Privacy Policy
Last Updated:
1. Who We Are
Soulflow Yoga & Wellness Studio ("Soulflow", "we", "us", or "our") is a yoga and wellness studio located at 14 Kensington Grove, Notting Hill, London, W11 2AR. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how we handle your data, please contact us at:
Email: hello@soulflowstudio.co.uk Phone: +44 217 2222 7777 Post: 14 Kensington Grove, Notting Hill, London, W11 2AR
2. What Data We Collect
We may collect and process the following personal data:
Identity & Contact Information
Full name
Email address
Phone number
Postal address
Date of birth (where required for age-restricted services)
Technical & Usage Data
IP address
Browser type and version
Pages visited on our website
Time and date of visits
Referring website addresses
Device information
Communication Data
Enquiries submitted via our contact form
Email correspondence with our team
Feedback and survey responses
3. How We Collect Your Data
We collect data in the following ways:
Directly from you when you create an account, book a class, purchase a membership, complete a health questionnaire, or contact us
Automatically through cookies and similar tracking technologies when you visit our website
From third parties such as our booking platform provider or payment processor
4. Health Data
Health information you share with us — such as injuries, medical conditions, or pregnancy — is treated as special category data under UK GDPR. We collect this solely to ensure your safety and wellbeing during classes and therapies. This information is accessed only by relevant staff members and is never shared with third parties without your explicit consent, except where required by law or in a medical emergency.
5. Marketing Communications
We will only send you marketing emails, newsletters, or promotional messages if you have opted in to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Opting out of marketing will not affect communications necessary for your bookings or account.
6. Cookies
Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use:
Essential cookies — required for the website to function correctly
Analytics cookies — to understand how visitors use our site (e.g. Google Analytics)
Marketing cookies — to show you relevant content and advertisements (only with your consent)
You can manage your cookie preferences through the cookie banner displayed on your first visit, or via your browser settings at any time.
7. Sharing Your Data
We do not sell your personal data. We may share it with the following categories of third parties:
Booking and payment platform providers to process your transactions
Email marketing platforms to send communications you have consented to
Analytics providers to help us understand website usage
IT and hosting providers who support our digital infrastructure
Legal and regulatory authorities where required by law
All third-party providers are contractually required to handle your data securely and only for the purposes we specify.
8. International Transfers
Some of our third-party service providers may be based outside the UK. Where we transfer your data internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR, including standard contractual clauses approved by the UK Information Commissioner's Office (ICO).
9. Data Retention
We retain your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. Our standard retention periods are:
Active member data — retained for the duration of your membership plus 2 years
Booking and transaction records — retained for 7 years for tax and accounting purposes
Health questionnaires — retained for 3 years from your last visit
Marketing opt-in records — retained until you withdraw consent
Website analytics data — retained for 26 months
10. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access — to request a copy of the data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data in certain circumstances
Right to restriction — to request that we limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making — to not be subject to decisions made solely by automated processing
To exercise any of these rights, please contact us at hello@soulflowstudio.co.uk. We will respond within 30 days. We may need to verify your identity before processing your request.
11. Complaints
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK's supervisory authority:
Information Commissioner's Office (ICO) Website: www.ico.org.uk Helpline: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this policy periodically.