Privacy policy | Above And Beyond

1) Who we are
Above and Beyond Yoga (“we”, “us”, “our”) provides yoga and Pilates classes, workshops, events and wellbeing services.

Data Controller:
Above and Beyond Yoga (operated by Lesley Moore)

Address:
Above and Beyond Yoga, Abbey Mill Business Centre, Paisley, Renfrewshire, Scotland, UK, PA1 1JS

Email:
lesley@aboveandbeyond.yoga

Phone:
07595341281

Website:
https://www.aboveandbeyond.yoga

2) What information we collect
We may collect and process the following information:

A) Identity & contact details
• Name
• Email address
• Phone number

B) Booking, attendance & account details (Wix Bookings)
• Classes/events/workshops booked
• Attendance records
• Memberships or class passes (where applicable)

C) Payment & transaction information
Payments are processed securely via our payment provider(s) connected to Wix (for example Wix Payments/Stripe and/or PayPal, depending on what you choose at checkout). We do not store full card details.

We may retain transaction references, receipts and basic purchase details for accounting and tax purposes.

D) Messages and communications
• Emails or enquiries sent through our website contact forms
• Messages you send us via social media (e.g., Instagram/Facebook DMs)
• Any replies to booking confirmations or service updates

E) Health information (only if you choose to share it)
To help us support you safely in yoga/Pilates, you may choose to share information such as:
• Injuries or medical considerations relevant to movement
• Pregnancy and postnatal status
• Mobility limitations or other relevant wellbeing notes

This may be “special category data” under UK GDPR. You do not have to provide it, but if you do, we use it only for safe participation and appropriate class support.

3) How we collect your information
We collect information when:
• You book a class/event, purchase a pass/membership, or interact with our Wix booking system
• You contact us via our website forms, email, or social media
• You subscribe to marketing updates (if enabled)
• You browse our website (via cookies/analytics, where enabled — see “Cookies” below)

4) Why we use your information (lawful basis)
We use your personal data for the following purposes:

A) To provide services and manage bookings (Contract)
• Process class/event bookings, passes/memberships
• Send booking confirmations and essential service communications
• Manage attendance and participation

B) To respond to enquiries and provide customer support (Legitimate Interests / Contract)
• Reply to questions and provide information about services

C) To send service messages (Contract)
• Changes to schedules, cancellations, venue updates, or important booking information

D) To send marketing communications (Consent)
• If you opt in, we may send updates about classes, workshops, events, offers and studio news
• You can unsubscribe at any time using the link in the email or by contacting us

E) To meet legal and financial obligations (Legal Obligation)
• Maintain appropriate records for accounting, tax and regulatory purposes

Health information:
Where you provide health information, we process it with your explicit consent (or where otherwise permitted under UK data protection law) strictly for the purpose of supporting safe participation.

5) Who we share information with
We may share your data with trusted providers who help us operate the studio, including:

• Wix.com Ltd (website hosting, forms, bookings infrastructure and site tools)
• Payment providers connected to Wix checkout (e.g., Wix Payments/Stripe and/or PayPal — depending on your checkout setup)
• Email marketing tools (e.g., Wix Email Marketing and/or another provider if you use one)
• Analytics providers (e.g., Google Analytics, if enabled)

We do not sell your personal data.

We share only what is necessary for the service being provided, and we expect our providers to protect your information.

6) International transfers
Some providers (including Wix and certain payment/analytics services) may store or process data outside the UK.

Where international transfers occur, we rely on appropriate safeguards such as UK adequacy regulations and/or approved contractual protections (for example, standard contractual clauses).

7) How long we keep your data
We keep personal data only as long as necessary for the purposes described above, including:

• Booking and transaction records: typically retained for up to 6 years (UK accounting/tax requirements)
• Booking/account/contact details: kept while you remain an active customer and as needed for support and record-keeping
• Marketing records: kept until you unsubscribe or withdraw consent
• Health notes (if provided): kept only as long as needed to support safe participation and reviewed periodically

8) Your rights
You have rights under UK data protection law, including the right to:
• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion (in certain circumstances)
• Object to or restrict processing (in certain circumstances)
• Data portability (where applicable)
• Withdraw consent at any time (for marketing and any health information you’ve provided)

To exercise your rights, contact us using the details in section 1.

9) Complaints
If you’re unhappy with how we handle your data, please contact us first and we’ll do our best to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO):
https://ico.org.uk/

10) Cookies
Our website uses cookies and similar technologies for:
• Essential site functionality (required for the site and bookings to work properly)
• Optional analytics/marketing (only where enabled and subject to your preferences)

You can manage cookie preferences via the cookie banner/settings on our site and through your browser controls.

11) Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, with the “Last updated” date shown at the top.