Privacy Policy

Last updated: 10 August 2026

Who I am

Architecture of Movement is operated by Sarah Sykes, a sole trader who also trades as Sarah Sykes Pilates. Sarah Sykes is the data controller responsible for the personal information described in this Privacy Policy.

This Privacy Policy explains how I collect, use and protect your personal information when you visit this website, contact me or use my services.

I am registered with the Information Commissioner’s Office (ICO) as Sarah Sykes under registration reference ZC164248.

If you have any questions about this Privacy Policy or how I use your personal information, please email me or call me on 07540 061349.

Information I may collect

Depending on how you interact with Architecture of Movement, I may collect:

Your name, email address and telephone number.
Information included in an enquiry or contact form.
Your movement interests, questions and goals.
Booking, attendance and correspondence records.
Information needed to administer sessions, classes, workshops or experiences.
Health, injury or movement information that you choose to provide.
Payment and transaction records. Card details are handled by the relevant payment provider and are not stored by me.
Technical information such as your IP address, browser, device, website activity and cookie preferences.
Information you provide through the website’s contact or enrolment forms;
When you attend a live online class, your first name—or first name and surname initial—and anything you say while unmuted may occasionally be audible in the class recording.
Photographs, feedback or testimonials, but only with your specific permission.

If a participant is under 18, relevant information and consent will normally be obtained from their parent or guardian.

How and why I use your information

I use personal information to:

Respond to enquiries and help identify a suitable starting point.
Arrange and provide individual sessions, classes, workshops and experiences.
Adapt movement appropriately and support participant safety.
Manage bookings, payments, attendance and business records.
Communicate about services someone has booked or asked about.
To deliver live online classes and provide the relevant class recordings to enrolled clients. A recording may occasionally contain a participant’s first name—or first name and surname initial—and anything said while unmuted.
Maintain the security and operation of the website.
Meet legal, insurance, accounting and professional obligations.
Establish, exercise or defend legal claims where necessary.

The lawful bases I rely upon are:

Steps taken at your request before entering a contract, such as answering an enquiry.
Contract, when information is needed to provide a service you have booked.
Legitimate interests, including responding to enquiries, administering the business and improving services.
Legal obligation, where records must be retained or disclosed by law.
Consent, where you have made a genuine choice—for example, for testimonials, photographs or marketing.
Explicit consent, when processing health information.

I will not add you to a marketing list simply because you have made an enquiry

Health information

Because this work is shaped around the individual, you may choose to share information about your health, medical history, injuries, symptoms or treatment.

Health information is classed as special-category personal data. I process it only with your explicit consent and only where it is relevant to responding to your enquiry or providing safe, appropriately adapted movement services.

You may withdraw that consent at any time. However, if I do not have information that is reasonably necessary for your safety, I may be unable to provide or continue a particular service.

Who receives your information

I do not sell personal information.

Information may be processed by trusted services that support the business, including:

Wix — website hosting and contact or enquiry forms submitted through this website.
Microsoft Forms / Microsoft 365 — used to collect and securely store enrolment details, health information and participant declarations.
Clients enrolled for the relevant class or term and, where an older recording is reused, other enrolled clients who receive access to that recording. Recordings are set to show me, but a participant’s first name—or first name and surname initial—and anything said while unmuted may occasionally be audible. Recordings and access links must not be shared with anybody else.
Google Workspace, which provides business email and related storage.
Zoom, when providing online classes or consultations.
Payment, bookkeeping or accounting providers where relevant.
Professional advisers, insurers, regulators or public authorities where disclosure is reasonably necessary or legally required.

These providers may process information only to deliver their services and are responsible for applying appropriate security and data-protection measures.

International processing

Some service providers may process information outside the United Kingdom. Where this happens, I take reasonable steps to ensure that an appropriate legal safeguard is in place, such as a UK adequacy regulation or approved contractual protection.

How long I retain information

I retain personal information only for as long as it is reasonably needed:

Enquiries that do not become bookings: normally up to 12 months after the last contact.
Client, attendance, session and relevant health records: normally up to seven years after the last service, particularly where needed for insurance or legal purposes.
Access to a weekly class recording is normally withdrawn two weeks after the end of the relevant term. I may retain recordings for longer as part of my teaching archive and may reuse suitable recordings with other enrolled clients.
Recordings are set to show me rather than class participants. An occasional first name, surname initial or brief comment made while unmuted may remain audible. Before reusing a recording, I will take reasonable steps to check that it does not contain personal health information or anything else that would make wider reuse inappropriate.
Recordings are reviewed periodically and deleted when they are no longer required.
Financial and accounting records: normally six years after the relevant financial period.
Testimonials and photographs: until they are no longer needed or consent is withdrawn.
Cookie information: for the periods explained in the Cookie Policy.

Information may be retained for longer where required by law, an insurer or an ongoing legal matter.

Keeping information secure

I take reasonable technical and organisational measures to protect personal information. These include password-protected accounts, restricted access and the use of reputable website, email and communication providers.

No online service can guarantee absolute security, but personal information is not used or disclosed for purposes unrelated to those explained in this notice.

Your rights

Depending on the circumstances, you may have the right to:

Ask for a copy of your personal information.
Correct information that is inaccurate or incomplete.
Ask for information to be deleted.
Restrict how information is used.
Object to processing based on legitimate interests.
Receive certain information in a portable format.
Withdraw consent at any time.
Complain about the way your information has been handled.

To exercise a right, please email. I may need to confirm your identity before completing a request.

I do not use personal information to make decisions based solely on automated processing.

Cookies

The website uses cookies and similar technologies for essential website functions and, where permitted, analytics or other optional purposes.

Non-essential cookies should not be placed until you have made a choice through the cookie banner. Further details will be available in the Cookie Policy, where you can also learn how to change your preferences.

Complaints

Please contact me first if you have a concern so that I can try to resolve it.

You also have the right to complain to the UK Information Commissioner’s Office:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
ico.org.uk

Changes to this notice

I may update this notice when the website, services or legal requirements change. The latest version will always appear on this page with its revision date.