​​​

Thrive and Flow

​

This Privacy Policy explains how Thrive and Flow collects, uses and protects personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​​

1. Who We Are

Thrive and Flow provides yoga and wellbeing sessions for children, families, schools and organisations.

​

For the purposes of data protection legislation, Thrive and Flow is the Data Controller of the personal information you provide.

​

Contact:  info@thriveandflow.co.uk

​​

2. Information We Collect

We may collect and process the following information:

​

Parent / Adult Information

• Name

• Email address

• Phone number

• Address (where required for invoicing or booking)

​

Child Information

• Name

• Year group / age

• Medical information relevant to participation

• Emergency contact details

​

Booking Information

• Payment details (processed securely via third-party payment providers)

• Attendance records

​

We only collect information that is necessary to deliver our services safely and effectively.

​

3. How We Use Your Information

Your information may be used to:

• Manage bookings and payments

• Communicate regarding sessions and updates

• Ensure the safety and wellbeing of participants

• Meet legal, safeguarding and insurance requirements

• Maintain accurate records

​

We do not sell, rent or share personal data for marketing purposes.

 

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Contractual obligation (to deliver booked services)

• Legal obligation (safeguarding, insurance, regulatory requirements)

• Legitimate interest (safe management of sessions)

• Consent (where required, for example photography)

 

5. Data Storage & Security

Personal information is stored securely and accessed only by Thrive and Flow where necessary.

Reasonable steps are taken to protect data against unauthorised access, loss or misuse.

Data is retained only for as long as necessary for operational, legal or insurance purposes.

 

6. Photography & Media

Photographs or recordings will only be taken with explicit written consent.
Consent may be withdrawn at any time.

 

7. Your Rights

Under UK data protection law, you have the right to:

• Request access to your personal data

• Request correction of inaccurate data

• Request erasure of data (where legally permissible)

• Object to processing in certain circumstances

• Withdraw consent at any time (where processing is based on consent)

Requests should be made in writing to:
info@thriveandflow.co.uk

 

8. Cookies & Website Data

If using the Thrive and Flow website, basic website analytics and cookies may collect anonymised data to improve user experience.

You may manage cookie preferences through your browser settings.

 

9. Changes to This Policy

Thrive and Flow reserves the right to update this policy as necessary. The most recent version will always be available on the website.