BMS WooShoo Privacy Policy
Effective Date: 1st September 2025
Welcome to BMS WooShoo. We take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, sign up for classes, or interact with us via any of our systems (including Go High Level), whether online, in forms, or in person.
- Who We Are
- Controller: BMS WooShoo (“we”, “us”, “our”)
- Website: bmswooshoo.co.uk, hosted by MarketMuscles (for website operations only)
- Information We Collect
We collect several types of personal information from you, including:
- a) Information you provide directly:
- Name(s), address, email address, phone number
- Student / child details: date of birth, class programme, clothing size, special requests
- Payment and billing information (card number, expiry, etc.)
- Emergency contact information, if required
- Marketing preferences or consents if you opt-in
- Any other information you voluntarily submit (e.g. survey answers, feedback)
- b) Information collected automatically:
- IP address, browser type, operating system, device type
- Usage data, including pages visited, time spent, features used
- Booking IDs, appointment data, log-in / access times
- Cookies and tracking data (see section on Cookies below)
- How We Use Your Information
We use your data for the following purposes:
- To manage class bookings, tuition, attendance, and payments
- To communicate essential information: reminders, scheduling changes, billing notices
- To deliver customer service, respond to queries or complaints
- To improve our services: class schedules, facilities, teaching methods
- To conduct analyses or aggregate statistics to improve the user experience
- To send marketing communications (only with your consent)
- For fraud prevention, security, legal compliance
- Sharing Your Information
We do not sell your data. We share your information only when needed, including with:
- Service providers (e.g. payment processors, booking platforms like GHL, email or SMS providers) under contract and with obligations of confidentiality
- Our website host (MarketMuscles) for website operations
- Legal and regulatory authorities if required by law or to protect rights / safety
- Other parties as you direct or consent
- Legal Basis for Processing (UK / GDPR)
We rely on these legal grounds for processing your personal data:
- Contract: to provide the classes, tuition and related services you have requested
- Legitimate interests: improving services, maintaining security, and communicating essential notices
- Consent: for marketing communications and optional services; you can withdraw consent at any time
- Legal obligation: where required by UK or other applicable law
- Data Retention
We will keep your personal data as long as needed for:
- Performing contracts (class bookings, payments)
- Complying with legal obligations
- Resolving disputes or complaints
- Fraud prevention
- Marketing, only while consent is valid
After these purposes are ended, data will be securely deleted or anonymised, unless law requires otherwise.
- Security
We take appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction, including:
- Secure storage systems (GoHighLevel, secure servers)
- Access controls: only authorised personnel can view personal data
- Encryption where possible
- Regular reviews of security practices
- Cookies & Tracking
We use cookies, analytics, and tracking tools on our website to:
- Remember preferences and login sessions
- Analyse website traffic and improve user navigation
- Support site functionality (booking, forms)
You may disable some cookies in your browser settings. Some site features may not work properly if cookies are blocked.
- Your Rights
You have the following rights under applicable data protection law:
- Access: see what personal data we hold on you
- Correction: request changes or corrections to your data
- Deletion: request your data be erased, subject to legal / contract obligations
- Restrict processing: in certain circumstances
- Data portability: request your data in a structured, commonly used format
- Withdraw consent: especially for marketing
- Object to certain processing (e.g. direct marketing)
To exercise any of these rights, contact us (details below).
- International Transfers
If we transfer your data outside the UK or EEA, we ensure adequate protections are in place (e.g. standard contractual clauses), so your data remains protected at a similar level.
- Changes to this Policy
We may update this Privacy Policy from time to time. If there are material changes (significant changes in how we process your data, or new purposes), we will notify customers via email or through our website. Otherwise, updated text will appear on our site with the “Effective Date” revised.
- Contact Information
If you have questions or concerns, or wish to exercise your data rights:
BMS WooShoo
Address: 155–157 Merton Road, London, SW18 5EQ
Phone: 0330 300 2525
Email: teambms@bmswooshoo.co.uk