Privacy Policy

Last updated: 09/09/2026

1. About this Privacy Policy

This Privacy Policy explains how CATHERINE LANGDON/CAT LANGDON PILATES (“I”, “me”, “my”, “we” or “us”) collects, uses, stores and protects your personal information when you use my website, contact me, book a Pilates session or class, purchase services from me, or otherwise interact with my business.

I am committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

For the purposes of UK data-protection law, I am the data controller of the personal information I collect and use in connection with my Pilates business.

Business name: CAT LANGDON PILATES
Data controller: CATHERINE LANGDON/CAT LANGDON PILATES
Address: 26 FULLERS WAY NORTH, SURBITON, KT67LH
Email: HELLO@CATLANGDONPILATES.COM
Telephone: +447769169265

This Privacy Policy is intended to comply with applicable UK data-protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable to my business.

2. Information I collect

Depending on how you interact with my business, I may collect some or all of the following information.

Personal and contact information

This may include:

your name;
postal address;
email address;
telephone or mobile number;
date of birth or age, where relevant;
emergency contact details;
information you provide when contacting me or making an enquiry.

Booking and client information

When you book or participate in Pilates sessions, I may collect information such as:

classes or sessions you have booked;
appointment dates and times;
attendance information;
information about your preferences and requirements;
records of communications with you concerning your sessions;
information relevant to your Pilates programme or progress.

Health and fitness information

To provide Pilates instruction safely and appropriately, I may ask you to provide information about your health, fitness and physical condition.

This may include information concerning:

current or previous injuries;
medical conditions;
physical limitations or mobility issues;
pain or discomfort;
operations or procedures;
pregnancy or postnatal status, where relevant;
medications or treatments where relevant to your participation;
exercise history and fitness level;
other information that you consider relevant to your ability to participate safely in Pilates.

Some of this information may constitute special category data, particularly information concerning your health.

You do not have to provide information that I request. However, if you choose not to provide information that is necessary for me to assess whether Pilates is appropriate or safe for you, I may be unable to provide certain services to you.

Payment information

If you purchase services from me, I may collect information relating to your payments, such as:

details of the service purchased;
payment amount;
payment date;
payment status;
transaction or booking reference.

Where payments are processed by a third-party payment provider, such as [STRIPE / SUMUP / PAYPAL / OTHER], your payment card or bank details may be collected and processed directly by that provider.

I do not normally store your full payment-card details myself.

Website and technical information

When you use my website, certain technical information may be collected automatically, depending on the website's functionality and cookies. This may include:

IP address;
browser and device information;
pages visited;
approximate location derived from IP address;
information about how you use the website.

Please see the Cookies section below for further information.

3. How I use your information

I may use your personal information for the following purposes:

Providing Pilates services

I use your information to:

respond to enquiries;
arrange and manage bookings;
provide Pilates instruction;
tailor sessions to your individual circumstances;
consider relevant health and fitness information when planning sessions;
communicate with you about your appointments;
maintain appropriate client records;
monitor your progress where appropriate.

Managing payments

I use relevant information to:

process payments;
confirm purchases and bookings;
issue receipts or invoices;
maintain financial and accounting records;
deal with refunds, cancellations or payment queries.

Communicating with you

I may use your contact details to send you messages relating to:

bookings;
appointments;
cancellations or changes;
payments;
important information about your sessions;
responses to enquiries.

These communications are generally necessary to provide the service you have requested and are not the same as marketing communications.

Business administration

I may use information to:

maintain business and client records;
comply with legal and accounting obligations;
manage disputes or complaints;
establish, exercise or defend legal claims;
protect my business, clients and others from fraud or misuse.

Marketing

If you have provided the necessary consent, I may use your contact details to send you information about my Pilates services, classes, workshops, events or other offers.

You can withdraw your consent to marketing at any time.

I will not assume that simply providing your email address or telephone number means that you have agreed to receive marketing communications.

4. My lawful bases for using your information

Under UK data-protection law, I must have a lawful basis for processing your personal information.

Depending on the circumstances, I may rely on one or more of the following:

Contract

I may process your information where this is necessary to enter into or perform a contract with you, for example to manage your booking, provide Pilates sessions or process a purchase.

Legal obligation

I may process information where this is necessary for me to comply with a legal obligation, for example certain accounting, tax or record-keeping requirements.

Legitimate interests

I may process information where this is necessary for my legitimate business interests, provided those interests are not overridden by your rights and interests.

This may include reasonable business administration, maintaining appropriate records, managing enquiries and protecting my business.

Consent

Where required, I may rely on your consent, for example for certain marketing activities or where consent is required for the processing of particular information.

Where I rely on consent, you have the right to withdraw it at any time.

Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew your consent.

5. Health and special category information

Because Pilates involves physical activity, I may need to collect information about your health and physical condition so that I can provide an appropriate and safe service.

Health information is generally special category personal data under the UK GDPR and requires an additional condition for processing beyond the ordinary lawful bases described above.

Where appropriate, I will obtain your explicit consent to the processing of health information for the purpose of assessing your suitability for Pilates and providing appropriately tailored sessions.

I will only ask for health information that is reasonably relevant to providing my services safely and appropriately.

You should tell me if there is anything relevant to your health or physical condition that you believe I should know before participating in Pilates.

Where appropriate, I may recommend that you obtain advice or clearance from a suitably qualified healthcare professional before participating.

6. Who I share your information with

I will only share your personal information where there is a legitimate reason to do so and, where required, a lawful basis for doing so.

Depending on how my business operates, this may include sharing information with:

payment providers;
booking or scheduling platforms;
website hosting providers;
email or communication providers;
accounting or bookkeeping providers;
IT and software service providers;
professional advisers;
insurers, where necessary;
legal or regulatory authorities where I am legally required to do so.

For example, if you make a payment through a third-party payment provider, that provider will process information necessary to complete the transaction under its own privacy policy.

I do not sell your personal information to third parties.

7. Health information and third parties

I will not routinely share your health information with third parties.

I may do so where:

you have specifically consented to this;
it is necessary to provide a service you have requested;
I am legally required to do so; or
it is necessary to protect someone's vital interests in an emergency and the applicable legal conditions are met.

I will only share information that is reasonably necessary in the circumstances.

8. How I protect your information

I take reasonable technical and organisational measures to protect your personal information against:

unauthorised access;
accidental loss;
misuse;
alteration;
disclosure; and
destruction.

These measures may include using password protection, secure software and systems, access controls and appropriate device security.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

You should also take reasonable steps to protect your own information, including keeping passwords and account details confidential.

9. Where your information is stored

Your information may be stored electronically using third-party service providers.

Some providers may store or process information outside the United Kingdom.

Where personal information is transferred outside the UK, I will take appropriate steps to ensure that the transfer is made in accordance with applicable UK data-protection law and that appropriate safeguards are in place.

The relevant safeguards may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another lawful transfer mechanism where applicable.

10. How long I keep your information

I will only retain your personal information for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, insurance and reporting requirements.

Different types of information may therefore be retained for different periods.

For example:

Client and booking information: generally retained for as long as you are an active client and for an appropriate period afterwards.
Health and fitness information: retained only for as long as reasonably necessary for the provision of my services, safety, insurance and legitimate record-keeping purposes.
Financial and transaction records: retained for the period required by applicable tax and accounting obligations.
Marketing information: retained until you withdraw your consent or otherwise request that your details no longer be used for marketing, subject to any information I am required to retain for other lawful purposes.

When information is no longer required, I will securely delete it or anonymise it where appropriate.

11. Your data protection rights

Under UK data-protection law, you may have rights including:

The right to be informed about how your personal information is used.
The right of access to request a copy of the personal information I hold about you.
The right to rectification if information I hold about you is inaccurate or incomplete.
The right to erasure in certain circumstances.
The right to restrict processing in certain circumstances.
The right to object to certain types of processing.
The right to data portability in certain circumstances.
The right to withdraw consent where I am relying on consent to process your information.

These rights are not absolute and certain exemptions or conditions may apply.

If you wish to exercise one of your rights, please contact me using the details at the beginning of this Privacy Policy.

I may need to verify your identity before responding to certain requests.

12. Marketing communications

If you have agreed to receive marketing from me, you can change your mind at any time.

You can unsubscribe by:

clicking the unsubscribe link in a marketing email;
replying to the relevant message;
contacting me using the details in this Privacy Policy.

I will respect your marketing preferences and keep an appropriate record of your request.

For email and text marketing to individuals, specific rules under the Privacy and Electronic Communications Regulations (PECR) may apply in addition to UK GDPR requirements.

13. Cookies

My website may use cookies and similar technologies.

Cookies may be used for purposes such as:

ensuring the website functions correctly;
remembering preferences;
understanding how visitors use the website;
improving website performance;
measuring website traffic; and
[MARKETING/ADVERTISING, IF APPLICABLE].

Where consent is required for a particular type of cookie or similar technology, I will request consent before using it.

You can manage or disable cookies through your browser settings and, where applicable, through my website's cookie-management tools.

[Add a link to your separate Cookie Policy here.]

14. Third-party websites

My website may contain links to third-party websites, such as social media platforms, booking systems or payment providers.

I am not responsible for the privacy practices, security or content of those websites.

You should read the privacy policies of third-party websites before providing them with personal information.

15. Children's information

My services are primarily intended for adults.

If I provide Pilates services to anyone under the age of 18, I will take appropriate steps to obtain any required permissions and handle their personal information in accordance with applicable data-protection law.

16. Data breaches

If I become aware of a personal-data breach, I will assess it and take appropriate action in accordance with applicable data-protection law.

Where legally required, I will notify the Information Commissioner's Office (ICO) and/or affected individuals within the applicable timescales.

17. Changes to this Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my business, the services I provide, the information I collect or applicable legal requirements.

The latest version will be published on this page with the date it was last updated.

If I intend to use your personal information for a new purpose that is materially different from the purpose for which it was originally collected, I will provide appropriate information before starting that processing where required.

18. Complaints

If you have concerns about how I have handled your personal information, please contact me in the first instance using:

Email: HELLO@CATLANGDONPILATES.COM

I will try to resolve your concern.

You also have the right to complain to the UK's data-protection regulator:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113

The ICO is the independent supervisory authority responsible for data protection in the UK.

19. Contact

If you have any questions about this Privacy Policy or how I use your personal information, please contact:

CATHERINE LANGDON CAT LANGDON PILATES
Address: 26 FULLERS WAY NOTH, SURBITON, KT67LH
Email: HELLO@CATLANGDONPILATES.COM
Telephone: +447769169265