top of page

Privacy Policy

Last updated: September 2026

At 360 Pilates, we respect your privacy and are committed to protecting your personal information. This Privacy Notice explains how we collect, use, store and share your personal information when you use our website, create an account, book or attend a class, purchase a membership or class pack, contact us, complete a health questionnaire or otherwise use our services.

Please read this Privacy Notice carefully.

 

1. Who we are

360 Pilates is the trading name of Nicolette Hobbs, a sole trader.

For the purposes of UK data protection law, Nicolette Hobbs is the data controller responsible for your personal information.

Contact details

360 Pilates
The Old Dairy
Old Bystock Drive
Exmouth
Devon
EX8 5EQ
United Kingdom

Email: hello@360pilates.co.uk

If you have any questions about this Privacy Notice or how we use your personal information, please contact us using the details above.

 

2. Who this Privacy Notice applies to

This Privacy Notice applies to:

  • visitors to our website;

  • people who contact us or make an enquiry;

  • customers who create an online account;

  • customers who book or attend our classes;

  • customers who purchase drop-in classes, class packs or memberships;

  • people who complete a health questionnaire;

  • parents or guardians who provide information in connection with a child attending our classes; and

  • children and young people who use our services.

We welcome participants aged 14 and over, subject to our applicable booking, health, safety and parental or guardian requirements.

We explain below how we handle personal information relating to children and young people.

 

3. What personal information we collect

The personal information we collect will depend on how you interact with us.

3.1 Account information

When you create an account through our website, we may collect:

  • your name;

  • email address;

  • telephone number, where provided;

  • date of birth or age information, where required;

  • login and account details;

  • account preferences; and

  • other information you choose to provide to us.

Our website and customer accounts are operated using Wix.

 

3.2 Booking and service information

When you book or attend a class, purchase a class pack or take out a membership, we may collect or generate information including:

  • classes booked;

  • booking dates and times;

  • membership information;

  • class-pack information;

  • attendance information;

  • cancellations;

  • no-shows, where applicable;

  • purchase history; and

  • other information necessary to administer your booking or membership.

We use this information to provide and manage the services you have requested.

 

3.3 Payment and transaction information

We accept payment through:

  • Stripe;

  • bank transfer; and

  • cash.

Stripe

Where you make a payment through Stripe, your payment is processed using Stripe's payment services. We may receive information necessary to confirm, administer and reconcile the payment, such as:

  • your name;

  • transaction amount;

  • date of payment;

  • payment status;

  • transaction or payment reference; and

  • other information reasonably necessary to manage the transaction.

We do not intend to store your full payment card details where these are processed directly by Stripe.

Bank transfer

Where you pay by bank transfer, we may process information contained in or connected with the transaction, such as:

  • your name;

  • payment reference;

  • amount paid;

  • date of payment; and

  • information necessary to identify and reconcile the payment.

Cash

Where you pay in cash, we may record:

  • your name;

  • the amount paid;

  • the date of payment; and

  • the class, membership or other service to which the payment relates.

We use payment and transaction information to process and administer payments, bookings and memberships, maintain financial records and meet our legal and accounting obligations.

 

3.4 Communications

If you contact us by email, through our website or in another way, we may collect:

  • your name;

  • contact details;

  • the contents of your message;

  • information relating to your enquiry, complaint or request; and

  • our correspondence with you.

We use this information to respond to you, provide customer support and manage our relationship with you.

 

4. Health questionnaires and health information

Because Pilates involves physical activity, we ask clients to complete a health and participation questionnaire. This helps us understand whether there are health, injury or other physical factors that may be relevant to your participation in Pilates.

Depending on the information you provide, we may collect information about:

  • heart or circulatory conditions;

  • blood pressure;

  • respiratory conditions, including asthma;

  • dizziness or fainting;

  • back, neck, joint or mobility problems;

  • arthritis or rheumatic conditions;

  • diabetes or epilepsy;

  • osteoporosis or osteopenia;

  • spinal, disc or nerve conditions;

  • previous or recent injuries;

  • recent operations or surgery;

  • joint replacements;

  • pregnancy or recent childbirth;

  • ongoing treatment;

  • physical restrictions or limitations;

  • relevant exercise history;

  • health and wellbeing goals; and

  • relevant advice or restrictions provided by a healthcare professional.

We may also ask you to provide other information that is relevant to your safe participation in Pilates.

Why we use this information

We use relevant health and participation information to:

  • consider whether Pilates appears suitable for you;

  • understand relevant physical limitations or restrictions;

  • plan or adapt exercises where appropriate;

  • help instructors provide safer and more appropriate guidance;

  • ask you to seek medical advice where appropriate;

  • manage health and safety; and

  • respond appropriately if a health issue or emergency arises during a class.

360 Pilates instructors do not provide medical diagnosis or treatment. If you have concerns about your health or whether you should take part in Pilates, you should seek advice from an appropriately qualified healthcare professional.

Special-category personal data

Health information is special-category personal data under UK data protection law. We will only collect health information that is relevant and reasonably necessary for the purposes described above.

We will identify and document an appropriate lawful basis for processing your personal information and an additional condition for processing special-category health information. Where we rely on explicit consent, we will ask for this separately and clearly.

You may withdraw consent where consent is the basis on which we process your health information. However, withdrawing consent may affect our ability to provide you with certain Pilates services safely or appropriately.

We will restrict access to health information to people who genuinely need it for the purposes described above and will take appropriate steps to protect it.

 

5. Under 18s bookings

360 Pilates offers services to young people aged 14 and over.

We recognise that children and young people require particular protection when their personal information is processed. 

Where a participant is under 18, we may collect information about:

  • the young person's name;

  • date of birth or age;

  • contact details, where appropriate;

  • account, booking and attendance information;

  • relevant health information;

  • emergency contact details; and

  • the name and contact details of a parent or guardian.

We will only collect information that is reasonably necessary.

Parents and guardians

Depending on the participant's age, circumstances and the nature of the service, we require a parent or person with parental responsibility to:

  • make or authorise a booking;

  • provide contact details;

  • provide emergency contact information;

  • complete or assist with health information;

  • give any required permissions; or

  • agree to relevant participation arrangements.

 

6. Emergency contact information

We may ask you to provide the name and telephone number of an emergency contact.

We use this information only where reasonably necessary to contact someone in connection with an emergency or significant health or safety concern.

If you provide another person's personal information to us as your emergency contact, you should ensure that they are aware that you have provided their details to 360 Pilates for this purpose.

 

7. How and why we use your personal information

We only process personal information when we have a valid legal basis.

The legal bases include:

Consent: You have given explicit permission for processing your information.
Performance of a Contract: Processing is necessary to provide our Services.
Legal Obligations: To comply with legal or regulatory requirements.
Vital Interests: To protect your or someone else’s vital interests.

 

8. Marketing

We may use your contact details to send you information about 360 Pilates, including:

  • new classes;

  • memberships;

  • workshops;

  • events;

  • special offers; and

  • other Pilates-related news or services.

Where consent is required for electronic marketing, we will ask for it separately from your acceptance of our Terms and Conditions or booking requirements.

You can unsubscribe from marketing emails at any time by:

We use Wix tools for our website and marketing communications.

Please note that opting out of marketing will not normally stop us from sending you important service communications, such as:

  • booking confirmations;

  • class changes;

  • cancellations;

  • payment information;

  • membership administration;

  • account security messages; or

  • other important information relating to a service you have purchased.

 

9. Website, cookies and analytics

We use cookies and similar tracking technologies to enhance your experience on our website. For more details, please refer to our Cookies Policy.

 

 

10. Who we share your personal information with

We may share personal information with trusted third parties where this is necessary to operate our business and provide our services.

These may include:

Wix

We use Wix to operate our website and may use Wix services in connection with:

  • customer accounts;

  • bookings;

  • website functionality;

  • customer communications; and

  • marketing.

Stripe

We use Stripe in connection with online payment processing.

Professional advisers

Where necessary, we may share relevant information with professional advisers such as:

  • accountants;

  • legal advisers;

  • insurers; or

  • other professional advisers.

Authorities and other organisations

We may share information where we are legally required to do so or where necessary to:

  • comply with a legal obligation;

  • protect our legal rights;

  • establish, exercise or defend legal claims; or

  • protect the safety of our customers or others where legally appropriate.

We do not sell your personal information. We only share personal information with third parties where this is necessary to provide our services, operate our website and business, process payments, communicate with you, meet our legal obligations or otherwise as explained in this Privacy Notice.

 

11. International transfers

Some of the technology providers we use may process personal information outside the United Kingdom.

Where a transfer of personal information outside the UK occurs, we will take appropriate steps required by applicable data protection law to protect that information.

This may include relying on:

  • a UK adequacy regulation;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to EU Standard Contractual Clauses; or

  • another lawful transfer mechanism.

The exact arrangements may depend on the service and processing involved.

 

12. How long we keep your information

We will not keep your personal information for longer than reasonably necessary.

The length of time we keep information depends on:

  • why we collected it;

  • the nature of the information;

  • whether we have an ongoing relationship with you;

  • our legal and accounting obligations; and

  • whether we need the information in connection with a complaint or legal claim.

When information is no longer required, we will delete it or anonymise it where appropriate.

 

13. How we protect your information

We take reasonable technical and organisational measures designed to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • misuse;

  • alteration;

  • disclosure; and

  • destruction.

Because health information is particularly sensitive, we will take its nature into account when deciding how it should be stored and who should have access to it. 

Access to personal information will be limited to people or service providers who reasonably need it for the purposes described in this Privacy Notice.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

 

14. Your data protection rights

Depending on the circumstances, you have rights under UK data protection law, including:

Right of access

You can ask us for a copy of the personal information we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete personal information.

Right to erasure

In certain circumstances, you can ask us to delete your personal information.

Right to restriction

In certain circumstances, you can ask us to restrict how we use your information.

Right to object

In certain circumstances, you can object to our processing of your personal information, particularly where we rely on legitimate interests or process information for direct marketing.

Right to data portability

In certain circumstances, you can ask for personal information you provided to us to be transferred to you or another organisation.

Right to withdraw consent

Where we rely on consent, you can withdraw that consent at any time.

Withdrawal of consent will not normally affect the lawfulness of processing carried out before consent was withdrawn.

 

15. Exercising your rights

To exercise any of your data protection rights, please contact:

Email: hello@360pilates.co.uk

We may need to verify your identity before responding to certain requests.

We will respond without undue delay and generally within the time required by applicable data protection law.

 

 

16. How to complain

If you have concerns about how we use your personal information, please contact us first:

Email: hello@360pilates.co.uk

We will investigate your concern and aim to resolve it.

You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO).

Information Commissioner's Office — make a complaint

 

17. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect:

  • changes to our services;

  • changes to how we use personal information;

  • changes to our technology providers;

  • new online or video Pilates services; or

  • changes in applicable law or regulatory guidance.

The most recent version will be published on our website with the date of the latest update.

Where a significant change affects how we use your personal information, we will take appropriate steps to bring the change to your attention.

 

18. Contact us

If you have any questions about this Privacy Notice or how 360 Pilates handles your personal information, please contact:

360 Pilates
Trading name of Nicolette Hobbs, Sole Trader

The Old Dairy
Old Bystock Drive
Exmouth
Devon
EX8 5EQ
United Kingdom

Email: hello@360pilates.co.uk

bottom of page