Privacy Policy
Greenhaus Studios Ltd
Last updated: 30 October 2026
1. Introduction
At Greenhaus Studios, your privacy matters to us.
We believe that creating a welcoming, supportive environment extends beyond our studio walls. That means being transparent about how we collect, use and protect your personal information.
This Privacy Policy explains how Greenhaus Studios Ltd ("Greenhaus", "we", "us" or "our") collects, processes and protects your personal data when you visit our website, use our booking services, purchase memberships, attend classes or interact with us.
We are committed to handling your personal information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Greenhaus Studios Ltd is a wellness and movement studio based in Bromley, London, offering Reformer Pilates, Mat Pilates, Yoga, Barre and other wellness experiences.
For the purposes of UK data protection law, Greenhaus Studios Ltd is the data controller responsible for the personal information we collect and process in connection with our services.
Business name: Greenhaus Studios Ltd
Studio address: 173–175 Widmore Road, Bromley, BR1 3AX
Website: www.greenhausstudios.co.uk
Email: hello@greenhausstudios.co.uk
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.
3. Information We Collect
To provide you with the best possible experience at Greenhaus, we may collect and process the following categories of personal information.
Personal Information
When you create an account, book a class, purchase a membership or contact us, we may collect:
• Full name
• Email address
• Telephone number
• Date of birth
• Billing address
• Emergency contact information
• Account and login information
Booking and Membership Information
When you book classes or purchase services, we may collect:
• Class bookings and attendance history
• Membership details and subscription information
• Class packages and purchases
• Payment and transaction history
• Booking cancellations and no-shows
• Customer preferences and account activity
Payment Information
When you purchase memberships, classes, packages or products, your payment information is processed through our authorised payment and booking providers.
We may receive information relating to your transaction, including payment status, transaction references and limited payment card details.
We do not intentionally store full payment card numbers or card security codes on our own systems.
Health and Fitness Information
To help us provide a safe and appropriate environment for movement, we may ask you to share relevant health information, including:
• Injuries or physical limitations
• Pregnancy information
• Medical conditions relevant to participation
• Accessibility requirements
• Other information you voluntarily provide that may affect your ability to participate safely
Health information is treated as sensitive personal data and is handled with additional care.
We only collect information that is relevant to your participation in our services.
Where required by law, we will obtain your explicit consent before processing health information, unless another lawful condition applies.
Website and Technical Information
When you visit our website, we may automatically collect certain technical information, including:
• IP address
• Browser type and device information
• Pages visited and time spent on our website
• Website interaction and navigation data
• Cookie information
• General location information derived from your IP address
This information helps us understand how our website is used, maintain its security and improve the online experience.
4. How We Use Your Information
We use your personal information to operate Greenhaus effectively and provide you with a seamless experience.
This includes:
Managing your account and bookings
To create and manage your Greenhaus account, process class reservations, maintain attendance records and administer memberships.
Processing payments
To process purchases, membership subscriptions, refunds and other transactions.
Communicating with you
To send booking confirmations, class reminders, membership updates, schedule changes and important information about our services.
Supporting your experience
To respond to enquiries, manage customer service requests and understand how we can improve our classes and facilities.
Health and safety
To help our instructors understand relevant health considerations and support safe participation in classes.
Marketing and community updates
To share newsletters, studio news, events, special offers and other Greenhaus communications where we have an appropriate lawful basis to do so.
Improving our website and services
To analyse website performance, understand customer preferences and improve the experience we provide.
Legal and regulatory obligations
To comply with applicable laws, maintain appropriate financial records and respond to lawful requests from regulatory authorities.
5. Our Legal Basis for Processing Your Information
Under UK GDPR, we must have a valid legal basis for collecting and processing your personal information.
Depending on the circumstances, we rely on the following legal grounds:
Contractual necessity
Where processing your information is necessary to provide services you have requested, including class bookings, memberships and purchases.
Legal obligations
Where we are required to process or retain information to comply with applicable laws, including financial, tax and regulatory requirements.
Legitimate interests
Where processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, maintaining security and managing customer relationships, provided these interests do not override your rights and freedoms.
Consent
Where you have given us permission to process your information for a particular purpose, such as certain marketing communications or the processing of sensitive health information.
Where we rely on consent, you can withdraw it at any time.
For health information and other special category data, we also identify an additional lawful condition under Article 9 of the UK GDPR before processing it.
6. Booking Platforms and Third-Party Services
To manage our studio operations, we use trusted third-party providers.
These may include:
Mindbody
We use Mindbody to manage class bookings, memberships, customer accounts, attendance records and payments.
When you register for classes or purchase memberships through Mindbody or our Greenhaus app, your information may be processed and stored using Mindbody's systems.
Mindbody processes certain information on our behalf and may also process some information as an independent data controller under its own privacy terms.
You can find more information in Mindbody's Privacy Policy:
https://www.mindbodyonline.com/privacy-policy
ClassPass
Where you book Greenhaus classes through ClassPass, relevant booking and attendance information may be shared between ClassPass and Greenhaus to administer your reservation.
ClassPass also operates under its own privacy policy.
Payment Providers
We work with authorised payment service providers to process payments securely.
These providers process payment information in accordance with applicable data protection and payment security requirements.
Website and Marketing Providers
We may use third-party services to manage our website, send newsletters, analyse website performance and communicate with our community.
These providers may process personal information on our behalf, subject to appropriate contractual and data protection safeguards.
We do not sell your personal information to third parties.
7. Marketing Communications
We love keeping our community connected and may occasionally send you updates about Greenhaus, including:
• New classes and timetable updates
• Studio events and workshops
• Membership offers and promotions
• Community news
• Wellness-related content and newsletters
We only send electronic marketing communications where permitted by applicable data protection and electronic marketing laws.
This may include situations where you have specifically opted in to receive marketing or where an applicable existing-customer marketing exception allows us to contact you.
You can unsubscribe from marketing emails at any time by selecting the unsubscribe link included in our communications or contacting us directly.
Please note that opting out of marketing communications will not prevent you from receiving essential service-related messages, such as booking confirmations, membership information or important studio updates.
8. Cookies and Website Analytics
Our website may use cookies and similar technologies to improve functionality, understand how visitors interact with our website and enhance your browsing experience.
Cookies are small files stored on your device when you visit a website.
We may use the following categories of cookies:
Essential cookies
These help our website function correctly and enable features such as navigation, security and account access.
Analytics cookies
These help us understand website traffic, visitor behaviour and the performance of our website.
Marketing cookies
Where used, these may help us understand the effectiveness of our advertising and deliver relevant promotional content.
We will provide information about the cookies used on our website and obtain consent where required by applicable law.
You can manage your cookie preferences through our website's cookie settings, where available, or through your browser settings.
Some features of our website may not function as intended if certain cookies are disabled.
9. Sharing Your Personal Information
We may share relevant personal information with trusted third parties where necessary to provide our services or operate our business.
This may include:
• Booking and membership management platforms
• Payment processing providers
• Website hosting and technology providers
• Email marketing and communication platforms
• Professional advisers, including accountants and legal representatives
• Regulatory authorities where required by law
We only share information that is reasonably necessary for the relevant purpose.
Where third parties process personal information on our behalf, we require appropriate contractual safeguards to protect your information.
We will not sell or rent your personal information to third parties for their independent marketing purposes.
10. How We Protect Your Information
We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include secure booking systems, restricted access to customer information, appropriate access controls and the use of reputable third-party service providers.
Access to personal information is limited to team members and service providers who require it for legitimate business purposes.
While we take steps to safeguard your information, no system or method of electronic transmission can be guaranteed to be completely secure.
11. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing our services, maintaining business records and meeting legal obligations.
Retention periods depend on the type of information and the reason it was collected.
For example:
* Account and membership information: Retained while your account is active and for an appropriate period afterwards where necessary for legitimate business or legal purposes.
*Financial and transaction records: Generally retained for six years, or longer where required by applicable law.
*Health information: Retained only for as long as necessary for the relevant health and safety purpose, subject to applicable legal requirements.
*Marketing information: Retained until you unsubscribe, withdraw your consent where applicable, or we determine that the information is no longer required.
*Website analytics information: Retained in accordance with our applicable analytics and cookie retention settings.
When personal information is no longer required, we will securely delete or anonymise it.
12. International Data Transfers
Some of the third-party service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure that appropriate safeguards are in place in accordance with UK data protection legislation.
Depending on the destination and circumstances, these safeguards may include UK adequacy regulations, approved contractual protections or other lawful transfer mechanisms.
You can contact us for further information about the safeguards relevant to your personal data.
13. Your Data Protection Rights
Under UK data protection law, you have certain rights regarding your personal information.
Subject to applicable legal conditions and exceptions, these include:
Right of access
You can request a copy of the personal information we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete information.
Right to erasure
You can request that we delete your personal information in certain circumstances.
Right to restrict processing
You can ask us to limit how we use your information in certain circumstances.
Right to data portability
You may request certain personal information in a structured, commonly used and machine-readable format.
Right to object
You can object to certain types of processing, including processing based on legitimate interests.
You have the right to object to the use of your personal information for direct marketing at any time.
Right to withdraw consent
Where we rely on your consent, you may withdraw it at any time.
Withdrawing consent will not affect the lawfulness of processing carried out before your withdrawal.
Rights relating to automated decision-making
You have rights relating to certain decisions made solely through automated processing that produce legal or similarly significant effects.
To exercise any of your rights, please contact us at hello@greenhausstudios.co.uk.
We will respond to requests within the timeframes required by applicable data protection legislation.
14. Children and Young People
Greenhaus classes and memberships are generally available to individuals aged 16 and over.
We do not knowingly collect personal information from children under 16 through our standard booking and membership services.
If we become aware that personal information has been collected from a child in circumstances where this is not permitted, we will take appropriate steps to address the matter.
15. Photography and Social Media
From time to time, we may capture photographs or video content within our studio for marketing, promotional and community purposes.
Where individuals are identifiable, we will ensure that we have an appropriate lawful basis for capturing and using their image.
Where required, we will obtain consent before using identifiable images or recordings for promotional purposes.
If you have concerns about appearing in Greenhaus photography or video content, please speak to a member of our team or contact us at hello@greenhausstudios.co.uk.
We respect your privacy and aim to ensure that everyone feels comfortable within our space.
16. Links to Third-Party Websites
Our website may contain links to external websites, booking platforms or social media services.
These third-party websites operate independently and may have their own privacy policies.
We encourage you to review their policies before providing personal information.
Greenhaus is not responsible for the privacy practices of external websites that we do not control.
17. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our services, business operations or legal requirements.
Any updates will be published on our website, with the revised date displayed at the top of this page.
Where changes are significant, we will take appropriate steps to notify affected individuals.
We encourage you to review this page occasionally to stay informed about how we protect your personal information.
18. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle personal information, please contact us.
Greenhaus Studios Ltd
173–175 Widmore Road
Bromley
BR1 3AX
United Kingdom
Email: hello@greenhausstudios.co.uk
Website: www.greenhausstudios.co.uk
We will do our best to address any concerns promptly and fairly.
If you remain dissatisfied with how we have handled your personal information, you have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
Information Commissioner's Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
We would appreciate the opportunity to address your concerns directly before you contact the ICO.
---
Greenhaus Studios Ltd
Your routine, just greener.