Effective Date: 29 July 2026
Last Updated: 29 July 2026
Hope Movement Pilates (“we,” “our,” or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, register an account, purchase event or class tickets, sign up for our newsletter, or contact us.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Hope Movement Pilates is the Data Controller responsible for your personal data.
1. Important Information & Who We Are
Contact Details:
Official Business Name: Hope Movement Pilates
Email Address: hello@hopemovementpilates.co.uk
If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact us at hello@hopemovementpilates.co.uk.
2. Information We Collect About You
We collect personal data through your direct interactions with our website:
- Account Data: Username, password, and profile details created when registering an account on our WordPress site.
- Order & Ticket Data (WooCommerce & The Events Calendar): Name, billing address, phone number, email address, and ticket/event booking history.
- Payment Data (Stripe): Payment information submitted during checkout. Note: Stripe handles payments directly. We do not store or process complete payment card numbers on our WordPress servers.
- Newsletter Data (Mailchimp): Email address and name provided when subscribing via our sign-up form.
- Contact Data: Name, email address, and the contents of your message when submitting inquiries via our contact form.
- Technical Data: Standard server log records, IP addresses, browser types, and operating systems collected automatically for site security.
3. Lawful Basis for Processing Your Data
Under UK GDPR, we must have a valid legal reason (a “lawful basis”) to process your personal data. We rely on the following bases:
| Purpose / Activity | Type of Data | Lawful Basis for Processing |
|---|---|---|
| Processing ticket bookings, managing WooCommerce orders, and account creation | Account, Order, and Payment Data | Performance of a Contract: Necessary to fulfill ticket sales and account management. |
| Sending marketing updates and newsletters via Mailchimp | Newsletter Data | Consent: You have explicitly opted in via our sign-up form. |
| Responding to queries via our contact form | Contact Data | Legitimate Interests: Necessary to respond to user inquiries and run our business effectively. |
| Ensuring website security and preventing fraud | Technical Data | Legitimate Interests / Legal Obligation: Maintaining a secure digital storefront. |
4. How Your Data Is Shared
We do not sell, rent, or trade your personal information. We only share data with essential third-party service providers who assist us in operating our business under strict data protection terms:
- Stripe: Payment processing service provider.
- Mailchimp: Email marketing platform used to deliver newsletters (only where consent is given).
- WooCommerce & WordPress Plugins (including The Events Calendar): Functionality tools used to manage account services, store checkout, and ticket generation.
- Web Hosting & Technical Infrastructure: Providers responsible for housing our website files securely in accordance with UK data standards.
5. International Data Transfers
Some of our third-party suppliers (e.g., Mailchimp or Stripe) are based outside the UK (such as in the United States). Whenever we transfer your personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring that appropriate legal safeguards—such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs)—are in place.
6. Cookies & Tracking
Our website relies purely on essential and functional cookies:
- Essential WooCommerce & Account Cookies: Required to keep items in your shopping basket, remember login states, and process transactions.
- No Analytics / Tracking Pixels: We do not track your activity across the web using third-party analytics (such as Google Analytics) or marketing pixels (such as Meta or TikTok pixels).
You can set your browser to refuse essential cookies, but doing so may cause parts of the WooCommerce store and account dashboard to function improperly.
7. Data Retention
We keep your personal information only for as long as necessary to fulfill the purposes for which it was collected:
- WooCommerce Orders: Retained for up to 6 years following a transaction to comply with UK accounting, tax, and legal obligations.
- Account Information: Retained until you request the deletion of your account.
- Newsletter Subscriptions: Retained in Mailchimp until you unsubscribe using the link at the bottom of any marketing email.
- Contact Form Queries: Retained for 12 months from submission for customer service continuity.
8. Your Legal Rights Under UK GDPR
Under UK data protection laws, you have rights in relation to your personal data, including the right to:
- Request Access: Ask for a copy of the personal data we hold about you (a “Subject Access Request”).
- Request Correction: Ask us to update incomplete or inaccurate information.
- Request Erasure (“Right to be Forgotten”): Ask us to delete your personal data where there is no good reason for us continuing to process it.
- Withdraw Consent: Withdraw consent at any time where we rely on consent (e.g., unsubscribing from Mailchimp).
- Object to Processing: Object to our processing of your personal data where we rely on legitimate interests.
To exercise any of these rights, email us at hello@hopemovementpilates.co.uk.
9. How to Complain
If you have any concerns about our use of your personal data, you can contact us directly at hello@hopemovementpilates.co.uk.
You also have the right to lodge a complaint at any time with the UK’s data protection supervisory authority:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk