1. Who I am
This website, www.victoriacpilates.com, is run by Victoria Chambers, a Pilates instructor based in London, trading as Victoria Chambers Pilates ("I", "me", "my").

I am the data controller for the personal information collected through this website, which means I decide how and why it is used. If you have any questions about this policy or your information, please email me at victoriacpilates@gmail.com.

2. What information I collect
Information you give me:

• Contact form: your first name, last name (optional), email address and message.

• Corporate enquiry form: your first name, company name, email address, phone number (optional) and message.

• Newsletter sign-up: your email address.

• Emails you send me directly: your email address and anything you choose to include.

​

Information collected automatically: when you visit the site, some technical information is collected through cookies and similar technologies, such as your IP address, browser and device type, and the pages you view. See section 8 for details.

3. Health information
If you get in touch about private sessions, you may choose to tell me about an injury, health condition or similar. This is classed as special category data under UK data protection law. I will only use it to understand whether a session is suitable for you and to plan safe, appropriate sessions, and I will only process it with your explicit consent. Please don't send detailed medical information through the website forms; I'll ask for what I need before we work together.

4. How I use your information and my lawful basis

• Replying to your enquiry. I use your name, contact details and message. My lawful basis is legitimate interests (responding to people who contact me), or taking steps at your request before entering a contract.

• Arranging and delivering private or corporate sessions. I use your name, contact details, booking details and any health information you share. My lawful basis is performance of a contract, and your explicit consent for any health information.

• Sending my newsletter. I use your email address. My lawful basis is your consent, which you can withdraw at any time using the unsubscribe link or by emailing me.

• Running and securing the website. I use technical information from essential cookies. My lawful basis is legitimate interests (keeping the site working and secure).

• Showing my Instagram feed on the site. Your browser sends your IP address and device information to Instagram (Meta). My lawful basis is your consent, given through the cookie banner.

• Keeping business and tax records. I use your name, contact and payment details. My lawful basis is legal obligation.

​

I will never sell your personal information or use it for anything you wouldn't reasonably expect.

5. Who I share it with
I only share your information with service providers who help me run my business, and only as much as they need:

• Wix.com, which hosts this website and stores form submissions and newsletter subscriber details.

• Google (Gmail), which I use for email.

• Instagram (Meta Platforms), which provides the Instagram feed shown on this site. When the feed loads, your browser connects to Instagram's servers, which receive your IP address and device information. This only happens if you allow functional cookies.

​

These providers act on my instructions and must keep your information secure. I may also share information if required by law.

Bookings through other websites: my public classes are booked through the studios I teach at (such as Basic Space, The Space and Revolt Cycling) and some events are booked through Momence. When you book through those sites, they collect and handle your information under their own privacy policies, not this one.

6. International transfers
Some of my service providers, including Wix, Google and Meta, may store or process information outside the UK, for example in the United States. Where this happens, the transfer is protected by safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.

7. How long I keep your information

• Enquiries that don't lead to a booking: up to 12 months after our last contact.

• Client information: for as long as we work together and then for 6 years afterwards, in case of any questions or insurance requirements.

• Financial records: for 6 years, as required for tax purposes.

• Newsletter subscribers: until you unsubscribe.

After that, I securely delete it.

8. Cookies
Cookies are small text files stored on your device when you visit a website. This site is built on Wix, which places some cookies automatically.
Essential cookies are needed for the site to work and to keep it secure. They don't need your consent. These include:

• XSRF-TOKEN: a security cookie that prevents fraudulent requests. Deleted when you close your browser.

• svSession: identifies your visit and session. Kept for up to 2 years.

• hs: a security cookie. Deleted when you close your browser.

• TS*: security cookies that detect attacks. Deleted when you close your browser.

• Usercentrics consent settings: remember your cookie choices. Kept for up to 12 months.

​

Functional cookies and content enable features such as the Instagram feed. These are only loaded if you accept them through the cookie banner. I don't use analytics or advertising cookies on this site.

Managing cookies: you can change your choices at any time through the cookie settings link at the bottom of each page. You can also block or delete cookies in your browser settings, though blocking essential cookies may stop parts of the site working. For more information, visit www.allaboutcookies.org.

9. Your rights
Under UK data protection law you have the right to:

• ask for a copy of the information I hold about you

• ask me to correct information that is wrong or incomplete

• ask me to delete your information

• ask me to restrict or stop using your information

• object to me using your information based on legitimate interests

• ask for your information in a portable format

• withdraw your consent at any time, where I rely on consent

​

To use any of these rights, email victoriacpilates@gmail.com. There's no charge, and I'll reply within one month.

If you're unhappy with how I've handled your information, please contact me first so I can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Links to other websites
This site links to other websites, including Instagram, LinkedIn, the studios I teach at and Momence. I'm not responsible for how those sites handle your information, so please check their privacy policies.

11. Changes to this policy
I may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.

​