Privacy Policy – YorForm

Last updated: 08/05/2025
Website: www.yorform.co.uk
Services: Yoga, Pilates, Physiotherapy, Acupuncture
Booking System: Acuity Scheduling

1. Who We Are

YorForm is your go-to for movement, strength, and healing — offering Yoga, Pilates, and physiotherapy. We operate in the UK and are committed to safeguarding your personal data.

2. What Data We Collect

  • Booking details: Name, contact information, appointment data (via Acuity).

  • Health info: Medical or physical information shared during consultations or classes.

  • Usage data: How you interact with the site (cookies, if applicable).

3. How We Use Your Data

  • To manage bookings and appointments

  • To tailor sessions to your needs

  • To send updates, confirmations, or relevant service information

  • For record-keeping and compliance

4. How We Store Your Data

Your data is securely stored in:

  • Acuity Scheduling (password-protected, encrypted platform)

  • Google Drive with password protection and limited access

We do not sell or share your information with third parties for marketing purposes.

5. Your Rights

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Withdraw consent at any time

  • Complain to the ICO if you’re unhappy with how we handle your data

6. Cookies

Our website may use cookies to improve your browsing experience. You can disable them in your browser settings.

7. Contact

Questions? Contact us at yorform@outlook.com

GDPR Notice – YorForm

In line with the General Data Protection Regulation (GDPR), we provide the following details to users in the UK and EU:

Data Controller

YorForm
Email: yorform@outlook.com
Website: www.yorform.co.uk

Purpose & Legal Basis for Processing

  • Contractual necessity: Managing bookings and delivering services

  • Consent: For collecting health or sensitive info

  • Legitimate interest: Business administration and communication

Data Retention

We keep your data only as long as necessary for service delivery and legal compliance. You may request deletion at any time (unless required for legal reasons).

Data Transfers

Data is stored within platforms (Acuity and Google Drive) that may transfer data outside the UK/EU, but only with GDPR-compliant safeguards (e.g., standard contractual clauses).

Your GDPR Rights

  • Access – See what we hold

  • Rectification – Fix inaccurate data

  • Erasure – Be forgotten (where applicable)

  • Restrict Processing – Limit use of your data

  • Data Portability – Receive your data in a common format

  • Object – To how we use your data

  • Lodge a Complaint – With the ICO (www.ico.org.uk)