRIVACY NOTICE

For the purposes of GDPR, regarding data protection, Core Protection Pilates acts in the capacity of data controller and data processor and may be contacted by email using the details shown below. Instructors leading sessions on behalf of Core Protection Pilates also act data processors when collecting or using your information.

By providing your details to Core Protection Pilates you are consenting to the capture, storage and use of your personal information for the purposes of planning and conducting Pilates classes.

Core Protection Pilates collects and processes the following categories of information about you: your name, date of birth, contact details (address, email and phone), occupation, information about your health and your
fitness goals. We also keep records of classes you attend and payments you make (for clarity we do not collect information about bank accounts or credit cards).

Core Protection Pilates will not share your information with anyone else and will retain your records for a period of 8 years from the date of your last class, after which time any personally identifiable information
about you will be deleted.

You can exercise your rights under GDPR as a data subject by contacting Core Protection Pilates via email as shown below. These rights include obtaining copies of the information we hold about you and requesting
corrections to any inaccuracies. You also have the right to contact the Information Commissioner’s Office if you believe that we are not upholding your rights satisfactorily.

All enquiries relating to the information we hold about you and any data subject access requests to exercise your rights under GDPR should be addressed by email at emmacppilates@gmail.com.