Privacy policy

We collect the categories of personal data needed to run the Pole Club services — studio directory, account, community, Foundation Course, and instructor profiles. Specifically:

• Account data — email, optional display name, optional bio + city + Instagram handle, password (if chosen).
• Studio booking data — name, email, optional phone, optional notes for the instructor, the studio + slot you booked.
• Foundation Course data — Stripe customer id, subscription status, lessons watched, quiz answers.
• Community data — posts you write, comments, likes, photo + video uploads, instructor verification details (if you claim a profile).
• Operational data — pages you visit (via privacy-first analytics), error logs, browser type.

We don’t use third-party tracking cookies. We don’t buy data, sell data, or share it for advertising.

• Contract — your account, your bookings, your Foundation Course subscription. We need this data to deliver what you signed up for.
• Legitimate interest — privacy-first analytics, error logs, fraud and abuse prevention. We balance this against your reasonable expectations and rights.
• Consent — marketing emails, photo uploads published on community posts, optional profile fields. Withdrawable at any time in your settings.
• Legal obligation — VAT records, fraud prevention, lawful requests from regulators.

Strictly for delivering the service: sending you sign-in links; showing you your wishlist; emailing your booking + Foundation Course receipts; troubleshooting bugs; understanding which pages are useful. We never use your data for ad targeting.

We use a small set of trusted processors. They’re:

• Supabase — auth + database (hosted in the EU).
• Stripe — payment processing for studio plans and Foundation Course subscriptions.
• Plausible — privacy-first analytics. No personal data, no cookies.
• Sentry — error reporting (server-side, scrubbed of personal data).
• Resend — transactional emails (sign-in links, booking confirmations, course welcomes, replies).
• Vercel — hosting infrastructure.
• Mapbox — studio maps (no personal data sent).

Each is bound by a data processing agreement. None of them use your data for their own purposes.

• Account data — for the lifetime of your account, then 30 days after closure (so we can reverse accidental deletes).
• Studio bookings + Foundation Course payments — 7 years for UK HMRC financial record-keeping.
• Community posts + uploads — until you delete them or your account closes.
• Quiz submissions — 24 months, then anonymised.
• Server logs — 14 days.

Pole Club is not directed at children under 16. We don’t knowingly collect personal data from anyone under 16. If you believe a minor has created an account, email privacy@poleclub.co.uk and we’ll remove the data within 72 hours.

Under UK GDPR you have the right to access, correct, delete, and port your personal data, and to object to processing or withdraw consent. Use /gdpr to file a request, or email privacy@poleclub.co.uk. You also have the right to complain to the ICO at any time.

If we make material changes, we’ll email signed-in users and post a banner on the homepage. The “last updated” date at the top of this page reflects the most recent change.

The Hawke Group Ltd, registered in England and Wales. Registered office: [REGISTERED OFFICE ADDRESS — founder to insert]. Email privacy@poleclub.co.uk.