Privacy Policy

Zaya Active (“we”, “us”) is the data controller for the personal information described in this policy.

Email: info@zayaactive.com
Phone: 07863 536606
Registered business name and address: [INSERT REGISTERED COMPANY NAME, COMPANY NUMBER AND ADDRESS]

• Booking and account details — name, email, phone number and booking history, collected through our booking provider when you book a class, session or event.
• Health and waiver information — medical conditions, injuries, pregnancy and emergency contact details you choose to share with us so we can keep you safe. This is special category data and we only use it for your safety.
• Order details — items purchased, order value, delivery or collection choice, and delivery address for shop orders.
• Payment details — card payments are processed by Stripe. We never see or store your full card number.
• Enquiries and mailing list — the name, email, phone and message you submit through our contact or mailing list forms.
• Website usage — anonymous page visit records (page visited, referring site, a short-lived random visit ID) so we can understand how the site is used.
• Photography and video — images and footage taken at classes and events, as described in our waiver.

• Contract — to take bookings and payments, fulfil shop orders, and provide the classes, sessions and events you buy.
• Legitimate interests — to run and improve the studio and website, keep records of orders and attendance, prevent fraud, and respond to enquiries.
• Consent — for marketing emails, for the use of your image in promotional material, and for non-essential cookies. You may withdraw consent at any time.
• Explicit consent / vital interests — for health and medical information used to keep you safe during activities and in an emergency.
• Legal obligation — to keep tax, accounting and insurance records.

We share personal information only with service providers who help us run the business, and only as far as they need it: our booking and scheduling providers (Acuity Scheduling and Momence), our payment provider (Stripe), our website and database hosting providers, and our email delivery provider. We may also share information with insurers, professional advisers, or authorities where the law requires it. We never sell your personal information.

Some providers process data outside the UK. Where that happens, transfers are covered by UK adequacy regulations or standard contractual clauses.

Booking, waiver and order records are kept for up to 7 years to meet accounting, insurance and legal requirements. Mailing list details are kept until you unsubscribe. Enquiry messages are kept for up to 2 years. Anonymous website visit records are kept for up to 26 months.

You have the right to access your personal information, to have inaccurate information corrected, to ask us to delete it, to restrict or object to how we use it, to withdraw consent, and to ask for a copy of it in a portable format. To exercise any of these rights, email info@zayaactive.com and we will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Access to our booking, order and enquiry records is restricted to authorised Zaya Active staff and protected by individual accounts. Payment data is handled entirely by Stripe on their secure systems.

Where a class or event is open to under-18s, a parent or guardian must book on the participant’s behalf and sign the waiver for them.

Our use of cookies and similar technologies is explained in our Cookie Policy.

We may update this policy from time to time. The date at the top of this page shows when it was last revised.