top of page

Privacy Policy

Effective date: 15/07/2026

 

Name of data controller: Thrive and Belong CIC 

Registered address: Eastern Promise, 90 Causeyside Street Paisley, PA1 1TX

Contact details: info@thriveandbelong.com

 

Thrive and Belong CIC (“we”, “us” or “our”) is committed to protecting and respecting your privacy. This Policy explains how we collect, use, share and protect your personal data when you:

 

Attend our in‑person yoga classes, workshops and events

Sign up for online coaching, join our digital membership or purchase digital programmes

Subscribe to our mailing list

Visit our website or interact with us on social media

 

We act as the “data controller” for all personal data described below, in accordance with the UK GDPR, EU GDPR (where applicable), and other applicable global privacy laws.


1. Data We Collect

 

1.1 Yoga Students and in-person/online coaching clients

 

Identity & contact: name, email address, phone number

Health & safety: relevant medical information (e.g. injuries, conditions), emergency contact details

Experience level: previous yoga experience, goals

How collected: via secure online forms (such as Google Forms) or through our online booking system (Wix)

 

1.2 Email Subscribers & Marketing Contacts

Name & email address

Marketing preferences (e.g. topics of interest, opt‑in consents)

 

1.3 Customers of Digital Products

Name, email address, billing address

Transaction metadata (e.g. purchase date, products bought, amount paid)

 

1.4 Members of ‘Thrive Anywhere'  digital membership (Patreon)

Name, email address, billing address, membership tier

transaction metadata (e.g. purchase date, products bought, amount paid)

 

1.5 Thrive and Belong CIC staff, volunteers and students on placement

Name, address, email address, bank details, tax codes, national identification/insurance numbers and emergency contact information. 

 

1.6 Photos & Testimonials

Images and quotes provided with explicit consent for our marketing materials (website, social media, brochures)

 

2. How We Collect & Store Your Data

 

We host and manage your data using secure third-party platforms. Here is how your data is handled:

  • Wix: Our website and class booking platform are hosted by Wix. Wix collects your identity, contact details, and account preferences to facilitate online event scheduling. Your data may be processed in secure data centres globally, including the US, protected by standard contractual safeguards.

  • Patreon: Membership subscriptions and community interactions are processed via Patreon (US-based). Patreon collects personal information (such as names, email addresses, and membership tiers) to manage your subscription. Patreon acts as an independent controller for certain processing activities (such as account security). For more information, please see the Patreon Privacy Policy.

  • Google Workspace: Student intake forms are hosted on Google Forms; data is stored in Google Drive. Google’s infrastructure may process data within the EEA, UK, and the US under the EU-US & UK-U.S. Data Privacy Frameworks.

  • MailerLite: Our email marketing is run through MailerLite, which is an EU-based provider that stores data in the EU (Ireland, Germany, or the Netherlands) and may transfer data to the US under the EU-US & UK-US Data Privacy Frameworks.

  • Payhip: Digital sales are processed through Payhip (UK-based), which utilises data infrastructure in the UK and EU.

​

Financial Data: We do not collect or store your full payment card details for customer purchases. All payments are handled directly and processed securely by our third-party platforms (Wix, Patreon and Payhip) via their integrated payment processors (such as Stripe or PayPal). We only receive transaction confirmations and basic billing information.

 

3. Who we may share your data with 

 

We do not sell, rent or trade your personal data with third parties for marketing or behavioural advertising purposes. We only share your data with trusted partners necessary to run our business, fulfil our contracts or comply with legal mandates:

  • Our Service Providers (Data Processors): We utilise secure third-party platforms to perform operational tasks on our behalf. These include Wix (website hosting and booking system) MailerLite (email delivery), Google Workspace (cloud storage and forms), Patreon and Payhip (platform management), and Stripe / PayPal (payment processing).

  • Professional Advisers & Contractors: We share relevant staff, contractor, and financial details with our designated accountants (Carr Accounting) for business payroll and financial reporting.

  • Legal & Regulatory Obligations: We share relevant details with statutory tax authorities (such as HMRC in the UK) for regular corporate taxation. Staff and volunteer details are shared with relevant background check organisations (such as Disclosure Scotland) to obtain mandatory safeguarding certificates.

  • Safeguarding & Court Orders: We may share your information with law enforcement or statutory social services if we believe a child or vulnerable adult is at risk in strict accordance with our Safeguarding Policy, or if explicitly required to do so by a legally binding Court Order.

 

4. Legal Bases for Processing

We rely on one or more of the following lawful bases:

  • Contract performance: to fulfil bookings for classes, coaching packages or digital products, to process staff data.

  • Legitimate interests: to manage our relationship with you, improve services, and communicate schedules and updates.

  • Consent: for marketing emails, testimonials/photos, and cookies (when you opt in).

  • Legal obligation: to comply with health & safety record keeping and tax laws.

 

5. International Data Transfers

 

As a business utilising global cloud infrastructure, your personal data may be transferred to, stored or processed in countries outside your home jurisdiction (including the UK, the European Economic Area, and the United States).

We ensure all international transfers benefit from recognised, legally binding safeguards. This includes relying on standard contractual clauses, the UK-U.S. Data Bridge, or the EU-U.S. Data Privacy Framework to guarantee your data receives a strict level of protection wherever it is processed.

 

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, or reporting requirements:

 

Student records (health & emergency contact information): retained for 7 years after your last attendance, in line with statutory insurance and legal requirements for health and fitness professionals.

 

Email subscribers: retained until you unsubscribe or request deletion. If an account is entirely inactive for 2 years, we will contact you to confirm continued interest before deletion.

 

Transactional data (Payhip/Patreon records/Wix booking records): retained for 6 years following the end of the financial year of purchase, as required by UK tax law (HMRC).

 

Photos & testimonials: retained until consent is withdrawn or no longer relevant.

 

7. Your Rights

Under the UK GDPR, you have a range of rights, depending on the legal basis on which we process your personal data. These rights include:

 

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Erase data (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing (including marketing)

  • Withdraw consent at any time

 

Automated decision making is not used.

 

To exercise any right, please email us at info@thriveandbelong.com

 

8. Security Measures

We implement technical and organisational measures to safeguard your data, including:

SSL encryption on our website

Secure Google Workspace configuration (2‑step verification)

Access controls and regular backups

 

9. Cookies & Analytics

Our website uses cookies and Google Analytics to enhance your experience and understand how you interact with our content. You can manage or disable cookies via your browser settings. For full details, see our Cookie Policy.

 

10. Photos & Testimonials Consent

We only use your images or quotes when you have explicitly agreed. You can withdraw consent at any time by contacting us, and we will remove your content promptly.

 

11. Complaints

If you have concerns about our handling of your personal data, please contact us first at info@thriveandbelong.com 

 

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Website: https://ico.org.uk

Helpline: 0303 123 1113

 

12. Updates to This Policy

We may update this policy periodically. Any changes will be published on our website with a revised “Effective date.”

 

Thrive and Belong CIC

Email: info@thriveandbelong.com | Website: www.thriveandbelong.com​

 

Unit 51016, PO Box 26965, Glasgow
United Kingdom

bottom of page