Privacy policy

Your information, looked after.

This policy explains what personal information Core Balance Pilates Studio collects, why we need it, how we keep it safe and the choices you have. It applies when you visit our website, join our waitlist, book a class or come to the studio, and sits alongside our Studio Policies and Payment & refund policy.

Last updated 20 October 2026

What we collect

01 / 04

We only collect what we need to run your classes safely and look after your account.

Who we are

Core Balance Pilates Studio is a trading name of MBHC Pilates Ltd, registered in England & Wales (company no. 17428689). Registered office: Four Oaks, Swan Lane, Edenbridge TN8 6BA. Studio: Hever Suite, Hever Road, Edenbridge TN8 7NP. We are the controller of your personal information. Contact us about privacy at hello@corebalancepilatesstudio.com.

Contact and account details

Your name, email address, phone number and date of birth.
An emergency contact’s name and phone number.
Your login details for our booking system.

Bookings and payments

The classes, packs and sessions you buy, book, attend and cancel.
Payment records, such as the amount, date and the last four digits of your card. Full card details are handled by our payment provider; we never see or store them.

Health information

Your health questionnaire answers, and anything you tell us about injuries, medical conditions, pregnancy or recent surgery.
Notes your instructor makes at an assessment or private session about how you move and what to adapt.
Health information is special category data under UK GDPR, so it has extra protection. More on how we handle it below.

Messages and website

Emails, messages and contact form enquiries you send us.
Basic information about how you use our website, such as pages visited and device type. See Cookies below.

How we use it

02 / 04

To run your bookings, keep you safe in class and, only if you agree, keep in touch.

What we use it for

Managing your account, bookings, credits, waitlists and payments. We need this to provide the classes you buy (contract).
Sending booking confirmations, reminders and updates about class changes or cancellations (contract).
Keeping accounting and tax records, and responding to payment disputes (legal obligation and legitimate interests).
Answering your questions and improving our classes and website (legitimate interests).
Contacting your emergency contact if you become unwell or are injured at the studio (vital interests).

Your health information

We ask for your explicit consent when you complete the health questionnaire.
We use it only to keep you safe in class and to adapt exercises for you. We never use it for marketing.
You complete the questionnaire in Evini, our booking system, and your answers are stored securely there. Only your instructors can see them.
You can withdraw consent at any time by emailing us. If you do, we may not be able to offer you classes safely.

News and offers

We’ll only send you news, offers and studio updates if you’ve agreed to receive them.
You can unsubscribe at any time using the link in any email, or by telling us.
Booking messages, like confirmations and class changes, aren’t marketing, so you’ll still receive those.

Sharing & keeping

03 / 04

We never sell your information. We only share it with services that help us run the studio.

Who we share it with

Evini (provided by WodBoard, Purified Technology Ltd, UK), our booking system, which holds your account, bookings and health questionnaire.
Stripe, our payment provider, which processes card payments securely.
Google, which provides our email.
Squarespace, which hosts our website and contact form.
Xero and our accountant, for financial records.
Anyone we’re legally required to share it with, or emergency services if your safety is at risk.
These providers only use your information to provide their service to us, under contract.

Outside the UK

Some of these providers may store information outside the UK. Where they do, they use safeguards approved under UK data protection law, such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep it

Payment and purchase records: seven years, held in Evini, Stripe and our accounts, for tax and legal reasons, and to help with any query or dispute.
Health questionnaire, instructor notes, bookings and attendance: while you’re a client, then deleted 18 months after your last activity.
Account and contact details: deleted 18 months after your last activity, unless you ask us to close your account sooner. We’ll email you first, and you can choose to keep your account open.
Marketing preferences: until you unsubscribe.
Waitlist details: until three months after the studio opens, unless you become a client or agree to hear from us.

Keeping it safe

Your information is stored in password-protected systems that only the people who need it can access. We don’t keep paper health records at the studio.

Your rights & cookies

04 / 04

It’s your information. Ask us any time and we’ll respond within one month.

Your rights

See a copy of the information we hold about you. You can also download a copy yourself from your account in Evini.
Update your details yourself from your Evini profile, or delete your account there if you don’t have an active class pack.
Ask us to correct anything that’s wrong or incomplete.
Ask us to delete your information, where we don’t need to keep it by law.
Object to, or ask us to limit, how we use it.
Ask for your information in a format you can take elsewhere.
Withdraw your consent at any time, for health information or marketing.
To make a request, email hello@corebalancepilatesstudio.com. There’s no charge.

Cookies

Our website uses essential cookies so it works properly, for example to remember your choices.
With your permission, we also use analytics cookies to understand how people use the site, so we can improve it.
You can accept or decline non-essential cookies in the cookie banner, and change your mind at any time in your browser settings.

Under 18s

Our classes are for adults aged 18 and over, and we don’t knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. The current version is always on our website, with the date it was last updated. If we make a significant change, we’ll let you know by email.

Concerns

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Questions about a policy?
hello@corebalancepilatesstudio.com
Get in touch