Privacy policy

Privacy Policy

This Privacy Notice explains how uUniverse Limited trading as Sky & Stone | House of Yoga (“Sky & Stone”, “we”, “us” or “our”) collects, uses, stores, shares and protects your personal data.

We are committed to treating your information respectfully and in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations (PECR).

Please read this notice carefully. If you have any questions about how we use your personal data, please contact us using the details below.

1.     WHO IS RESPONSIBLE FOR YOUR DATA?

uUniverse Limited trading as Sky & Stone | House of Yoga is the Data Controller responsible for your personal data.

Address: TBC
Email: hello@skyandstone.co.uk

As a yoga studio, we are dedicated to providing a welcoming, supportive space for practice, movement and wellness for every body, mind and soul.

2.     THE PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data:

·        Account, booking and contact information: Your name, email address, telephone number, postal address, date of birth where required, emergency contact details where provided, account login details, booking history, attendance records and communications with us.

·        Membership and payment information: Your membership type, class passes, payment status, transaction history, billing address and any refunds or credits applied to your account. Card payment details are processed securely by our third-party payment processor. We do not normally store complete card details ourselves.

·        Health and safety information: Relevant health, injury, pregnancy, mobility or wellbeing information that you voluntarily choose to provide, including information in health questionnaires or waivers, where this is necessary to help us provide safer and more appropriate guidance during classes.

·        Website and technical information: Your IP address, device and browser information, pages viewed, referral source, website interactions and cookie-related information. Please see our Section 17 for further details of the cookies and similar technologies we use.

·        Marketing preferences: Your preferences for receiving newsletters, early-access updates, special offers, events and other marketing communications from us.

3.     HOW WE COLLECT YOUR DATA

We usually collect personal data directly from you when you:

  • Register for an account.
  • Join our mailing list or early-access list.
  • Book a class, workshop, event or private session.
  • Purchase a membership, class pass, gift card or product.
  • Complete a health questionnaire, waiver or contact form.
  • Contact us by email, telephone, social media or in person.
  • Visit or use our website.

We may also receive limited information from trusted third-party providers where you choose to use their services to book, pay for, or engage with Sky & Stone.

4.     HOW WE USE YOUR DATA

We use your personal data to:

  • Create and manage your studio account.
  • Process class, workshop, event and private-session bookings.
  • Administer memberships, class passes, gift cards, cancellations, refunds and payments.
  • Communicate booking confirmations, timetable changes, cancellations, safety information and important service updates.
  • Provide customer support and respond to enquiries or complaints.
  • Manage studio operations, record attendance and improve our classes, events and services.
  • Maintain the security of our website, systems, premises and business.
  • Meet legal, regulatory, accounting and tax obligations.
  • Send marketing communications where you have agreed to receive them.
  • Use relevant health information, where you have provided it, to help us support safe participation in classes.

5.     OUR LAWFUL BASES

We will only use your personal data where we have a lawful basis to do so.

·        Contract: We process personal data where it is necessary to perform a contract with you, or to take steps at your request before entering into a contract. This includes setting up your account, processing bookings and payments, administering memberships, and providing classes, workshops and events.

·        Legitimate interests: We process certain personal data where necessary for our legitimate interests, provided that your rights and freedoms do not override those interests. These interests include operating and developing Sky & Stone, responding to enquiries, providing customer support, managing studio operations, protecting our systems and business, preventing fraud, maintaining appropriate records, and improving our services.

·        Legal obligation: We may process your information where necessary to comply with legal, regulatory, tax, accounting or reporting obligations.

·        Consent (marketing): We use your consent for email marketing and certain optional communications. You can withdraw your consent at any time by clicking the “unsubscribe” link in an email or contacting us at hello@skyandstone.co.uk

·        Consent (cookies and similar technologies): We rely on your consent for non‑essential cookies and similar technologies on your device (analytics, functionality and marketing cookies), managed through our cookie banner. You can change or withdraw your choices at any time via the banner or by contacting us.

6.     HEALTH INFORMATION

Health, injury, pregnancy, mobility and wellbeing information may be classed as special category personal data under the UK GDPR.

Where you voluntarily provide this information, we will process it only where necessary to help us provide safer and more appropriate class guidance. Your provision of this information is interpreted as your explicit consent.

You do not have to provide health information. However, if information is necessary for us to understand whether a class can be safely adapted or whether participation may present a risk, we may be unable to provide tailored guidance without it.

Access to health-related information is restricted to those who need it for the relevant purpose, and it will be retained only for as long as necessary.

7.     MARKETING

We would love to keep you informed about Sky & Stone, including studio news, early-access opportunities, classes, workshops, events and special offers.

We will send electronic marketing communications only where you have consented, or where another lawful basis under applicable marketing law permits us to do so.

You can unsubscribe or object to direct marketing at any time by:

  • Clicking the “unsubscribe” link in any marketing email.
  • Updating your preferences through your account, where available.
  • Emailing us at hello@skyandstone.co.uk

You will still receive essential service communications relating to bookings, memberships, payments or changes to scheduled classes.

8.     IF YOU DO NOT PROVIDE INFORMATION

Some information is necessary for us to create your account, process your booking, take payment and provide our services.

If you do not provide the required information, we may be unable to process your booking, administer your membership, provide relevant safety guidance, or otherwise supply the requested service.

9.     WHO WE SHARE YOUR DATA WITH

We do not sell your personal data.

We may share personal data with trusted third parties where necessary for the purposes described in this notice, including:

  • Booking, membership-management and customer-relationship systems.
  • Payment processors and financial-service providers.
  • Website hosting, e-commerce, IT-support and cloud-storage providers.
  • Email marketing and communications platforms.
  • Professional advisers, including accountants, insurers, lawyers and business consultants.
  • HMRC, regulators, law-enforcement bodies, courts or other authorities where required by law.
  • Prospective purchasers, investors or advisers if we sell, transfer, merge or reorganise all or part of our business.

·        Website analytics providers, including Google Analytics (Google LLC), to understand how visitors use our website. Where we use analytics cookies or similar technologies on devices, we do so only with your consent via our cookie banner, or where an exemption under UK law applies.

Our service providers include Shopify and Junocal. Service providers are required to protect your information and may only use it in accordance with our instructions and applicable law.

10.  INTERNATIONAL TRANSFERS

Some of our third-party service providers may process personal data outside the United Kingdom.

Where we transfer personal data outside the UK, we will ensure that appropriate safeguards are in place. These may include an adequacy regulation, the UK Extension to the EU–U.S. Data Privacy Framework where applicable, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

11.  HOW LONG WE RETAIN YOUR DATA

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, insurance and reporting requirements.

Our usual retention periods are:

  • Financial and transaction records: At least 6 years from the end of the relevant accounting period, or longer where legally required.
  • Account, booking and membership records: Up to 3 years after your last visit, booking or membership ends, unless we need to retain them for a longer period for legal, accounting, insurance or dispute-resolution purposes.
  • Health and safety information: Retained only for as long as necessary for the relevant safety purpose and in line with any applicable insurance or legal requirements.
  • Marketing preferences and suppression records: Retained for as long as necessary to honour your marketing preferences and ensure we do not contact you where you have unsubscribed or objected.
  • Website analytics and cookie data: Retained in accordance with our Cookie Policy and relevant provider settings.

We may anonymise data so that it can no longer identify you and use it for statistical, analytical or business-planning purposes.

12.  YOUR RIGHTS

Under the UK GDPR, you may have the following rights in relation to your personal data:

  • Access: To request a copy of the personal data we hold about you.
  • Rectification: To ask us to correct inaccurate or incomplete information.
  • Erasure: To request deletion of your personal data where there is no longer a valid reason for us to retain it.
  • Restriction: To ask us to restrict the processing of your data in certain circumstances.
  • Objection: To object to processing based on our legitimate interests.
  • Data portability: To request that certain information is provided to you or another organisation in a structured, commonly used format.
  • Withdraw consent: To withdraw consent at any time where we rely on consent.
  • Object to direct marketing: You have an absolute right to object to the use of your personal data for direct marketing.

To exercise any of these rights, please contact us at hello@skyandstone.co.uk. We may need to confirm your identity before responding to your request.

13.  COMPLAINTS

If you have concerns about how we use your personal data, please contact us first so that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk/

14.  AUTOMATED DECISION-MAKING

We do not make decisions about you using solely automated processing that would have a legal or similarly significant effect on you.

15.  CCTV

We may use CCTV at Sky & Stone | House of Yoga for security, safety and the prevention or detection of crime. Where CCTV is in use, clear signage will be displayed. CCTV footage will be accessed only where necessary and retained for a limited period, unless required for an investigation, insurance matter or legal claim.

16.  CHILDREN AND YOUNG PEOPLE

If we provide classes or services to children or young people, we may collect the personal data of a parent or legal guardian for booking, consent, emergency-contact and safeguarding purposes. We will explain what information is required at the time of booking.

17.  COOKIES AND SIMILAR TECHNOLOGIES

We group the cookies we use into the following categories:

·        Strictly necessary cookies – These are essential for the website to function (for example, to maintain security, manage load balancing, and remember items in a shopping basket). These cookies do not require your consent.

  • Functionality cookies – These remember choices you make (such as your preferred language or region) to provide enhanced, more personalised features.
  • Booking and studio software – Uses necessary and functional cookies to display class schedules, manage user logins, and handle studio bookings seamlessly.
  • Analytics/performance cookies – These help us understand how visitors use our website (for example, which pages are most popular and how visitors move around the site). This information is aggregated and used to improve our website and services.
  • Marketing/advertising cookies – These may be used to deliver relevant adverts, limit the number of times you see an advert, and measure the effectiveness of advertising campaigns. They may share information with advertisers or other third parties.

Specific technologies we use

At present, the main third‑party technologies we use are:

  • Shopify – Our e‑commerce platform sets strictly necessary and functionality cookies to operate the online store, manage your session, and remember your preferences.
  • Google Analytics (Google LLC) – We use Google Analytics to collect standard internet log information and visitor behaviour patterns (such as pages viewed, referral source, device and browser information). This is done on a pseudonymised basis and helps us understand how our website is used. Where these technologies involve storing or accessing information on your device, we do so only with your consent via our cookie banner, or where a legal exemption applies.

We may add or remove analytics, marketing or functionality providers over time. Any material changes will be reflected in this notice and, where required, in our cookie banner.

How long cookies last

Cookies may be session cookies (which expire when you close your browser) or persistent cookies (which remain on your device for a set period or until you delete them). The exact duration depends on the specific cookie and its purpose. Our cookie banner and preference centre provide up‑to‑date information about the cookies in use at any time.

Who sets the cookies

Most cookies used on our website are first‑party cookies (set by us, via our domain). We also use third‑party cookies set by trusted service providers (such as Shopify and Google) to perform specific functions described above. These third parties process information in accordance with their own privacy policies and our instructions.

How to manage or withdraw consent

When you first visit our website, you will see a cookie banner asking for your consent to non‑essential cookies (functionality, analytics and marketing). You can:

  • Accept all cookies,
  • Reject all non‑essential cookies, or
  • Manage preferences to choose which categories you are happy with.

A complete, up-to-date list of the individual cookies, providers, and lifespans currently used on our site is detailed directly within our cookie banner.

If you wish to change or withdraw your cookie consent at a later stage, you can clear your browser's cookies/cache to trigger the cookie banner again, or contact us directly at hello@skyandstone.co.uk.

You can also control cookies through your browser settings (for example, to block or delete cookies). Please note that disabling cookies may affect the functionality of our website and many other websites you visit.

Changes to this cookies notice

We may update this cookies notice from time to time as our website, service providers or legal obligations change. The most current version will always be available on our website.

18.  CHANGES TO THIS NOTICE

We may update this Privacy Notice from time to time. The most current version will always be available on our website.

Where changes are significant, we will take reasonable steps to notify active members or customers by email or through our booking system.

Last updated: 1 October 2026