Privacy
Who is responsible
Forever Fit Pilates provides Pilates, yoga, classes and instructor training. Contact Caroline Skinner by email at info@foreverfitpilates.co.uk or telephone 07809 285 193 about this website or your personal information.
Information we collect
The native enquiry form collects your name, email address, optional telephone number, selected topic and message. It records when the enquiry was received. You must acknowledge the privacy notice before submitting. Please avoid sending medical or other sensitive details through a general enquiry.
When you book or purchase through WooCommerce, the website records the selected product or course/date, order value and status, billing/contact details and payment reference. Customer accounts hold account details and order history. The checkout fields and available payment options determine the information requested for your booking. Account authentication is handled by WordPress and WooCommerce.
How information is used
We use enquiry information to respond to your request, arrange services and maintain the correspondence needed to help you. Booking and account information is used to process purchases, provide the booked service, send transactional messages and manage your account. The website uses security checks to limit automated abuse and protect enquiry submissions.
Selecting a newsletter enquiry topic sends a request to Caroline; this native form does not itself add you to a mailing list.
Providers and sharing
Authorised business staff can access enquiries and booking records to provide the service. Native enquiry notifications are sent to the configured business recipient, with your email used as Reply-To. PayPal is the confirmed payment provider. Payment information is processed by PayPal for the selected payment and may include the booking amount, order reference and customer/contact details needed for the transaction. See PayPal’s privacy statement.
Hosting and security
Hosted by Nexar Web Services. Website records are stored in the WordPress database. The website restricts enquiry administration to authorised users, validates form submissions and uses required Google reCAPTCHA v3 protection. No website can promise absolute security.
Keeping information
Native enquiries are scheduled for deletion after 90 days; deletion depends on scheduled website tasks running. Enquiry export and erasure integrate with WordPress’s privacy tools.
The native anti-abuse counters use hashed email/IP identifiers for up to one hour. Successful reCAPTCHA token reuse protection lasts two minutes. Submission tickets remain valid for up to two hours and are cleaned up after expiry; they are security records rather than marketing profiles.
Your rights and concerns
Depending on the circumstances and applicable law, you can request access to your personal information, correction, erasure, restriction, portability or object to processing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Some records may need to be retained where a legal obligation applies.
Send privacy requests to info@foreverfitpilates.co.uk. We may need to verify your identity before providing or changing records. You can raise a concern with the UK Information Commissioner’s Office at ico.org.uk.
Cookies and browser storage
Cookies are small values stored in your browser. Essential storage supports sign-in, basket and security functions. Optional measurement or advertising must be considered separately. The native website functions and confirmed providers are described below.
Essential website functions
- nexar_ffp_consent — Forever Fit website: remembers the native cookie choice, revision and expiry for 180 days. It is updated when you save another choice. Earlier inventory revisions require a new choice.
- WordPress sign-in cookies — WordPress: authenticate signed-in users and remember preferences. Duration depends on the sign-in and Remember Me choice.
- WooCommerce basket/session storage — WooCommerce: maintains selected items and the customer session for basket and checkout.
Required Google form protection
Google reCAPTCHA v3 is required on the native enquiry form and is separate from optional cookie choices. It loads when you submit a configured form and assesses interactions and technical information to distinguish visitors from automated abuse. The server checks the token’s hostname, action, score and time. Google describes its _GRECAPTCHA cookie as necessary for risk analysis. Google’s Privacy Policy and Terms of Service apply.
Optional services
Google Analytics is confirmed for this website and is an optional measurement service used to understand website visits and usage. The native interface lists configured optional services. The website’s native controls apply to the Google measurement tags configured through Site Kit. These tags are blocked before opt-in and on subsequent loads after withdrawal. If no optional services are registered, the banner states that truthfully and provides an acknowledgement.
Changing your choices
Use Manage cookie choices in the Cookies section to reopen native settings. Accept or reject optional services where offered; Google form protection remains required. You can also manage cookies in your browser, although disabling essential storage may prevent sign-in or checkout. Saving a choice closes the native settings quietly; useful storage/provider errors remain visible.
Updates to this notice
We review this notice when the website or its processing changes. The date at the top records the publication of the reviewed policy.