Privacy & Cookies Policy

Effective as of: 04/12/2025

Lana Reformer (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal information in a fair, lawful and transparent manner. This Privacy & Cookies Policy explains how we collect, use, store and protect your data when you visit our website, book classes, or use our services.

This policy applies to information collected through:

  • Our website (hosted on Squarespace)

  • Our booking system (Momence)

  • Online forms and enquiries

  • Newsletter subscriptions

  • Studio attendance

  • CCTV at our premises

We comply with the UK GDPR and Data Protection Act 2018.

Our website: www.lanareformer.co.uk

Contact email: info@lanareformer.co.uk

We act as the data controller for the personal data processed.

1. Information We Collect Directly From You

You may give us personal information when you:

  • Contact us via forms or email

  • Book a class

  • Create a Momence account

  • Subscribe to our newsletter

  • Join a waitlist

  • Purchase credits or memberships

  • Complete a waiver

  • Provide health-related information required for safe participation

This includes:

  • Name

  • Email address

  • Phone number

  • Billing address (for purchases)

  • Emergency contact information

  • Class bookings & attendance

  • Membership details (start, freeze, cancel)

  • Health information (injuries, pregnancy, relevant medical issues)

  • Any messages or notes you send us

You must be 16 or older to create an account or attend classes.

2. Information Collected Automatically (Squarespace)

Our Squarespace website collects technical data such as:

  • IP address

  • Browser type and device information

  • Pages visited

  • Clicks, scrolling and interactions

  • Traffic source

  • Time stamps

  • Pages visited before arriving on our site

Squarespace stores this information to operate, protect and improve the website. They may process this data in a de-personalised or aggregated form.

3. Cookies & Similar Technologies

Our website uses cookies and similar technologies. Cookies may collect:

  • Browser, network and device information

  • Pages visited and interactions

  • Shopping cart details (if ecommerce is enabled)

  • Preferences you set on the site

Types of cookies used:

  • Strictly necessary cookies: Required to securely operate the website and cannot be disabled.

  • Analytics & performance cookies: Used to understand visitor behaviour and website performance. These cookies are only used if you acknowledge our cookie banner.

  • Functional cookies: Help the site remember your preferences.

  • Marketing cookies (if present): Used only if third-party tools are enabled (e.g., social media embeds).

More information on Squarespace cookies is available via their help pages (“The cookies Squarespace uses”). You can disable cookies through your browser settings at any time.

4. Booking & Membership Information (Momence)

When you book classes or purchase memberships via Momence, they collect and process:

  • Account details

  • Class bookings

  • Attendance history

  • Membership type & renewals

  • Payment confirmations (we do not store full card details)

Momence processes this information under its own privacy practices as a data processor. Momence processes your booking, membership and attendance data on our behalf and in accordance with our instructions. Lana Reformer remains the Data Controller for all personal data collected through Momence. We ensure appropriate data protection agreements are in place with Momence so that your information is processed securely and lawfully.

5. Health Information

To ensure safe participation, we collect:

  • Injuries

  • Medical conditions relevant to exercise

  • Pregnancy status

  • Any information required to support safe modifications

You must keep this information accurate and up to date. This information is used only for safety and duty-of-care purposes.

6. Payments & Checkout

Payments are processed securely by third-party providers (such as Stripe). We never store full card details. If enabled on your website, Google Places API may auto-complete address fields during checkout.

7. Marketing & Communications

We may send you:

  • Class confirmations and operational messages

  • Waitlist notifications

  • Membership reminders

  • Marketing emails (only with your consent or lawful basis)

You can unsubscribe from marketing emails at any time. Operational messages cannot be unsubscribed from.

8. Photography & Filming

We may capture general studio ambience for marketing. If you are identifiable, we will always request your explicit consent before using any images or video of you. You may decline without any impact on your participation.

9. CCTV

We use CCTV at our studio for safety, security and crime prevention. CCTV may capture your image when you attend the premises. The lawful basis for this processing is our legitimate interest in protecting clients, staff, property and facilities. Footage is stored securely, accessible only to authorised personnel, and retained for a limited period unless required for investigating an incident, for insurance purposes, or to comply with a lawful request from authorities. CCTV footage is not used for marketing or performance monitoring.

10. How We Use Your Data

We use your information to:

  • Provide and manage bookings

  • Manage memberships

  • Respond to enquiries

  • Maintain class attendance records

  • Deliver safe exercise instruction

  • Analyse website traffic and performance

  • Send service updates

  • Comply with legal obligations

  • Maintain security (including CCTV)

We do not sell your data.

11. Legal Bases for Processing

We rely on:

  • Performance of contract – bookings, memberships, payments

  • Legitimate interests – studio security, service improvement, analytics

  • Consent – marketing, photography, health information provided voluntarily

  • Legal obligation – accounting, tax and regulatory requirements

  • Vital interests – emergencies

12. Sharing Your Information

We may share limited data with:

  • Squarespace (website hosting + analytics)

  • Momence (bookings + memberships)

  • Payment processors (e.g. Stripe)

  • Email marketing tools (e.g., Mailchimp)

  • IT and website support providers

  • Professional advisers (accountants, etc.)

  • Authorities if required by law

All processors must keep your data secure and follow our instructions.

13. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or disclosure. These measures include secure systems provided by third-party processors such as Momence, Squarespace and Stripe; limiting access to personal data to staff and contractors who need it for legitimate business purposes; and ensuring those individuals understand their data protection responsibilities.

Although we take reasonable steps to protect your information, no online platform can guarantee complete security. You are responsible for keeping your account password and login details confidential and notifying us promptly if you suspect any unauthorised access.

14. International Transfers

Some service providers (e.g., Squarespace, Momence) may store or process data outside the UK/EEA. Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are used.

15. Data Retention

We retain:

  • Booking & membership data: up to 6 years

  • Contact forms: up to 12 months

  • CCTV footage: short-term retention unless needed for an incident

  • Marketing data: until you unsubscribe

  • Health notes: as long as necessary to ensure safety

After retention periods end, data is securely deleted or anonymised.

16. Your Rights

Under UK GDPR, you have the right to:

  • Access your data

  • Correct inaccurate information

  • Request erasure

  • Restrict processing

  • Object to processing

  • Withdraw consent

  • Data portability

To exercise your rights, contact: info@lanareformer.co.uk or 155 High Road, E18 2PA

You can also complain to the Information Commissioner’s Office (ICO).

17. Updates to This Policy

We may update this policy from time to time. The latest version will always be available on this page.