1. Who We Are

​

Santosha Flows Yoga

Website: www.santoshaflows.co.uk

Email: studio@santoshaflows.co.uk

Based in: United Kingdom

Data Controler: Chantelle Fox (owner of Santosha Flows Yoga)

​

​

2. What Personal Data We Collect

​

We may collect the following types of data when you:

​

Visit our website: IP address, browser type, cookies

Book a class, workshop or retreat: Name, email, phone number, payment info, emergency contact (if required)

Subscribe to our newsletter: Name and email address

Fill in a contact form: Name, email address, message content

Follow us on social media: Public profile info (e.g. instagram handle)

​

​

3. How We Use Your Data

​

We use your data to:

​

• Provide and manage classes, workshops and retreats

• Respond to your enquiries

• Send booking confirmations and reminders

• Share relevant updates, promotions or newsletters (only if you've opted in)

• Improve our website and services

• Comply with legal and regulatory obligations

​

We never sell your data or share it with third parties for marketing.

​

​

4. Legal Bases for Processing

​

We rely on one or more of the following legal grounds:

​

• Consent - when you subscribe to our mailing list or submit a form

• Contract - to provide the services you've requested (e.g. booking a class)

• Legal obligation - to meet any applicable legal requirements

• Legitimate interest - to improve services or respond to enquiries

​

​

5. How Long We Keep Your Data

​

We keep your personal data only as long as necessary:

​

• Class or retreat bookings: 6 years (for accounting and legal purposes)

• Mailing list: until you unsubscribe

• Enquiries: 12 months from last contact

​

You can request deletion of your data at any time (see Section 8)

​

​

6. Cookies

​

We use cookies on our website to:

​

• Understand how visitors use the site

• Improve performance and user experience

• Enable essential website functions (like bookings)

​

You can manage your cookie preferences in your browser settings.

​

​

7. Third-Party Services

​

We may use trusted third-party services to support our business (e.g. Wix for website hosting, Stripe or PayPal for payments, MailerLite or similar for newsletters). These providers may process your data on our behalf and are required to handle it securely and in line with GDPR.

​

​

8. Your Rights Under GDPR

​

You have the right to:

​

• Access the personal data we hold about you

• Correct inaccurate or incomplete data

• Request deletion of your data ("right to be forgotten")

• Object to or restrict processing

• Withdraw consent at any time

• Lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk

​

To exercise your rights, email us at studio@santoshaflows.co.uk

​

​

9. How We Protect Your Data

​

We take data protection seriously and use appropriate technical and organisational measures to safeguard your information, including:

​

• Secure website hosting (SSL encryption)

• Limited access to personal data

• Password-protected systems

​

​

10. Contact Us

​

If you have any questions or concerns about this policy or your data:

​

Email: studio@santoshaflows.co.uk

Website: www.santoshaflows.co.uk

​