Privacy Policy
Last updated: 20 August 2026
Stiwdio Glow respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, create an account, book or attend our services, subscribe to our online programmes, contact us or interact with our advertising.
1. Who we are
Stiwdio Glow is owned and operated by Betsan de Renesse in the United Kingdom.
For UK data-protection law, Stiwdio Glow is the “data controller” responsible for deciding how and why your personal information is used.
Website: www.stiwdioglow.co.uk
Email: hello@stiwdioglow.co.uk
Correspondence address: 93-95 Whitchurch Road CF14 3JP
2. Information we collect
Depending on how you interact with us, we may collect:
- Your name, date of birth and contact details
- Your account and login information
- Emergency-contact details
- Booking, attendance, cancellation and purchase history
- Membership, class-pack and subscription information
- Payment and transaction information
- Communications sent by email, telephone, SMS, WhatsApp, social media or through Arketa
- Marketing preferences
- Competition, event or survey responses
- Website usage, device, IP-address and cookie information
- Photographs or videos where appropriate permission has been obtained
- Health, pregnancy, postnatal, injury or accessibility information that you choose or are required to provide so we can deliver services safely
- Information relating to a child where a parent or guardian books a suitable class, course or service on their behalf
Payment-card details are normally collected and processed securely by our booking and payment providers. Stiwdio Glow does not ordinarily receive or retain your complete card details.
3. Health and pregnancy information
Some of the information we collect may be classed as “special category data” under UK data-protection law. This can include information about:
- Pregnancy and postnatal recovery
- Injuries, pain or medical conditions
- Physical limitations or accessibility requirements
- Pelvic-health or other relevant health concerns
- Information contained in health questionnaires and participant waivers
We collect this information only where it is relevant to your participation, safety or the appropriate delivery of our services.
We normally process this information with your explicit consent. In limited circumstances, we may also process it where necessary to protect your vital interests or to establish, exercise or defend legal claims.
You may withdraw your consent to our use of health information by contacting us. However, if we cannot hold information necessary for your safety, we may be unable to provide certain classes or services.
Our classes and programmes are not a substitute for individual medical advice. We may recommend that you obtain approval from an appropriate healthcare professional before taking part.
4. How we use your information
We may use your information to:
- Create and manage your client account
- Process bookings, memberships, subscriptions and payments
- Deliver in-studio classes, courses, events and online programmes
- Manage cancellations, refunds, credits, waiting lists and account enquiries
- Communicate important service or timetable information
- Make appropriate class adaptations and support safe participation
- Maintain attendance, waiver and incident records
- Respond to enquiries, complaints and requests
- Improve our services, website and client experience
- Send marketing where permitted
- Measure the effectiveness of our website and advertising
- Prevent fraud, misuse and security incidents
- Maintain our financial, tax and business records
- Comply with our legal and regulatory obligations
- Establish, exercise or defend legal claims
We will not sell your personal information.
5. Our lawful bases
Under UK data-protection law, we must have a lawful reason for using your information. Depending on the circumstances, we rely on:
Contract: Where processing is necessary to provide a service you have booked or purchased, administer your membership or take steps at your request before entering into a contract.
Legal obligation: Where we must keep or use information to comply with tax, accounting, safeguarding or other legal requirements.
Legitimate interests: Where reasonably necessary to operate, protect and improve Stiwdio Glow, communicate with clients, prevent fraud, recover sums owed or manage legal claims, provided your rights do not override those interests.
Consent: Where you have actively agreed to a particular use, including certain marketing, optional cookies, photographs or special-category health information.
Vital interests: In exceptional circumstances where processing is necessary to protect someone’s life or physical safety.
6. Bookings and Arketa
We use Arketa to provide services including client accounts, bookings, memberships, subscriptions, communications, on-demand content and payment administration.
When Arketa processes client information on our behalf, Stiwdio Glow acts as the data controller and Arketa acts as a data processor. Arketa may also process certain information for its own purposes as explained in its own privacy policy.
Your information may be stored or processed outside the United Kingdom. Where this happens, appropriate legal safeguards must be used to protect it.
You can read Arketa’s privacy information at:
https://www.arketa.com/legal/privacy-policy
7. Other organisations we may use
We may share relevant information with trusted service providers where necessary, including:
- Arketa and associated booking-platform providers
- Payment processors and financial institutions
- Website-hosting and technical-support providers
- Email, SMS and communications providers
- Google, including Google Analytics and Google Ads
- Meta, including Facebook and Instagram, where its advertising or analytics services are used
- Accountants, insurers and professional advisers
- Debt-recovery or legal-service providers where sums remain lawfully due
- Healthcare professionals or emergency services where necessary and lawful
- Government, regulatory or law-enforcement bodies where legally required
These organisations may act as processors working on our instructions or as separate controllers responsible for their own use of information.
We only provide information that is reasonably necessary for the relevant purpose. We do not intentionally provide clients’ health, pregnancy or injury information to Google or Meta for advertising purposes.
8. Google Ads, analytics and advertising
We may use Google Analytics, Google Ads and similar services to understand how visitors use our website, measure advertising performance and show relevant advertisements.
Subject to your cookie choices, these services may collect information such as:
- Your IP address
- Device and browser information
- Pages visited and actions taken
- Approximate location
- Advertising and cookie identifiers
- Whether a website visit led to an enquiry, booking or purchase
Google may use this information in accordance with its own privacy policy. You can find out more at:
https://policies.google.com/privacy
Where required, advertising and analytics technologies will not be activated unless you have given consent through our cookie controls. You may withdraw or change your choices at any time using the cookie settings available on our website.
9. Cookies
Our website and embedded booking services may use cookies and similar technologies.
Some cookies are strictly necessary for the website, security, account access or booking functions to work. Other cookies may be used for:
- Website analytics
- Remembering preferences
- Measuring advertising performance
- Personalisation
- Embedded third-party services
Where legally required, optional analytics and advertising cookies will only be used after you have given consent. Rejecting optional cookies should be as easy as accepting them.
For further details, please use our website’s cookie settings or refer to any separate cookie information displayed on the website.
10. Email and SMS marketing
We may send news, offers, course launches and event information where:
- You have consented to receive marketing; or
- The law permits us to contact you as an existing customer about our own similar services and you were given an opportunity to opt out.
You can unsubscribe at any time by:
- Selecting the unsubscribe link in a marketing email
- Following any opt-out instructions in an SMS
- Changing your account preferences where available
- Contacting us directly
Opting out of marketing will not prevent us from sending essential booking, payment, membership, safety or service messages.
You have an absolute right to object to the use of your personal information for direct marketing.
11. Photographs and videos
We may occasionally take photographs or videos for promotional, educational or social-media purposes.
Where you are identifiable, we will obtain appropriate permission before using the material unless another lawful basis clearly applies. You can decline to be photographed or filmed without affecting your ability to attend a class.
Where children are involved, permission must be provided by a parent or legal guardian.
You may withdraw consent for future use by contacting us. Withdrawal will not make earlier lawful use invalid, and it may not always be possible to remove material that has already been printed, shared or republished by others.
12. Children’s information
A parent or legal guardian must provide or approve personal information relating to a child unless the child is legally able to provide their own valid consent.
We use children’s information only where necessary to administer and safely deliver an appropriate class, course, event or service. We do not knowingly use children’s information for personalised advertising.
13. How long we retain information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, insurance and safeguarding requirements or deal with disputes and legal claims.
Retention periods vary according to the type of information. For example:
- Financial and transaction records will generally be retained for the period required by UK tax and accounting law
- Account, booking and membership records may be retained while your account is active and for a reasonable period afterwards
- Health questionnaires, waivers and incident records may be retained for safety, insurance and legal-claims purposes
- Marketing information will be retained until you unsubscribe, withdraw consent or the information is no longer required
- Cookie information will be retained according to the duration stated within the relevant cookie or consent tool
We may securely delete or anonymise information when it is no longer required.
14. Security
We take reasonable organisational and technical measures to protect personal information against accidental loss, unauthorised access, alteration, disclosure or destruction.
Access is limited to team members, instructors and service providers who reasonably require the information for their role. They are expected to handle it confidentially and securely.
No online service is completely secure, but we will investigate suspected personal-data breaches and notify affected individuals or the Information Commissioner’s Office where legally required.
15. International transfers
Some of our providers, including Arketa, Google and Meta, may process information outside the United Kingdom.
Where personal information is transferred internationally, we expect the relevant provider to use an approved legal mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or approved contractual safeguards.
16. Your rights
Depending on the circumstances, you may have the right to:
- Ask for a copy of your personal information
- Ask us to correct inaccurate or incomplete information
- Ask us to delete your information
- Ask us to restrict how your information is used
- Object to particular uses, including direct marketing
- Receive certain information in a portable format
- Withdraw consent at any time
- Ask for information about safeguards used for international transfers
- Complain to the Information Commissioner’s Office
These rights are not absolute and may be subject to legal exceptions. We may need to verify your identity before responding.
To exercise your rights, email hello@stiwdioglow.co.uk
You will not normally be charged for making a request. We aim to respond within one month, although the law allows additional time in certain complex circumstances.
17. Complaints
Please contact us first if you have concerns about how we use your information so we have an opportunity to resolve them.
You also have the right to complain to the UK Information Commissioner’s Office:
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
18. Third-party websites
Our website, emails or social-media pages may contain links to external websites. We are not responsible for the privacy practices of those websites. We recommend reading their privacy information before providing personal information.
19. Changes to this policy
We may update this Privacy Policy when our services, technology or legal obligations change.
The latest version will be published on our website with an updated revision date. Where a change is significant, we may also notify clients by email, through Arketa or by another appropriate method.
20. Contact us
For questions, requests or concerns about this Privacy Policy or your personal information, contact:
Stiwdio Glow
Owner: Betsan de Renesse
Email: hello@stiwdioglow.co.uk
Address: 93-95 Whitchurch Road CF143JP
Website: www.stiwdioglow.co.uk



