Privacy policy

Who we are

For the purposes of UK data protection law, the controller is Reset Pilates Studio, 10A Colliers Walk, Nailsea, North Somerset, BS48 1RD. You can contact us about privacy at hello@resetpilatesstudio.co.uk.

What we collect and why

We only collect personal information we reasonably need to run the studio, respond to you, or operate this site. The main categories are:

• Contact form. When you send an enquiry, we collect the details you provide (such as name, email address, optional phone number, and your message) so we can reply. We do this under legitimate interests in responding to prospective and existing clients, or where needed to take steps at your request before entering a contract.
• Email updates and alerts. If you sign up for studio updates, we collect your email address and any name you choose to provide, and we send service emails relating to that sign-up (for example a confirmation). Where the sign-up is clearly for marketing or general updates, we rely on consent, which you can withdraw at any time (use the unsubscribe link in our emails or contact us).
• Studio tools (password-protected area). If you access our internal studio pages, we use a short-lived, secure session cookie so you stay signed in, and we process the content you submit there (for example newsletter drafts, audience data you use with our email tools, and optional images you upload for emails). We do this to run our business and communicate with our mailing list, under legitimate interests and (where applicable) to perform a contract or take steps you ask us to take. If you use optional AI-assisted drafting, the prompts and text you send for that feature are processed to generate suggestions; only use it with content you are comfortable submitting for that purpose.
• Technical and security data. Our hosting provider and email delivery services process limited technical data (such as IP address and device signals) when you use the site or when emails are sent. This helps us deliver the site, prevent abuse, and troubleshoot issues, based on legitimate interests and, where applicable, our legal obligations.
• Device storage on your browser. Some parts of the site remember choices in your browser (for example if you dismiss a promo banner). This is stored on your device; we don't receive that data unless you also submit a form or similar.

The on-site assistant answers common questions using information already published on this site; it does not send your chats to a third-party AI service.

Who we share data with (processors)

We use trusted service providers who process data only on our instructions. They may include:

• Hosting and infrastructure (for example Vercel) to run this website and related APIs.
• Email delivery (for example Resend) to send contact notifications, subscriber messages, and studio emails.
• Optional file storage for assets you upload for newsletters (for example Vercel Blob or local storage in development), where enabled.
• Optional AI drafting (for example OpenAI) only when that feature is enabled and you choose to use it in the studio tools.

We do not sell your personal information. We may disclose information if we are required to by law or to protect our rights, customers, or the public.

International transfers

Some of our providers may process data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK law (such as the UK extension to the EU-US Data Privacy Framework where a provider is certified, standard contractual clauses approved for the UK, or other permitted transfer mechanisms).

How long we keep information

We keep personal data only as long as needed for the purposes above, including legal, accounting, or reporting requirements. Enquiry and operational records are typically kept for a limited period after the last contact unless we need to keep them longer (for example ongoing membership). Marketing lists are kept until you unsubscribe or we remove inactive contacts in line with our policies.

Cookies and similar technologies

We use a strictly necessary session cookie for the password-protected studio area so the server recognises your signed-in session. We do not use optional analytics or advertising cookies on this site as part of the standard build; if we add them later, we will update this policy and, where required, ask for your consent before non-essential cookies run.

Security

We use appropriate technical and organisational measures to protect personal data. No method of transmission over the internet is completely secure; please use a strong password for studio access and avoid sending unnecessary sensitive information by email.

Your rights

Under UK data protection law you have rights including, in summary:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure in certain circumstances.
• Restriction of processing in certain circumstances.
• Data portability where processing is based on consent or contract and is automated.
• Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent at any time where we rely on consent (without affecting earlier lawful use).

To exercise your rights, contact us at hello@resetpilatesstudio.co.uk. We may need to verify your identity before responding.

Complaints

If you are unhappy with how we handle personal data, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

Children

This website is not aimed at children. If you believe we have collected information from a child without appropriate consent, please contact us and we will take steps to delete it.

Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do; for significant changes we will also use reasonable means to draw them to your attention where appropriate.