Privacy policy

Harbour Pilates & Physio is the data controller for personal data collected through this site.

If you have privacy questions, contact hello@harbourpilates.example.com.

This policy is written for visitors in United Kingdom.

We only collect data needed to run this site and provide requested services.

Depending on how you use the site, this can include contact details, booking details, payment-related metadata, and technical usage data.

This site uses necessary cookies to keep core functionality working (for example security, session continuity, and consent choices).

This site does not use optional analytics cookies at this time.

When you submit a form, we process the information you provide so we can respond to your enquiry or request.

We keep identifiable form submissions for as long as needed to handle the enquiry, maintain operational records, and meet any legal requirements that apply to the site.

Where the platform applies retention controls, older submissions may be anonymised so the record can still support reporting or operational history without keeping the full identifying content indefinitely.

If you make a booking, we process details needed to manage attendance, scheduling, confirmations, and customer support.

We keep identifiable booking records for as long as needed to manage the booking, support customer service, and meet any legal or accounting requirements that apply to the site.

Where appropriate, older records may be reduced to a smaller history or ledger record so the site can keep the business history it needs without retaining the same level of personal detail forever.

If this site offers a customer portal, we use secure session data so you can sign in and manage your own bookings or account details.

These session cookies are necessary for authentication and account security.

Short-lived portal sign-in and session artifacts are kept only for the period needed to operate and secure the portal, then removed under the platform’s security retention controls.

We use trusted service providers (for example hosting, email delivery, analytics, and payment processors) to operate the site.

These providers process personal data only as needed to deliver their services to us.

We keep personal data only for as long as it is needed for the purposes described in this policy, including service delivery, customer support, security, fraud prevention, and legal or accounting obligations.

Retention periods vary by data category. Some records are deleted after short security or operational windows, some are anonymised or minimised once full identity is no longer needed, and some are kept longer where accounting, dispute, or legal requirements apply.

If you want more detail about how long a specific category of data is kept for this site, contact the privacy contact listed in this policy.

You can request access, correction, or deletion of your personal data, subject to legal and operational limits.

To make a privacy request, contact hello@harbourpilates.example.com.

If you are unhappy with how your data is handled, you can complain to the UK Information Commissioner's Office (ICO).