Privacy Policy

Salt & Soul Yoga and Swimming (“we,” “our,” or “us”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Salt & Soul Yoga and Swimming is the data controller responsible for your personal data.

Contact details:
Email: info@salt-soul.co.uk

2. Personal Data We Collect

We may collect and process the following personal data:

Information you provide to us

• Name
   

• Email address
   

• Phone number
   

• Billing and payment details (payments are processed securely by third-party providers; we do not store card details)
   

• Health or medical information you voluntarily provide, where relevant for safety or participation in classes
   

Information collected automatically

• IP address
   

• Browser and device information
   

• Pages visited and interactions with our website
   

• Cookies and similar technologies
   

3. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Contract: to manage bookings, classes, and payments
   

• Consent: for marketing communications and optional health information
   

• Legal obligation: where required by law
   

• Legitimate interests: to operate and improve our business and website (without overriding your rights)
   

4. How We Use Your Personal Data

We use your data to:

• Manage class bookings and schedules
   

• Process payments
   

• Communicate with you about services, updates, or enquiries
   

• Ensure health and safety during yoga or swimming sessions
   

• Improve our website and services
   

• Send marketing emails or newsletters (only if you have opted in)
   

You can withdraw your marketing consent at any time by contacting us or using the unsubscribe link in our emails.

5. Sharing Your Personal Data

We do not sell your personal data.

We may share your data with trusted third parties, including:

• Booking and scheduling platforms
   

• Payment processors
   

• Email and website service providers
   

All third parties are required to handle your data securely and in compliance with UK data protection law.

6. Data Storage and Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or insurance requirements.

Health-related information is treated as special category data and handled with extra care.

7. Cookies

Our website uses cookies to improve functionality and user experience. You can control or disable cookies through your browser settings. For more information, please see our [Cookie Policy] (if applicable).

8. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request erasure of your data

• Restrict or object to processing

• Data portability

• Withdraw consent at any time

To exercise any of these rights, please contact us using the details above.

9. Children’s Data

Our services are not intended for children under the age of 13. We do not knowingly collect personal data from children without parental or guardian consent.

10. Third-Party Links

Our website may include links to third-party websites. We are not responsible for their privacy policies or practices.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

12. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Website: https://ico.org.uk

​