This privacy policy explains how Thrive with Sarah Capewell (“I,” “me,” “my”) collects, uses and looks after your personal information when you visit my website, book a class, workshop, retreat, online course or one to one session, or get in touch with me.

I take your privacy seriously, particularly because some of what you share with me is about your health. If anything here isn't clear, please contact me and I'll happily explain.

1. Who I am

1.1 Thrive with Sarah Capewell is run by Sarah Capewell, a yoga, Pilates and wellbeing teacher serving Halesowen and the surrounding areas. Under UK data protection law, I am the controller of the personal information described in this policy.

1.2 This policy should be read alongside my Terms and Conditions.

1.3 You can contact me about anything in this policy at [email protected].

2. The information I collect

2.1 Contact details. Your name, email address and phone number and, for one to one sessions in your home, your address.

2.2 Registration information. The details you give me on my registration form, including your emergency contact and information about injuries, recent surgery, pregnancy, medical conditions and anything else that could affect how you move. This is health information, which the law treats as special category data, and I handle it with extra care.

2.3 Booking and payment information. What you have booked, when, and your payment history. Card payments are processed securely by my payment provider. I never see or store your full card details.

2.4 Your date of birth. If you choose to give it, so I can send you a birthday offer.

2.5 Feedback. Anything you share with me through my feedback form, reviews or messages.

2.6 Social media and adverts. If you respond to one of my adverts on Facebook or Instagram and fill in a form there, Meta passes me the details you entered.

2.7 Website and email information. When you visit my website, some non personal information such as your browser type, device and IP address may be collected automatically. My emails may record whether they are opened and which links are clicked, so I can understand what is useful to you.

3. How I use your information, and why

3.1 Your bookings. To manage your bookings, take payment, send confirmations and reminders, and deliver the classes, workshops, retreats, courses and sessions you have booked. The lawful basis for this is the contract between us.

3.2 Your safety. I use your registration information to offer you suitable options and modifications, and your emergency contact if something goes wrong during a session. I rely on your explicit consent, which you give when you complete the registration form. In a genuine emergency, I may share relevant health information with emergency services to protect you.

3.3 Keeping in touch. To send you updates, offers, news and birthday offers. I only do this where you have agreed to it, or where you are an existing client and the messages are about similar services. You can unsubscribe at any time.

3.4 Improving what I offer. Using your feedback, email engagement and website information. The lawful basis for this is my legitimate interest in running and improving my small business.

3.5 Records. To keep financial records and meet my legal, tax and insurance obligations. The lawful basis for this is legal obligation.

3.6 I will never sell your personal information or pass it to anyone for their own marketing.

4. Who I share your information with

4.1 I use a small number of trusted services to run my business. These include my booking, email and website platform (GoHighLevel, also known as LeadConnector), my payment provider (Stripe), my email provider, and Meta (Facebook and Instagram) for adverts and lead forms. They process your information only on my instructions and must keep it secure.

4.2 Your health information is confidential. It is never shared with anyone else, except in an emergency as described in clause 3.2 or where the law requires it.

4.3 I may also disclose information where I have reason to believe it is necessary to comply with the law, to protect my rights, or to protect someone's safety.

5. How long I keep your information

5.1 Registration and health information. While you are attending, and for up to seven years after your last session, in case of any insurance or legal claim.

5.2 Booking and payment records. Six years, to meet tax requirements.

5.3 Marketing. Until you unsubscribe, or after two years without any contact from you.

5.4 Feedback. Up to two years, unless you have agreed to let me share it as a testimonial.

5.5 When information is no longer needed, I delete it securely.

6. Use of cookies

6.1 My website uses cookies, which are small files saved on your device. Some are essential for the site to work, such as remembering what you have booked or keeping you logged in to an online course. Others help me understand how the site is used, and I will ask for your consent before using those.

6.2 You can control or delete cookies through your browser settings. Turning some off may stop parts of the site from working properly.

7. Links to other websites

7.1 My website and emails may link to other websites. I am not responsible for their content or how they handle your information, so please read their own privacy policies.

8. Social media

8.1 I share content on social media, and you are very welcome to join in. Please take care with what you post publicly. I will never ask you to share health or other sensitive information through social media.

8.2 Sharing buttons on my website may allow those platforms to track your activity.

9. Keeping your information safe

9.1 I take sensible steps to keep your information secure, including using reputable services, strong passwords and limited access. Your health information is only seen by me.

9.2 No method of sending information over the internet is completely secure, so while I do my best, I cannot guarantee the security of information you send to me online.

10. Your choices and your rights

10.1 You can unsubscribe from marketing emails at any time using the link at the bottom of any email, or by contacting me. Booking confirmations and safety information will still be sent while you have an active booking.

10.2 Under UK data protection law, you have the right to ask for a copy of the information I hold about you, ask me to correct anything that is wrong, ask me to delete your information, ask me to restrict or stop using it, object to how I use it, ask for it to be passed to you or someone else, and withdraw your consent at any time where I rely on it.

10.3 To use any of these rights, just email me. I will respond within one month, and there is usually no charge.

10.4 If you withdraw consent for me to hold your health information, I may not be able to let you take part in sessions safely, as explained in my Terms and Conditions.

11. Children

11.1 My classes and services are for adults aged 18 and over, and I do not knowingly collect information about children.

12. Complaints

12.1 If you are unhappy with how I have handled your information, please contact me first so I can put it right.

12.2 You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

13. Changes to this policy

13.1 I may update this policy from time to time. The latest version will always be on my website, with the date it was last updated at the top.

Contact

Thrive with Sarah Capewell

Serving Halesowen and the surrounding areas

[email protected]