Purely Sally – Privacy Policy

Last Updated: October 2026

This privacy policy explains how Purely Sally collects, uses, and protects your personal information when you purchase a membership, book a Pilates or swimming class, browse this website, or fill out client intake forms.

I operate as a Sole Trader in the United Kingdom and am committed to protecting your privacy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I Am and How to Contact Me

2. The Types of Personal Information We Collect

We currently collect and process the following information:

  • Contact Details: Name, email address, phone number, and billing address.

  • Health and Physical Data (Special Category Data): Physical conditions, injuries, medical history, pregnancies, swimming ability, or ailments that might affect your movement or safety during sessions.

  • Emergency Contact Information: Name and phone number of a trusted individual to contact in an acute medical emergency.

  • Technical and Usage Data: Browser type, network/device information, IP address, and website usage details (clicks, pages visited, timestamps) via our website host.

3. How We Get Personal Information and Why We Have It

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • You purchase a membership, subscribe, or book a class block on our website.

  • You fill out an intake questionnaire or disclaimer via Google Forms prior to your first session.

  • You browse our website or interact with embedded video features.

Under the UK GDPR, the lawful bases we rely on for processing this information are:

  • Contractual Obligation: To deliver the classes, bookings, and digital video memberships you purchase.

  • Explicit Consent: For processing health-related data on your intake form to ensure your safety during physical activity. You can remove your consent at any time by contacting us.

  • Legitimate Interests: To send you vital operational updates (such as sudden class cancellations or pool closures) and secure our website against fraudulent transactions.

  • Consent: For sending promotional marketing emails. You have an absolute right to opt out at any time by clicking the "unsubscribe" link.

  • Vital Interests: To share emergency contact details with medical professionals in an acute emergency.

4. Website Visitors, Cookies, and Analytics

This website is hosted by Squarespace, which processes technical infrastructure data to maintain and secure its services.

  • Analytics and Cookies: Non-essential analytics cookies have been disabled on this website, and the Squarespace Activity Log is deactivated.

  • Managing Cookies: You can review active cookies, clear them, or block third-party cookies completely through your individual browser's settings (Chrome, Firefox, Safari, or Microsoft Edge).

5. Scheduling, Memberships, and Video Streaming

  • Scheduling & Memberships: Online booking and subscription spaces are powered natively by Squarespace. During checkout, the site may auto-complete your billing address by sharing what you type with the Google Places API.

  • Membership Videos: Our Pilates videos are hosted via Vimeo and embedded on this website. To stream the files, Vimeo receives technical data (IP address) and sets a standard tracking cookie called vuid. If you are actively logged into a personal Vimeo account, they may link this viewing data directly to your profile.

  • Client Forms: Intake questionnaires are hosted securely using Google Forms.

6. Secure Payment Processing

When you make a purchase, we use Squarespace Payments as our integrated solution. Payments are safely handled by the following third-party provider systems in accordance with their individual privacy setups:

  • Stripe: Handles transaction clearing. I never see, handle, or store your credit card numbers or banking data.

  • Sift: Evaluates live transactions for real-time fraud monitoring and prevention.

7. How We Store Your Personal Information and Retention

Your information is securely stored digitally across our password-protected cloud accounts with Squarespace, Google Drive, and Stripe.

We only retain your personal data for as long as necessary. For insurance and professional liability purposes, client intake records and signed disclaimers are safely archived for 7 years after your final completed session.

8. Your Data Protection Rights

Under UK data protection law, you have rights including:

  • Your right of access: You have the right to ask us for copies of your personal data.

  • Your right to rectification: You have the right to ask us to correct information you think is inaccurate or incomplete.

  • Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.

  • Your right to restriction/objection: You have the right to object to or restrict processing, particularly regarding promotional marketing.

9. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us directly at the email listed above.