Privacy Policy

Data Controller

Lucy Healy, trading as Burn Mat Studio, is the data controller for personal data collected through this website. Studio address: TS16 0TA. Contact: hello@burnmatstudio.co.uk.

What We Collect

• Account information: name, email address, and password when you create an account.
• Date of birth: collected to verify you are 18 or over, and to send you a complimentary birthday class each year.
• Booking data: class selections, dates, and attendance history.
• Payment data: processed securely by Stripe. We do not store card details.
• Session data: authentication cookies to keep you logged in.

Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Contract: processing your account, bookings, and payments is necessary to fulfil the service you have signed up for.
• Legitimate interests: sending you transactional emails (confirmations, cancellations, receipts) and maintaining the security of our systems.
• Consent: any future marketing communications will only be sent with your explicit opt-in consent, which you may withdraw at any time.

How We Use Your Data

• To manage your bookings and class pack credits.
• To send booking confirmations, cancellations, and pack receipts via email.
• To communicate important studio updates.

Third Parties

We share data with the following services, only as necessary to operate the studio:

• Stripe — payment processing.
• Supabase — database and authentication hosting.
• Resend — transactional email delivery.
• Vercel — website hosting.

Data Retention

We retain your account and booking data for as long as your account is active. You may request deletion at any time by emailing us.

Your Rights

Under UK GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data. To exercise any of these rights, contact us at hello@burnmatstudio.co.uk.