This Privacy Policy explains how Redkau (“we”, “us”, “our”) collects, uses, stores and discloses personal data in connection with our services, website, booking systems and communications. We are committed to protecting the privacy and security of your personal information and complying with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

Data Controller: Redkau, Redcow Yard, Knutsford, Cheshire Contact: contact@redkau.com

Personal data we collect: We collect personal data necessary to provide our services, manage bookings, support communications and comply with legal obligations. This may include:

• Identity and contact data: name, date of birth, gender (if provided), postal address, email address, telephone number.

• Health and wellbeing information: medical history, injuries, conditions, medication, GP details, exercise limitations and any other information required to deliver safe and appropriate classes, training and bodywork.

• Booking and membership data: class bookings, membership level, payment status, cancellations, waitlist preferences and attendance records.

• Payment and financial data: payment card information (processed by our payment provider), bank details where required for refunds or direct debits, billing address.

• Communications and marketing preferences: consent choices, contact history, newsletter subscriptions and feedback.

• Technical and usage data: IP address, device and browser information, cookies and analytics generated by visits to our website and use of our online booking system.

• Visual and audio data: photographs or video taken with consent at events, classes or for marketing purposes.

• Other data: any additional information you provide when contacting us or completing forms.

How we collect data: We obtain personal data directly from you when you:

• register or sign up for classes, memberships, consultations, workshops or services;

• complete intake, health or consent forms;

• make payments or update billing information;

• sign up to our newsletter or marketing communications;

• contact us by phone, email, message or in person;

• participate in events, promotions or feedback surveys.

We also collect data automatically through our website and booking system (cookies and analytics), and may receive limited information from third parties such as payment processors, business partners or referees where you have engaged via a third party.

Legal bases for processing: We process personal data on the following lawful bases:

• Contractual necessity: to perform our contract with you (deliver classes, training, bodywork, process payments, manage bookings).

• Legal obligation: to comply with statutory requirements (health and safety, tax and accounting).

• Legitimate interests: for audit, record-keeping, improving our services, preventing fraud and ensuring the security and operation of our systems (where your rights do not override those interests).

• Consent: for marketing communications, photos or videos for promotional use, or processing special categories of health data where explicit consent is required.

Special category data: Health and medical information is treated as special category data. We only process such data where necessary for the provision of healthcare-related services, to comply with legal obligations or where you have given explicit consent. Access to special category data is restricted to authorised staff and specialists who require it to deliver safe services.

How we use your data: We use personal data to:

• provide, manage and personalise classes, sessions, programmes and bodywork;

• assess suitability and manage health and safety requirements;

• process payments, refunds and memberships;

• manage bookings, cancellations and waitlists;

• communicate important service-related information, appointment reminders and changes;

• send marketing, promotions and newsletters where you have consented or where permitted by law;

• comply with legal and regulatory obligations, including accounting and tax records;

• analyse and improve our services, facilities and website;

• protect the studio, staff and clients and prevent fraud.

Disclosure of your data: We may share personal data with:

• service providers and processors: payment processors, booking and membership platforms, IT and hosting providers, email services, analytics providers and professional advisers (e.g. accountants, legal advisers);

• healthcare professionals: where necessary for referrals or collaborative care, and only with your consent where required;

• regulatory bodies and law enforcement: where required by law or to respond to lawful requests;

• prospective buyers or advisers: in connection with a sale, merger or reorganisation of our business, subject to confidentiality and data protection obligations.

Where we share data with third parties we will ensure appropriate safeguards are in place, such as data processing agreements and, where relevant, transfers only to countries with adequate protections.

Marketing: We will only contact you with marketing material if you have consented or if we have a legitimate interest and you have not objected. You can opt out of marketing communications at any time by following unsubscribe links in emails,