The Yoga Loft
Privacy Policy
Last updated 27 July 2026
This explains what personal data The Yoga Loft collects when you book a class, float or sauna session, why we collect it, who we share it with, and what rights you have over it.
Who we are
The Yoga Loft is the data controller for the information described in this policy.
Entrance via 72 Eccleston Street, First Floor, 4–8 Warrington Road, Prescot, Merseyside L34 5QX · 0151 430 0088 · info@theyogaloft.co.uk
[VERIFY] Company registration number and ICO registration reference to be added here once confirmed.
What we collect
Only what's needed to take a booking, reach you if a class is cancelled, and keep our registration and waiver records in order.
| When | What |
|---|---|
| Booking a class | Your name, email address and phone number |
| Paying online | Your email (from Stripe) and payment confirmation — we never see or store your card details |
| Buying a pass or gift card | Name, email, what you bought, and how many credits remain |
| Checking in at the studio | Your name, email and attendance record, visible to staff on duty |
| Completing the student registration & waiver form (before your first class) | Name, date of birth, address, phone, email, emergency contact details, any medical/physical conditions you tell us about, your photo/video consent choice, and your typed signature — seen only by your teacher(s) |
| Completing the floatation pod waiver (before your first float session) | Name, email, phone, age confirmation (and a parent/guardian's name if you're 16-17), emergency contact details, and your typed signature |
| Browsing the shop | Your basket is stored only in your own browser — it's never sent to us |
Why we use it
- To provide the service you've asked for — confirming your booking, applying pass credits, sending a reminder before class.
- To keep accounting and payment records we're legally required to hold.
- To ask how your class went and invite a review afterwards — see Marketing emails below.
Who we share it with
We use a small number of specialist providers to run the booking system. None of them can use your data for their own purposes — they process it only to provide their service to us.
| Provider | What for |
|---|---|
| Stripe | Taking payment securely — they handle your card details directly, we never see them |
| Supabase | Storing booking and customer records in our database |
| Resend | Sending booking confirmations and reminder emails |
| Vercel | Hosting this website |
How long we keep it
We keep booking and payment records for 6 years after your last visit, in line with standard UK accounting record-keeping requirements. If you haven't booked with us in that time, your record is deleted.
[VERIFY] This is a sensible working default, not a figure confirmed by an accountant — worth a quick check before relying on it.
Cookies
This site doesn't use advertising or analytics cookies of any kind. The only cookie set is a login session for staff using the studio's admin tool, which is strictly necessary for that tool to work and isn't used to track visitors.
Marketing emails
After a class, we send one follow-up email asking how it went and inviting a Google review. We only send this to people who've booked with us, which UK law allows without separate opt-in (the "existing customer" exemption) — but you're free to say no.
Don't want that email? Let us know at info@theyogaloft.co.uk and we'll make sure you don't get another one.
Your rights
Under UK GDPR, you can ask us to:
To use any of these, email info@theyogaloft.co.uk. If you're not happy with our response, you can complain to the Information Commissioner's Office.
Keeping your data secure
Your booking and customer records are only ever accessible to our booking system's server-side code, never directly from a browser. Card payments are handled entirely by Stripe, so your card details never reach our servers at all.
Changes to this policy
If this policy changes, we'll update the date at the top of the page. Significant changes will be flagged on the booking site.