Privacy Policy: About this Policy
About this policy
I'm Dani Hughes, a yoga teacher based in Bristol trading as Dani Hughes Yoga. This policy explains how I collect, use and protect your personal data when you visit danihughesyoga.co.uk, book a class, retreat, buy from my shop, use my online class library, or contact me.
I am the data controller for your personal data. I follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
If you have any questions, email me at info@danihughes.co.uk.
What I collect
I only collect what I need to run classes, retreats and treatments safely and to deal with your bookings.
How I use your data and why
UK GDPR requires a lawful basis for each use of your data. These are mine.
I never sell your data. I do not use it for automated decision-making or profiling.
Health Information
Health information is "special category" data under UK GDPR, so I treat it with extra care. I only ask for it so I can teach and treat you safely.
You choose what to tell me. I ask for your explicit consent when you share it, usually through a health questionnaire or booking form.
Only I see it, except allergy and dietary details, which I share with the retreat chef so meals are safe for you.
I keep it only as long as you are an active client (see How long I keep it).
You can withdraw consent at any time. If you do, I may not be able to offer certain treatments or adapt a class safely.
Who I share it with
I share data only with services that help me run my business, and only what they need. Each one has its own privacy policy.
If you book a class through a studio or venue's own system, that studio is responsible for the data it collects.
I may also share data if the law requires it, for example with HMRC or the police.
Cookies
Cookies are small files saved on your device. My website uses two kinds.
Essential cookies keep the site working, such as your shopping cart, checkout and library login. These do not need consent.
Analytics and marketing cookies show me how people use the site and how they found it. I only use these if you accept them in the cookie banner.
You can change your choice at any time through the cookie banner or your browser settings. Blocking essential cookies may stop parts of the site working.
International transfers
Some of the services I use, including Squarespace and Momence, store data outside the UK, mainly in the United States. When this happens, I rely on safeguards approved under UK law, such as the UK-US Data Bridge or the UK International Data Transfer Agreement.
For retreats abroad, I share the details needed for your stay with the chef and venue in that country.
How long I keep it
I keep data only as long as I need it, then delete it securely.
Your rights
Under UK GDPR you have the right to:
see the personal data I hold about you
have inaccurate data corrected
have your data deleted
restrict or object to how I use it
receive your data in a format you can take elsewhere
withdraw consent at any time, where I rely on consent
To use any of these rights, email info@danihughes.co.uk. I'll reply within one month. There is usually no charge.
If you're unhappy with how I've handled your data, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Keeping your data safe
I keep data on password-protected devices and accounts with two-factor authentication where available. Paper forms, if used, are stored securely and shredded when no longer needed. If a data breach puts you at risk, I will tell you and the ICO as the law requires.
Children
My classes, retreats and treatments are for adults aged 18 and over. I don't knowingly collect data from children.
Changes to this policy
I may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
Contact
Dani Hughes, Dani Hughes Yoga, Bristol, UK
Email: info@danihughes.co.uk