Privacy Policy

Introduction

Yukti Limited ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our movement and wellness services.

We are registered in England and Wales (Company Number: 15221209) with our registered office at 1 Batten House, The Drive, London, England, E17 3BX.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the provision of our services.

Legal Basis for Processing

We process your personal data in accordance with:

UK General Data Protection Regulation (UK GDPR)
Data Protection Act 2018
Other relevant privacy and data protection legislation

What Information We Collect

Personal Information

Name, email address, phone number, postal address
Age/date of birth (for age verification and appropriate class selection)
Emergency contact details
Payment and billing information
Booking and attendance records

Health and Fitness Information

When you book our movement and wellness classes, we collect:

Current fitness levels and physical capabilities
Medical conditions that may affect participation
Injuries, physical limitations, or disabilities
Pregnancy status (for class modifications)
Medications that may impact physical performance
Any other health information you choose to share for safety purposes

Technical Information

Website usage data through Google Analytics (anonymized)
Cookie preferences and tracking data
Email engagement statistics (opens, clicks)
Device and browser information for service delivery

How We Use Your Information

Service Delivery

Class registration and booking management
Providing appropriate modifications based on your fitness level and health needs
Contacting you about class changes, cancellations, or important updates
Processing payments and maintaining financial records
Ensuring your safety during physical activities

Health and Safety

Assessing suitability for specific classes and activities
Providing appropriate exercise modifications
Emergency medical situations where your safety is at risk
Insurance claims related to incidents during classes

Communication and Marketing

Sending service-related communications (booking confirmations, receipts, class reminders)
Newsletter and marketing communications (only with your explicit consent)
Feedback requests and satisfaction surveys
Updates about new classes and services

Legal and Administrative

Compliance with legal obligations
Professional insurance requirements
Maintaining attendance records as required by professional bodies
Resolving disputes or complaints

Legal Basis for Processing Different Types of Data

Contract Performance: Basic personal and payment information for service delivery
Legitimate Interests: Safety monitoring, service improvement, fraud prevention
Vital Interests: Emergency health situations
Consent: Marketing communications, non-essential cookies, additional health information
Legal Obligation: Insurance records, professional body requirements

Who We Share Your Information With

Service Providers

Wix: Website hosting and booking system management
Payment Processors: Secure payment handling (we don't store full payment details)
Email Marketing Platforms: Newsletter distribution (only with your consent)
Google Analytics: Website performance analysis (anonymized data only)

Venue Partners

Corporate Locations: Basic contact information for class delivery at your workplace
Community Centers and Rented Spaces: Essential contact details for venue access
Outdoor Venue Providers: Contact information for location coordination

Professional and Legal Requirements

Insurance Providers: In case of claims related to class participation
Healthcare Professionals: In medical emergencies (with your consent where possible)
Legal Authorities: When required by law or to protect safety
Professional Bodies: For regulatory compliance where necessary

Data Sharing Safeguards

We only share the minimum information necessary and ensure all recipients:

Have appropriate data protection measures in place
Are bound by confidentiality agreements
Process data only for specified purposes
Comply with UK GDPR requirements

Children, Young People and Vulnerable Adults

We are committed to safeguarding children, young people, and vulnerable adults.

Age Requirements

Under 16: Parent or guardian consent required before providing any personal information, plus signature on documentation
16-17 years: Parent or guardian consent required for participation
Under 16 in classes: Must be accompanied by parent/guardian unless specifically arranged otherwise

Vulnerable Adults

When an adult has given another person permission to act on their behalf (such as a carer), we require:

Consent from the authorized person for data processing
Proof of permission to act on behalf of the individual
Proper identification verification

Data Retention

We retain your personal information for the following periods:

Active Participants

Basic personal data: While you remain an active client plus 2 years
Health and fitness data: Duration of client relationship plus 3 years
Payment records: 7 years for tax and accounting purposes
Marketing preferences: Until you withdraw consent

Inactive Participants

Contact information: 2 years from last interaction
Health data: 3 years from last class attendance
Correspondence: 2 years unless legal action is pending

Legal Requirements

Some data may be retained longer if required by law, insurance policies, or professional body regulations.

Your Rights

Under UK GDPR, you have the following rights:

Access and Portability

Request a copy of personal information we hold about you
Receive your data in a portable format

Correction and Completion

Correct any inaccuracies in your personal information
Complete any incomplete data

Deletion ("Right to be Forgotten")

Request deletion of your personal data (subject to legal and safety obligations)
We will destroy all personal information in our files upon valid request

Restriction and Objection

Restrict processing of your data in certain circumstances
Object to processing based on legitimate interests
Opt out of marketing communications at any time

Withdraw Consent

Withdraw consent for processing where consent is the legal basis
Note: This may affect our ability to provide certain services

Marketing and Communications

Email Communications

Service Communications: Booking confirmations, class updates, safety notices (essential for service delivery)
Marketing Communications: Newsletters, special offers, new class announcements (requires your consent)

Opting Out

You can opt out of different types of communications:

Use the 'unsubscribe' link in any marketing email
Update your account preferences for service notifications
Contact us directly to modify your communication preferences
Note: Opting out of service communications may affect our ability to deliver services safely

Email Tracking

We may use tracking codes to identify:

Which emails you have opened
Which links you have clicked
This helps us improve our communications and tailor future messages

Website and Cookies

Google Analytics

We use Google Analytics to understand how visitors use our website:

Tracks anonymous usage statistics
Monitors which pages are visited and for how long
Helps us improve website functionality
Does not collect personally identifiable information

Cookie Usage

We use cookies only when necessary for:

Website functionality and security
Remembering your preferences
Analytics (with anonymized data)
We do not use cookies for advertising or tracking without your consent

Data Security

Technical Safeguards

Secure data storage with encryption
Regular security updates and monitoring
Restricted access to personal information
Secure transmission of sensitive data

Organizational Measures

Staff training on data protection
Regular review of data processing activities
Incident response procedures
Data protection impact assessments where required

External Providers

All third-party processors must:

Comply with UK GDPR requirements
Maintain appropriate security measures
Sign data processing agreements
Undergo regular security assessments

International Transfers

We primarily process data within the UK. If we need to transfer data internationally, we ensure:

Adequate protection mechanisms are in place
Appropriate safeguards under UK GDPR
Your explicit consent where required

Data Breaches

In the unlikely event of a data breach:

We will assess the risk to your rights and freedoms
Report to the Information Commissioner's Office within 72 hours if required
Notify affected individuals if there is a high risk
Take immediate steps to contain and remedy the breach

Professional Confidentiality

As wellness service providers, we maintain professional confidentiality regarding:

Your health and fitness information
Personal circumstances discussed during classes
Any sensitive information shared in confidence

This confidentiality may only be breached:

With your explicit consent
In emergency situations affecting your safety
When required by law
For safeguarding vulnerable individuals

External Links

Our website may contain links to other websites. We are not responsible for the privacy practices of external websites. This Privacy Policy applies only to personal data collected by Yukti Limited.

Complaints and Concerns

If you have concerns about how we handle your personal data:

Contact us directly: contact@yukti.health
Write to us: 1 Batten House, The Drive, London, England, E17 3BX
Contact the Information Commissioner's Office: If we cannot resolve your concern satisfactorily

Updates to This Policy

We may update this Privacy Policy periodically to reflect:

Changes in our services or data processing
Updates to data protection laws
Improvements to our privacy practices

We will notify you of significant changes and provide opportunity to review updated terms.

Contact Information

Data Protection Queries: contact@yukti.health

Postal Address: Yukti Limited
1 Batten House, The Drive
London, England, E17 3BX

For Urgent Data Protection Matters: Please email with "URGENT - Data Protection Query" in the subject line.