Privacy Policy

RAVE WORKOUT LTD, known as "RAVE", "we", "us", "our", is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile application, and related services (collectively, the "Services") to book and attend instructor-led dance workout classes.

This policy is published in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By accessing or using our Services, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information you provide directly:

• Full name, email address, phone number, and date of birth (for account creation and age verification).
• Payment information processed securely by our third-party payment provider (Stripe). We do not store full card details.
• Profile details you choose to add, such as fitness preferences or emergency contact information.
• Communications you send us, including customer support enquiries and review submissions.

1.2 Information collected automatically:

• Device and usage data, such as IP address, browser type, operating system, and pages visited.
• Booking and attendance records, including classes booked, credits purchased, and cancellation history.
• Cookies and similar tracking technologies (see Section 8 below).

2. Legal Basis for Processing

We process your personal data under the following lawful bases under UK GDPR Article 6:

• Contract: to provide the Services you have requested, including class bookings and credit purchases.
• Legal obligation: to comply with UK tax, accounting, and safety regulations.
• Legitimate interests: to operate, secure, and improve our business, and to communicate with you about our Services.
• Consent: for marketing communications and non-essential cookies, which you may withdraw at any time.

3. How We Use Your Information

We use your personal information to:

• Create and manage your account and process class bookings and credit purchases.
• Process payments and issue receipts via our payment provider.
• Communicate with you about bookings, cancellations, and account updates.
• Send marketing communications where you have opted in (you can unsubscribe at any time).
• Maintain attendance and credit records for operational and accounting purposes.
• Respond to enquiries and provide customer support.
• Maintain the security and integrity of our Services and prevent fraud.
• Comply with legal, tax, and regulatory obligations.

4. Sharing Your Information

We do not sell your personal data. We may share your information with the following categories of recipients where necessary:

• Payment processors: Stripe, to securely process transactions.
• Email and marketing platforms: to send you booking confirmations and, where consented, marketing content.
• Instructors: limited class attendance information so they can manage their sessions.
• Cloud hosting and analytics providers: to operate and maintain our platform.
• Professional advisors and authorities: where required by law, court order, or to protect our legal rights.

All third parties processing personal data on our behalf do so under appropriate contractual safeguards and in compliance with UK data protection law.

5. International Transfers

Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements, Standard Contractual Clauses, or reliance on an adequacy decision by the UK Government.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting obligations. Account and booking data is typically retained for the duration of your relationship with us plus up to seven (7) years for tax and accounting compliance.

7. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data and receive a copy of it.
• Rectify inaccurate or incomplete personal data.
• Erasure of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Restrict or object to the processing of your data.
• Data portability — to receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise these rights, contact us using the details in Section 11. We will respond within one (1) month, as required by UK GDPR.

8. Cookies

We use cookies and similar technologies to operate and improve our Services, remember your preferences, and analyse usage. You can control cookies through your browser settings. Disabling certain cookies may affect functionality. Where cookies require consent, we will seek your consent before placing them.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, access controls, and secure payment processing. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at the details provided on our Contact page. We are the data controller responsible for your personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website with a revised "Last updated" date. Continued use of our Services after changes indicates your acceptance of the updated policy.