Croydon Power Yoga Limited
Last updated: September 2026
Croydon Power Yoga Limited is committed to protecting the privacy and security of the personal information entrusted to us.
This Privacy Notice explains what personal information we collect, why we collect it, how we use and protect it, who we may share it with, how long we retain it, and the rights you have in relation to your personal data.
We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Croydon Power Yoga Limited is the data controller responsible for personal information collected and processed in connection with our services.
If you have any questions about this Privacy Notice or how we use your personal information, please contact:
Email: info@croydonyogahub.co.uk
Croydon Power Yoga Limited is a micro business and does not have a designated Data Protection Officer. Data protection responsibilities are managed by the company.
2. Personal information we collect
Depending on how you interact with us, we may collect:
your name and contact details, including email address and telephone number;
booking, attendance and membership information;
payment and transaction information;
information you provide when contacting us or making an enquiry;
emergency contact details;
information about pregnancy, health or injuries where this is relevant to participation in particular classes;
information relating to your preferences and communications with us; and
information collected through our website, including certain technical information and cookie-related data.
We seek to collect only information that is relevant and reasonably necessary for the purposes for which it is used.
3. How we use your personal information
We may use your personal information to:
process and manage class bookings and memberships;
provide classes and other services you have requested;
process payments;
communicate with you about bookings, cancellations, timetable changes and other matters directly relating to services you have booked;
contact you where necessary in an emergency;
manage our relationship with you;
maintain appropriate business, accounting and insurance records;
respond to enquiries and customer service requests;
administer and improve our services;
comply with legal, regulatory and insurance requirements; and
send marketing communications where we have a lawful basis to do so.
4. Our lawful bases for processing
We process personal information only where we have an appropriate lawful basis under the UK GDPR.
Depending on the circumstances, this may include:
Contract: where processing is necessary to provide a class, membership or other service you have booked or purchased.
Legal obligation: where we need to process information to comply with a legal or regulatory requirement.
Legitimate interests: where processing is reasonably necessary for the operation and administration of our business, provided that our interests do not override your rights and interests.
Consent: where we have asked you to provide consent for a particular use of your information, including certain marketing communications or the processing of special category information.
Where we rely on consent, you may withdraw your consent at any time.
5. Health and pregnancy information
For most of our classes, we do not routinely collect detailed medical or health information. Our general booking and waiver process asks participants to make their teacher aware of any relevant health conditions, injuries or other considerations that may affect their participation.
For Pregnancy, Postnatal and Mum & Baby classes, we collect specific information relevant to pregnancy, health and safe participation.
Health information is special category personal data under the UK GDPR and is subject to additional protection.
For these classes, we ask participants to provide explicit consent to the collection and processing of relevant health and pregnancy information for the purpose of assessing and supporting their safe participation.
Providing this consent is a requirement for participation in these classes because the information is relevant to their safe delivery.
The consent wording is presented separately from other terms and consents. Consent may be withdrawn by contacting us at info@croydonyogahub.co.uk. If consent is withdrawn, we may no longer be able to provide the relevant class where processing the information is necessary for safe participation.
We do not use health information for marketing purposes.
6. Booking and membership systems
We use Momence as our booking, membership and customer communication platform.
Personal information provided through our booking and membership systems is processed and stored within Momence.
Momence acts as a service provider processing personal information on our behalf. We take reasonable steps to ensure that appropriate contractual, technical and organisational measures are in place to protect personal information.
Momence states that customer data is stored in data centres in the United States and provides information about its security and data protection measures in its own privacy and data protection documentation.
7. International transfers
Some of our service providers may process or store personal information outside the UK.
Where personal information is transferred outside the UK, we take reasonable steps to ensure that the transfer is made in accordance with applicable UK data protection legislation and that appropriate safeguards are in place.
Where an adequacy regulation or other lawful transfer mechanism applies, we rely on that mechanism where appropriate.
8. Marketing communications
We may use your contact details to send information about Croydon Power Yoga Limited's classes, workshops, events, offers and other services where we have a lawful basis to do so.
Marketing communications are sent through our booking and customer communication platform, Momence.
You can unsubscribe from marketing communications at any time using the unsubscribe facility provided in the communication or by contacting info@croydonyogahub.co.uk.
Opting out of marketing communications will not prevent us from sending essential communications relating to bookings, memberships, payments or other services you have requested.
9. Service communications
When you book a class or other service with us, we may contact you by email, telephone or text where reasonably necessary to administer or deliver that service.
This may include:
booking confirmations and reminders;
class cancellations or changes;
timetable or venue changes;
payment or membership information; and
urgent communications relating to a class or service.
These are service communications rather than marketing communications.
10. Emergency contacts
If you provide emergency contact information, we use it only for appropriate purposes connected with an emergency or where necessary to protect your health or safety.
Where necessary in an emergency, we may provide relevant information to emergency services or another appropriate person.
You should ensure that anyone whose information you provide as an emergency contact is aware that you have provided their details to us.
11. Other service providers
We may use other trusted service providers where reasonably necessary to operate our business. These may include payment providers, website providers, accounting services, professional advisers and other business administration providers.
Where a third party processes personal information on our behalf, we take reasonable steps to ensure that appropriate data protection and confidentiality arrangements are in place.
We do not sell or rent your personal information.
12. Website cookies and analytics
Our website uses cookies and similar technologies.
We use Google Analytics to help us understand how visitors use our website and to improve its performance.
We also use the Meta Pixel for website measurement and marketing purposes.
Our booking platform, Momence, may also use cookies and similar technologies in connection with its services.
Where required, we will seek consent before placing or using non-essential cookies and similar technologies.
Information about the cookies and tracking technologies used on our website, and how you can manage your preferences, will be provided through our cookie settings or cookie notice.
13. How we protect your information
We take reasonable technical and organisational measures appropriate to the size and nature of our business to protect personal information against accidental loss, destruction, unauthorised access, alteration or disclosure.
Access to personal information is limited to what is reasonably necessary for the operation of the business.
We also seek to ensure that third-party service providers handling personal information on our behalf maintain appropriate security measures.
14. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, taking into account our legal, accounting, insurance, contractual and business requirements.
Different categories of information may therefore be retained for different periods.
Booking, membership and financial information may need to be retained for periods required by applicable legal, accounting or tax requirements.
Health and pregnancy information is retained only for as long as reasonably necessary for the purposes for which it was collected, including health and safety, insurance and legal purposes.
Where information is no longer required, we take reasonable steps to securely delete or dispose of it.
15. Your data protection rights
Depending on the circumstances, you have rights under UK data protection law including:
the right to be informed about how your personal data is used;
the right of access to the personal data we hold about you;
the right to rectification of inaccurate or incomplete information;
the right to erasure in certain circumstances;
the right to restrict processing in certain circumstances;
the right to data portability in certain circumstances;
the right to object to certain processing, including direct marketing; and
rights relating to automated decision-making and profiling, where applicable.
These rights are not absolute and may not apply in every situation.
To exercise a right or ask a question about how we use your personal information, contact:
We will respond to valid requests within the applicable legal timescales.
16. Personal data breaches
If we become aware of a personal data breach, we will assess the incident and take appropriate steps to contain, investigate and address it.
Where required by law, we will notify the Information Commissioner's Office and/or affected individuals.
17. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes to our business, the way we process personal information or applicable legislation.
The date at the top of this notice indicates when it was last updated.
Where changes are significant, we may take additional reasonable steps to bring them to your attention.
18. Complaints
If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to investigate and resolve your concern.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.
ICO website: https://ico.org.uk/
ICO helpline: 0303 123 1113
Further information about data protection rights and making a complaint is available from the ICO.