Your
Privacy

1. Who we are

This website is operated by The Little Pilates Company (the “Studio”, “we”, “us”, “our”), based in the United Kingdom.

If you have any questions about this policy or how we handle personal data, you can contact us at claire@thelittlepilatescompany.co.uk.

2. What this policy covers

At the moment, our website does not include a contact form, online booking, account login, or email newsletter sign-up. Even so, some information may be processed when you visit our site, particularly via third-party services (such as maps and analytics).

This policy focuses on data processed through website visits. If we add booking, forms or email capture later, we will update this page to reflect those changes.

3. What personal data may be processed

3.1 Website access and security logs

Like most websites, our server may automatically record basic information to help the site run securely and reliably. This can include:

• IP address
• Date and time of access
• Pages requested
• Basic device and browser information

3.2 Analytics (Google Analytics)

If you choose to accept analytics cookies, we use Google Analytics to understand how visitors use our website. This may include:

• IP address (anonymised where possible)
• Browser and device information
• Pages visited and interactions
• Time spent on pages
• Referring site or source

We use this information to improve the website and understand what content is most useful. We do not use analytics data to identify you.

3.3 Embedded Google Map

We may include an embedded Google Map to help you find the studio. When the map loads, Google may process information such as your IP address, device details and cookies set by Google. We do not control how Google uses this information once it is shared with them.

3.4 Google Fonts

Our site may use Google Fonts served from Google’s servers. This can involve your browser making a request to Google, which may include your IP address. (We may choose to self-host fonts to reduce third-party requests.)

4. Lawful basis for processing (UK GDPR)

Under the UK GDPR, we must have a lawful basis for processing personal data. We rely on the following:

4.1 Essential website operation and security

Lawful basis: Legitimate interests (UK GDPR Article 6(1)(f))

We have a legitimate interest in operating a secure, stable website and protecting it from misuse. This covers basic server logs and security monitoring.

4.2 Analytics (Google Analytics)

Lawful basis: Consent (UK GDPR Article 6(1)(a))

Analytics cookies are optional. We will only load Google Analytics if you actively consent via our cookie banner. You can withdraw consent at any time.

4.3 Embedded Google Map and third-party services

Lawful basis: Consent (UK GDPR Article 6(1)(a)) where non-essential cookies or tracking are involved

Where embedded third-party content sets non-essential cookies or carries out tracking, we will treat this as consent-based. (For example, we may use a “click to load” map so it only loads when you choose.)

4.4 Future services (booking, forms, email)

If we add booking, contact forms, or email marketing in future, the lawful basis may include:

• Contract (UK GDPR Article 6(1)(b)) – e.g. to manage a booking you request
• Legitimate interests (UK GDPR Article 6(1)(f)) – e.g. responding to enquiries
• Consent (UK GDPR Article 6(1)(a)) – e.g. marketing emails

We will update this policy before introducing those features.

5. Cookies and consent

We use a cookie banner to let you choose whether to accept non-essential cookies (such as analytics). You can change your choices at any time via Cookie Settings.

For more detail, please see our Cookie Policy.

6. International transfers

Some of our third-party providers (including Google) may process data outside the UK. Where this happens, transfers are protected using recognised safeguards, such as the UK Addendum to Standard Contractual Clauses or other lawful transfer mechanisms.

7. How long we keep data

• Server logs: retained for a limited period for security and technical purposes.
• Analytics data: retained according to our Google Analytics settings (typically up to 14 months unless configured otherwise).

We do not keep website visitor data for direct marketing unless you explicitly opt in (for example, via email sign-up in future).

8. Your rights (UK GDPR)

You have rights in relation to your personal data, including the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion (where applicable)
• Restrict or object to certain processing
• Withdraw consent (where we rely on consent)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: ico.org.uk

To exercise your rights, contact us at claire@thelittlepilatescompany.co.uk.

9. Changes to this policy

We may update this policy from time to time, particularly as we add services such as online booking or email sign-up. When we do, we will update the “Last updated” date at the top of this page.