is our legal responsibility to make sure our Customers / Users are aware of the
policy. The General Data Protection Regulation (GDPR) gives individuals more control
and increased visibility over how organisations use their personal identification
1. Who we are
We are That Yoga Place Limited. Privacy is important to us and we go to great lengths to
protect it. This privacy notice details the personal identification data we hold, so we can
provide a high quality service. It explains how we collect, use, maintain and disclose
personal identification information collected from Customers / Users of our That Yoga
Place studio and website and details individuals rights under data protection laws.
Our Data Protection colleague can be contacted regarding questions, requests to
exercise privacy rights or to make a complaint.
Post: That Yoga Place Limited, First floor Suite C Broadway House, 4-6 That Broadway,
Bedford, MK40 2TE.
Telephone: 01234 327522
The Information Commissioner’s Office is the UK supervisory authority for data protection
issues. Their contact details are provided on their website at https://ico.org.uk/
2. Why we hold personal identification data and what we do with it
We collect and use personal identification information for carefully considered legitimate
business purposes. This information is used for the sole purpose of providing a high
quality service, to enable us to contact customers, fulfil their bookings, accept payment
for products and services, for security and for the health and safety of our colleagues and
We may also use personal information for the following reasons:
To improve customer service - personal identification information helps us to respond to
customer service requests and support needs more effectively.
To process transactions: we may use the information Customers provide about
themselves when making a booking, only to provide service to that booking. We do not
share this information with outside parties except to the extent necessary to provide the
To personalise user experience - we may use information in the aggregate to understand
how our Customers / Users as a group use the services and resources provided on our
To improve our website - we continually strive to improve our website offerings based on
the information and feedback we receive.
To administer a content, promotion, survey or other website feature; to send Customers /
Users information they agreed to receive about topics we think will be of interest to them.
To send periodic emails - the email address Customers provide for bookings, will only be
used to send them information and updates pertaining to their booking. It may also be
used to respond to enquiries, and/or other requests or questions. If a Customer / User
decide to opt-in to our mailing list, they will receive emails that may include company
news, updates, related product or service information. If at any time they would like to
unsubscribe from receiving future emails, we can be contacted on the following
3. Where we get personal identification data from
We may collect personal identification information from Customers / Users in a variety of
ways, including, but not limited to, register on the website, place a booking, fill out a form
and in connection with other activities, services, features or resources we make available
at our That Yoga Place studio and on our website. Customers / Users may be asked for,
as appropriate, organisation name, contact name, email address, postal address and
contact number. We do not store debit or credit card information.
Signing in / out at reception at That Yoga Place studio; we ask for the name, contact
number and the purpose of the visit. We use this information for health and safety
purposes, as we need to make sure that we know which third parties are on site in the
event of an emergency e.g. fire evacuation.
On our premises we use CCTV internally and externally to:
1. Ensure the safety of our colleagues and customers and for the prevention and
detection of crime
2. Secure the premises and contents
3. Investigate accidents and claims
4. Investigate potential breaches of That Yoga Place policies
Accident / Incident Documents
In the event of an accident or an incident, we collect information to allow us to
appropriately investigate. We collect information on the nature of the event, organisation
name, contact name, email address, postal address and contact number of the parties
involved, including any witnesses, witness statements and any photographic or CCTV
footage of the incident in order to aid our investigations.
The information is used to investigate the accident or incident to determine the root cause
by our colleagues, to prevent reoccurrence. Information may also be used to make
contact with individuals as a follow up after the event.
Wi-Fi and Website
The That yoga Place Wi-Fi is available on site.
We will collect personal identification information from Customers / Users only if they
voluntarily submit such information to us. Customers / Users can always refuse to supply
personal identification information, however, it may prevent them from engaging in
certain That Yoga Place and website related activities.
NON-PERSONAL IDENTIFICATION INFORMATION
We may collect non-personal identification information about Users whenever they
interact with our website. Non-personal identification information may include the browser
name, the type of computer and technical information about Customers / Users means of
connection to our website, such as the operating system and the Internet service
provider's utilised and other similar information.
WEB BROWSER COOKIES
Our website uses "cookies" to enhance User experience. The User's web browser places
cookies on their hard drive for record-keeping purposes and sometimes to track
alert you when cookies are being sent. If they do so, note that some parts of the website
may not function properly.
4. Who we share information with?
We do not sell, trade, or rent Customer / User personal identification information to
others. We may share anonymous, generic aggregated information not linked to any
personal identification information regarding Customers / Users with our business
partners, trusted affiliates and advertisers for the purposes outlined above. We may use
third party service providers to help us operate our business and the website.
If requested and where it is required or permitted by law, we may provide Information to:
Official bodies, such as government agencies, local authorities, regulators and the police,
who are authorised to request Information where it is necessary for their lawful purposes.
Information may be shared with authorised That Yoga Place colleagues and an employer
(if applicable). We may be obliged to share information with Police, Government
Agencies and Regulators.
Where necessary we share footage and images from CCTV with the police, local
authorities and government agencies for the prevention and detection of crime.
Where requested by a law firm or insurance company acting on behalf of an individual,
we may disclose CCTV footage or images for use by them as evidence in pursuit of
claims, for example, injury or damage to a vehicle.
Accident/ Incident Documents
Information may be shared with authorised That Yoga Place colleagues to allow for
appropriate escalation, tracking and resolution.
5. How long we store personal identification information
Where personal identification information has been provided, we will keep the data for up
to 6 months, from the last activity or booking (whichever is greater). Visitor Logs are
retained on site for 6 months. CCTV footage is held on our system for 30 days. Accident
/ Incident Documents are retained on site for 12 months. The personal identification
information is then securely deleted.
Where necessary for authorised purposes, copies of CCTV footage may be kept for as
long as is necessary to fulfil the applicable purpose e.g. investigation of a suspected
crime or accident and any related legal or regulatory action. These copies will be securely
destroyed when the purpose has been fulfilled.
We do need to keep some anonymous information for longer, such as Customer / User
activity, so we can analyse it to identify trends and changes in service requirements. We
remove all names, contact details and any other information that identifies individuals, so
it is all just anonymous numbers and data.
6. How we protect personal identification information
We use security measures, including physical, administrative and technical safeguards to
protect the confidentiality of Personal Identification Information. These measures may
include encryption, access controls, policies and procedures to help protect your
We adopt appropriate data collection, storage and processing practices and security
measures to protect against unauthorised access, alteration, disclosure or destruction of
your personal information, username, password, transaction information and data stored
on our website.
Sensitive and private data exchange between the website and its Users happens over a
SSL secured communication channel and is encrypted.
Visitor Logs and Accident / Incident Documents are retained in hardcopy and are stored
in a secure filing cabinet on site with restricted colleague access. CCTV footage is stored
digitally with restricted colleague access and is password protected.
7. Your rights and how to contact us
Individuals have the right to:
1. Be informed - understanding what data is held and what is done with
2. Access - being able to request a copy of the data held
3. Rectification – being able to have inaccurate data corrected
4. Erasure - being able to ask to delete / destroy the data held
5. Restrict processing - being able to limit the amount or type of data used
6. Data portability - requesting to move the data electronically for personal use or to
7. Object - being able to stop the use of the data
website, please contact us by one of the following methods:
Post: That Yoga Place Limited, First floor Suite C Broadway House, 4-6 That Broadway,
Bedford, MK40 2TE
Telephone: 01234 327552
If you are not happy with the way your personal identification data is held or processed,
please contact us by email: firstname.lastname@example.org or by
post: That Yoga Place Limited, First floor Suite C Broadway House, 4-6 That Broadway,
Bedford, MK40 2TE
You can complain to the Information Commissioners Office (ICO), the UK supervisory
authority for data protection issues. ICO contact details are provided on their
We may update or amend this privacy notice from time to time to comply with the law or
meet changing business requirements. Any changes to this policy will be posted on this
We encourage Customers / Users to frequently check this page for any changes, to stay
informed about how we are helping to protect the personal information we collect.
agree to this policy, please do not use our website.
Your continued use of the website following the posting of changes to this policy will be
deemed your acceptance of those changes
This version was last updated on 16th December 2019