Data, privacy and cookies policy

Last updated: September 2026

In your Body respects your privacy and is committed to protecting your personal information. This policy explains what information we collect, why we collect it, how we use and protect it, who we may share it with, and how cookies are used on the In your Body website.

The In your Body website refers to content available within the www.inyourbody.co.uk domain.

If you have any questions about this policy or how your personal information is used, please contact:

Email: hello@inyourbody.co.uk

1. Who we are

In your Body is the name used by the owner of this website and business.

For the purposes of UK data protection law, In your Body is the data controller responsible for your personal information.

Registered address:
14 Stanwick Crescent
Cheltenham
Gloucestershire
GL51 9LQ

In this policy, “In your Body”, “we”, “us” and “our” refer to the business, and “you” refers to visitors and users of our website and services.

2. What personal information do we collect?

Depending on how you use our website and services, we may collect:

• your name

• email address

• telephone number

• postal address, where required

• information you provide when making an enquiry

• information you provide when booking or purchasing a service

• information relating to your bookings, classes or appointments

• correspondence between you and In your Body

• payment and transaction information

• information about how you use our website, including pages visited, browser type, device information and IP address

• information collected through cookies and similar technologies, where applicable.

We only collect information that is relevant to the purpose for which it is being used.

If you provide information relating to your health or wellbeing when making an enquiry or booking a yoga or massage service, this may include special category health information under UK data protection law. We only use such information where necessary and with an appropriate lawful basis and additional condition under UK data protection law.

3. How do we collect your information?

We may collect personal information when you:

• contact us by email

• complete a contact or enquiry form

• book or purchase a service

• communicate with us about an existing or prospective booking

• subscribe to marketing communications

• visit and use our website, including through cookies and similar technologies

• make a booking or payment through a third-party service such as Ubindi or Stripe.

We normally collect information directly from you, although we may also receive information from third-party booking and payment services when you book or pay for our services.

4. How do we use your information?

We may use your personal information to:

• respond to enquiries and requests

• arrange and manage bookings

• provide our yoga, massage and related services

• communicate with you about your bookings or services

• process payments where applicable

• maintain appropriate business and financial records

• improve our website, services and customer experience

• understand how visitors use our website, where you have consented to analytics cookies

• send marketing communications where you have actively opted in to receive them

• comply with legal, regulatory, accounting and insurance obligations

• protect our business, website, users and other people from fraud, misuse or security threats.

We will not use your personal information for a new purpose that is incompatible with the purpose for which it was originally collected without considering the appropriate lawful basis and, where necessary, informing you or obtaining your consent.

5. Our lawful bases for using your information

Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Contract: where processing is necessary to provide a service you have booked or to take steps at your request before entering into a contract.

Legitimate interests: where processing is necessary for the reasonable and proportionate running, administration, security and improvement of our business and website, and your interests and rights do not override those interests.

Consent: where you have actively given us permission to use your information for a specific purpose, such as receiving certain marketing communications or using non-essential cookies.

Legal obligation: where we are required to process or retain information to comply with a legal or regulatory requirement.

Where we rely on consent, you can withdraw that consent at any time.

6. Marketing communications

We may occasionally send information about our services, classes, workshops or other activities where you have actively opted in to receive marketing communications.

You can unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us at hello@inyourbody.co.uk.

We do not sell your personal information or use your contact details for unsolicited marketing.

7. Booking and payment services

We use third-party services to manage bookings and process payments.

Ubindi

We use Ubindi to manage class schedules, bookings, memberships and other aspects of our yoga services.

When you book through Ubindi, information such as your name, email address and booking details may be processed by Ubindi. Ubindi may also process information relating to payments made through its platform.

Ubindi states that it works with third-party payment processors, including Stripe, to facilitate payments.

For more information about how Ubindi handles personal information, please refer to its privacy policy.

Stripe

We use Stripe to process payments.

When you make a payment, Stripe may process information such as your name, email address, billing information, IP address and payment information as necessary to process the transaction, prevent fraud and comply with legal and regulatory requirements.

Your full payment card details are processed by Stripe rather than being stored directly by In your Body.

Stripe may act as a data processor on behalf of businesses using its payment services and may also act as a data controller for certain of its own processing activities.

For more information about how Stripe handles personal information, please refer to Stripe’s privacy information.

8. Who else do we share your information with?

We do not sell your personal information.

We may share personal information with trusted third-party service providers where this is necessary to operate our business or provide our services. These may include providers of:

• website hosting and technical support
• booking and scheduling services, including Ubindi
• payment processing, including Stripe
• email and marketing services
• website analytics
• website security and performance services.

These providers may process personal information on our behalf or, depending on the service and circumstances, process information under their own privacy responsibilities.

We may also disclose personal information where required to do so by law, legal proceedings or a lawful request from an appropriate authority, or where necessary to protect the rights, property or safety of In your Body or others.

Some third-party providers may process personal information outside the UK. Where this occurs, appropriate safeguards will be used in accordance with applicable data protection law.

9. How long do we keep your information?

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including any legal, accounting, insurance or reporting requirements that apply to us.

Different types of information may therefore be retained for different periods.

When information is no longer required, we will securely delete it or anonymise it where appropriate.

10. How do we protect your information?

We take reasonable and appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access to personal information is limited to those who need it for legitimate business purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

11. Your data protection rights

Depending on the circumstances, you have rights under UK data protection law, including the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct inaccurate or incomplete information
• ask us to delete your personal information where there is no good reason for us to continue processing it
• ask us to restrict how we use your information in certain circumstances
• object to certain uses of your information, including direct marketing
• withdraw consent where we rely on consent as our lawful basis
• request your personal information in a portable format where the right applies.

These rights are subject to certain conditions and exceptions under data protection law.

To exercise your rights, please contact hello@inyourbody.co.uk

We will normally respond to requests within one month, although this may be extended where permitted by law.

12. Complaints

If you have concerns about how we have handled your personal information, please contact us first at:

hello@inyourbody.co.uk

You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK’s independent supervisory authority for data protection.

13. Cookies

Our website uses cookies and similar technologies.

Cookies are small text files that websites place on your device. They can be used for essential website functionality, to remember preferences, understand how visitors use a website, or support advertising and marketing.

Some cookies are strictly necessary for the website to function and do not require consent.

Other cookies, such as analytics and advertising cookies, are non-essential and require your consent before they are placed on your device.

We will ask for your consent through our cookie consent mechanism, where required. You can change or withdraw your cookie preferences at any time.

UK rules require websites to explain what cookies and similar technologies they use and why. Non-essential cookies generally require prior consent.

14. Types of cookies we may use

Essential cookies

These cookies are necessary for the website to function correctly or securely. They may, for example, remember your cookie preferences or support essential website functionality.

These cookies do not require consent where they are strictly necessary for a service you have requested.

Analytics cookies

Where enabled and where you have consented, analytics cookies help us understand how visitors use our website.

This may include information such as which pages are visited, how visitors navigate the site and general information about the device or browser being used.

We use this information to understand website performance and improve the experience for visitors.

Advertising and marketing cookies

Where enabled and where you have consented, advertising or marketing technologies may be used to understand how visitors interact with our website and, where applicable, to measure or personalise advertising.

These technologies may be provided by third-party services such as Meta or Google.

We will only use non-essential advertising or marketing cookies where the appropriate consent has been obtained.

15. Third-party cookies and technologies

Depending on the services currently enabled on our website, we may use third-party technologies including:

Google Analytics

Google Analytics may be used to understand how visitors use our website and to help us improve its performance, content and user experience.

Google advertising services

Where enabled, Google advertising technologies may be used to measure or support online advertising.

Meta Pixel

Where enabled, the Meta Pixel may be used to understand interactions with our website and to measure or support advertising through Meta platforms.

Microsoft Clarity

Where enabled, Microsoft Clarity may be used to understand how visitors interact with our website. This may include behavioural analytics such as heatmaps and session recordings.

We will only use non-essential analytics, advertising and tracking technologies where the appropriate consent has been obtained.

The precise cookies and technologies used may change as our website and services develop. Our cookie consent mechanism should provide the most up-to-date information about the cookies currently in use.

16. Managing your cookies

You can choose whether to accept non-essential cookies through our cookie consent mechanism.

You can also manage or delete cookies through your browser settings. However, disabling certain cookies may affect how some websites function.

You should be able to change or withdraw your cookie preferences at any time through the cookie settings available on our website.

17. Third-party websites

Our website may contain links to other websites. These websites operate independently of In your Body and have their own privacy policies and cookie practices.

We are not responsible for the content, security or privacy practices of external websites. We recommend reviewing the privacy policy of any website you visit.

18. Changes to this policy

We may update this privacy and cookies policy from time to time to reflect changes to our services, website, technology or legal requirements.

The latest version will always be published on this website, with the date of the most recent update shown at the beginning of the policy.

19. Contact us

If you have any questions about this privacy policy, how we use your information or your cookie preferences, please contact:

In your Body
14 Stanwick Crescent
Cheltenham
Gloucestershire
GL51 9LQ

Email: hello@inyourbody.co.uk