Privacy policy

Knoo Ltd (Reformer Pilates) operates https://www.reformer-pilates.co.uk (the “Site”). We provide educational reformer Pilates content and related account features such as saved exercises and newsletter updates.

We are the data controller for personal data described in this policy. Contact us at privacy@knoo.io. Our postal address is Knoo Ltd — knoo.io.

This policy applies if you visit the Site from the United Kingdom, the European Economic Area (EEA), Switzerland, or elsewhere. Where local law gives you additional rights, we honour those alongside UK GDPR and EU GDPR requirements.

The Site is an educational reference. It is not medical advice and does not replace instruction from a qualified professional.

We may collect and process:

• Account data — email address and authentication identifiers when you sign up or sign in (including via Google).
• Saved content — exercises you save to your account.
• Newsletter data — email address and subscription status when you opt in to emails.
• Technical data — IP address, browser type, device information, and approximate location derived from IP.
• Usage data — pages viewed, referral source, and interactions measured through analytics if you consent to analytics cookies.
• Communications — messages you send to us and our replies.

We do not intentionally collect special category data (such as health records). If you choose a username or message that reveals sensitive information, please do not include medical details you do not want us to process.

We use personal data to:

• Provide and secure the Site, including authentication and saved exercises.
• Send newsletter emails you have requested and honour unsubscribe requests.
• Understand how the Site is used and improve content, subject to your cookie choices.
• Prevent abuse, enforce our terms, and protect our legal rights.
• Comply with law and respond to lawful requests.

Our lawful bases under UK GDPR / EU GDPR include: contract (providing account features you request), consent (newsletter, non-essential cookies, and optional analytics/marketing), legitimate interests (site security, basic measurement where permitted, and improving our content), and legal obligation where required.

We use cookies and similar storage for essential site operation, authentication, remembering cookie preferences, and—only with your consent—analytics and marketing technologies. See our Cookie policy for details and to change your choices at any time.

We share personal data with service providers who process it on our instructions, including:

• Supabase — database, authentication, and newsletter subscription storage.
• Vercel — website hosting and content delivery.
• Google — sign-in (OAuth) and, if you consent, analytics/tag management via Google Tag Manager.

Processors are bound by contract to protect your data and use it only as we instruct. We may also disclose data if required by law or to protect rights, safety, and security.

We do not sell your personal data. If we introduce affiliate or advertising partners that set marketing cookies, we will update this policy and request consent where required.

Some providers may process data outside the UK or EEA (for example the United States). Where this happens, we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or provider certifications recognised under applicable transfer rules.

• Account and saved exercise data — while your account is active and for a reasonable period after deletion to resolve disputes or backups.
• Newsletter data — until you unsubscribe or we retire the list, plus a short suppression record to honour opt-outs.
• Server and security logs — typically up to 90 days unless needed longer for investigation.
• Analytics data — according to the retention configured in our analytics tools and your cookie choices.
• Cookie consent records — up to 6 months, aligned with ICO guidance.

Depending on where you live, you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

UK residents may complain to the Information Commissioner's Office (ICO) at ico.org.uk. EEA residents may complain to their local supervisory authority.

To exercise your rights, email privacy@knoo.io. We may need to verify your identity before responding.

The Site is intended for a general audience and is not directed at children under 16. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and reputable infrastructure providers. No online service is completely secure; please use a strong, unique password for your account.

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be highlighted on the Site or by email where appropriate.

Questions about this policy or our use of personal data: privacy@knoo.io. Reformer Pilates, Knoo Ltd — knoo.io.