Who is responsible
Muriel Mueller, a sole trader trading as MuMu Yoga, is responsible for information used to provide MuMu Yoga services. Business correspondence: 33 Cobham Road, Kingston upon Thames, KT1 3AE. Email mumuyoga8@gmail.com for privacy requests or questions. Flywheel provides authorised website support; access is limited to what is needed for that support and does not permit unrelated use of client information.
Enquiries and booking information
We use your name, contact details and correspondence to answer enquiries and take steps you request before a booking. Where a booking is accepted, relevant class, attendance, payment references and correspondence are used to provide that service. We retain financial records where required by law and limited security information for proportionate security and administration. Card details must never be supplied by email, WhatsApp or the enquiry form. The contact form creates an email draft in your own email application; it does not send a message or save an enquiry in a website database. You must send the draft yourself. Please avoid putting medical details in the form.
Current booking and video services
The website currently provides information and a booking preview. It does not yet take online payments or confirm reservations. Calendly and payment integrations have not been enabled. Zoom is the intended platform for classes. Before automated bookings open, this notice and the booking screen must identify the actual providers, their purposes and privacy information. A class can reveal your display name, image and voice to Muriel and other attendees. Discuss privacy and accessibility needs before booking; camera use does not by itself authorise a recording or publicity.
Coaching notes, health and safety
MuMu Yoga keeps digital coaching notes linked to named clients. Relevant notes can include health or wellbeing information supplied during coaching. This website has no health-history intake form. Coaching notes are separate from ordinary website enquiries and are not part of the material sent to Flywheel, Fred or AI tools through the website-support route. Do not send detailed medical records in ordinary enquiries or group chats. Before requesting or recording further health information, Muriel must first explain what is needed and why, the applicable lawful basis and special-category condition, who will receive it and how it will be handled. Where explicit consent is relied on it must be requested separately, before that information is collected. Share only the limitations needed to discuss participation; do not send entire medical histories. Any inadvertently received health information should be restricted and removed when no longer necessary, subject to a justified legal or insurance requirement. It is not supplied to unapproved AI tools.
Pending confirmation of the coaching-record arrangements, do not expand health-information collection or introduce new sharing, recording, online intake or AI uses. Keep existing notes restricted while their permissions, storage and retention are reviewed. This interim notice does not establish that historic consent or provider checks have been completed. Contact Muriel at mumuyoga8@gmail.com about existing notes or to exercise your rights.
Recordings, testimonials and marketing
Recording sales are paused until storage, secure delivery, access and deletion rules have been confirmed. The proposed recording service films only the teacher: students must not be visible, audible or identifiable in recordings supplied to others. Participation and camera use do not constitute recording consent. Muriel has confirmed permission to publish the testimonial names and videos she supplied; this does not extend to other people or class recordings. Contact us with questions or a withdrawal request about a testimonial. No newsletter signup or automatic marketing enrolment operates on this website. Historic marketing or feedback records, if any, remain subject to separate review; disabling collection does not erase them.
Optional promotional filming
Promotional filming is a separate, optional activity from class attendance, paid class recordings and existing testimonials. Prefer teacher-only footage. Before any identifiable student is filmed or used in publicity, obtain a separate recorded choice covering face, voice or name as applicable, the exact website/social channels and the intended edit. No options may be pre-ticked, and refusal must not affect class access or price. Existing testimonial permission is not reused for class footage. Under-18s are excluded from promotional filming until a separate guardian/young-person permission and safeguarding process has been agreed.
For new promotional filming, unused raw footage is deleted within 90 days of filming; raw files used in an approved edit are deleted within 90 days after the edit is approved. Finished promotional material is used for up to 12 months after its first publication, then removed unless fresh permission is obtained. Keep the permission record while the material is used and for up to 24 months after the last use to evidence the choice, unless a specific dispute or legal duty justifies longer retention. Store source footage and permission records privately, with access limited to Muriel and a specifically authorised editor. Do not send it to AI tools or unrelated services without separate permission. These procedures apply to new filming; they are not a claim that historic files have already been deleted.
A participant may withdraw promotional permission by emailing mumuyoga8@gmail.com. Stop new use promptly and remove material from the website and accounts under MuMu Yoga’s control within 30 days. Explain any copies outside that control, such as third-party reposts or cached copies, which cannot be guaranteed erased. Withdrawal does not affect earlier lawful use. No agreement may waive the participant’s legal rights or require publicity consent to attend a class.
Download the separate promotional-footage permission form
How long information is kept
Coaching notes have a separate purpose from ordinary enquiries. Review them when coaching ends and keep identifiable information only while needed for the relevant coaching, safety, complaint, claim or legal purpose. Do not apply the twelve-month enquiry period automatically to coaching notes, and do not delete records subject to a justified legal hold. The actual recordkeeping arrangements and any required professional or legal retention must be confirmed before a fixed deletion period is promised.
The forward-looking ordinary-enquiry policy is deletion within 12 months after the last meaningful contact, unless the information is still needed for an ongoing service, a complaint or a specific legal requirement. Necessary financial records are retained for the applicable statutory tax/accounting period and then reviewed for deletion. Class attendance, safeguarding, incident and insurance records need a purpose-specific retention period agreed with the insurer before paid bookings open; the enquiry period must not be assumed to apply to these records. Authorised account holders must carry out mailbox and message deletion: the website does not automatically erase email or WhatsApp history. Provider logs and backups follow the relevant provider controls; their actual periods and processing arrangements must be verified before introducing further services. We do not claim historic records have already been deleted.
Website storage and external services
The website is hosted using OpenAI Sites and Cloudflare. Hosting and security providers may process technical information such as IP address, request details and security cookies to deliver and protect the service. Authorised editor access uses a secure session cookie. No advertising tracker, analytics script, social-media plugin or newsletter embed is included in the published site source. Links to external websites open services governed by their own notices. Any future optional tracking must have appropriate choices before it starts. Decorative lotus appearance effects now remain within the current page and are not saved between visits. Older versions saved two appearance settings locally; the button below can remove those settings from this browser. No other website data is removed. Calendly is designed to load only when requested; its actual storage and data-sharing behaviour must be checked before it is enabled.
Providers, location and protection
Only authorised people and providers may access information for the stated purposes. Accounts should use strong unique credentials and two-factor authentication where available. Website editor sessions are separate from customer enquiries. The actual booking, payment and video accounts, their processing terms and any applicable international-transfer safeguards must be checked before those integrations are activated. We do not promise UK-only storage, a deletion period controlled by another provider, or a processor agreement that has not been verified.
Your choices and rights
You can ask for access, correction, deletion or restriction of your personal information, or object or ask for portability where the right applies. Where processing relies on consent you can withdraw it; this does not affect prior lawful processing. Some records may need to be retained for a specific legal reason, which we will explain. Send requests to mumuyoga8@gmail.com. We may ask for proportionate identity verification and will respond within the applicable deadline. You can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/. The website does not make automated decisions about eligibility, health or access to services.
Purposes and lawful bases
We use information necessary to answer an enquiry about your own proposed contract or to fulfil an accepted service for requested pre-contract steps or contractual performance. Proportionate business-contact administration, website security and complaint handling may rely on legitimate interests, subject to necessity and individuals’ rights. Records required by law are used for the relevant legal obligation. Optional publicity, marketing or tracking needs its own appropriate basis and any separate permission required by law.
A contract or ordinary enquiry does not supply consent for unrelated marketing, publicity, recording, AI training or sensitive-data processing. Any health-data processing requires both an ordinary lawful basis and an applicable special-category condition. We do not ask for health histories in ordinary enquiries. The other sections of this notice explain the actual service status and any separately approved uses.
Privacy requests and complaints
Contact mumuyoga8@gmail.com to exercise a privacy right or complain about our handling of your personal information. No special form or legal wording is required. We may seek proportionate verification of your identity or authority where necessary. Please do not send identity documents with an initial enquiry.
We respond to UK data-protection rights requests without undue delay and normally within one calendar month, subject to the lawful rules on verification, clarification, extensions and exceptions. Where an extension is permitted, we explain it within the required period. Data-protection complaints are handled separately: we acknowledge them within 30 days, investigate appropriately and communicate the outcome without undue delay. A complaint acknowledgement is not the deadline for completing a rights request.
You can complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ and, where applicable, another competent supervisory authority. The regulator’s own complaint procedure applies. Nothing in these terms or our choice of governing law requires you to accept our response or waive a privacy or court remedy available under applicable law.