Privacy notice.

1. Who we are
2. What we collect
3. How we use it, and why
4. Your health information
5. Marketing emails
6. Cookies and analytics
7. Who we share it with
8. Where your data is stored
9. How long we keep it
10. Children
11. Your rights
12. Keeping it safe
13. Changes to this notice

Who we are

Alborz Reform is run by Alborz Reform Ltd, 312 Worple Road, Raynes Park, London SW20 8QU. We decide how your personal information is used, which makes us its “controller” under UK data protection law.

If you have a question about your information or want to use any of your rights, email theteam@alborzreform.com or call 020 3827 4116.

One account for both studios. Alborz Reform and our sister studio, Alborz Fitness, use the same booking system. If you create an account with either studio, the same account signs you in at both, and the team at each studio can see the details on it.

What we collect

We collect information you give us, and some that is created as you use our studio and website.

• Account details: your name, email address, phone number, date of birth, an emergency contact number, your address if you give it to us, and your login details.
• Health information: your answers to our health questionnaire before your first class. See your health information below.
• Your membership agreement: the terms you agree to when you join, and the signature you give to accept them.
• Bookings and attendance: the classes you book, cancel, join a waitlist for or attend, and when you check in.
• Payments: what you have bought and paid, and your billing history. Card payments are handled by Stripe. We never see or store your full card number.
• Your children's details: if you book classes for a child, their name and date of birth. See children below.
• Messages and notes: messages you send us by email, WhatsApp or our website, and notes our team keeps about your membership (for example, that you asked for a pause).
• Email preferences: which kinds of marketing email you have agreed to receive, and a record of the emails we have sent you.
• Website use: if you accept analytics cookies, how you use our website. See cookies and analytics.

How we use it, and why

The law requires us to have a reason, called a lawful basis, for each way we use your information. These are ours.

We do not sell your information, and we do not use it to make automated decisions about you.

Your health information

Before your first class we ask some health questions, so our team knows about any injuries or conditions and can adapt your training safely. Health information is a special category of personal data, so we only use it with your explicit consent and only for your safety and training.

Only our team can see your answers. You can ask us to update them at any time. If you withdraw your consent, we may not be able to let you train until we can be sure it is safe for you to do so.

Marketing emails

We only send marketing emails and newsletters if you have said yes to them, and you choose each kind separately. You can change your mind at any time using the unsubscribe link in any email or your account settings. Emails about your bookings, payments and account are part of your membership, so they carry on while you have an account.

Cookies and analytics

We use a small number of cookies and similar technologies.

Strictly necessary

• Sign-in cookies (alborz_at and alborz_rt) keep you signed in. The site cannot work without them, so they do not need your consent.
• Your cookie choice is remembered in your browser so we don't ask you again on every page.

Analytics, only if you accept

With your consent, we use Google Analytics to understand how people find and use our website, such as which pages they visit and which buttons they press. Until you accept, Google Analytics sets no cookies and only receives basic, cookieless signals that do not identify you. We never use your information for advertising.

You can change your choice at any time using the Cookies link at the bottom of every page.

Google Maps

Our home page shows a Google map of how to find us. When it loads, Google may collect information in line with its own privacy policy.

Who we share it with

We use trusted suppliers to run our services. They only use your information to provide their service to us, under contracts that protect it.

• Stripe processes card payments and memberships.
• Amazon Web Services hosts our website and booking system, and sends our emails.
• Google provides website analytics (only with your consent) and the map on our home page.
• WhatsApp handles any messages you choose to send us through it.
• Alborz Fitness, our sister studio, shares the same booking system, as explained above.

We may also share information if the law requires it, or to protect someone's safety in an emergency.

Where your data is stored

Our booking system and its database are hosted by Amazon Web Services in London. Some of our suppliers, such as Stripe and Google, may process information outside the UK. When they do, they use safeguards recognised under UK law, such as the UK's adequacy regulations or approved contract terms.

How long we keep it

We keep your information only for as long as we need it.

• Your account, bookings and class history are kept while your account is open.
• Payment and financial records are kept for six years after the end of the financial year they relate to, because tax law requires it.
• If you ask us to close your account, we delete or anonymise your information, apart from anything we must keep by law.

Children

Children don't have their own accounts with us. A parent or guardian adds a child to their own account and books for them, so we only collect what we need about a child (their name and date of birth, and any health information their parent or guardian gives us) from that parent or guardian.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that is wrong or incomplete
• ask us to delete your information
• ask us to limit how we use it, or object to how we use it
• ask for a copy of information you gave us in a format you can take elsewhere
• withdraw your consent at any time, where we rely on it

To use any of these rights, email theteam@alborzreform.com. We will reply within one month. There is usually no charge.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Keeping it safe

We protect your information with appropriate technical and organisational measures. Our website uses an encrypted connection, access to our booking system is limited to the team members who need it, and card details are handled by Stripe rather than stored by us.

Changes to this notice

We will update this notice when the way we use your information changes, and show the date of the latest version at the top of this page. If a change affects you significantly, we will let you know by email.