PRIVACY
Who we are
Saras Reformer is a trading name of KF01 LTD, company no. 17130830. We decide what happens to the details on this page, and you can reach us about any of it at hello@sarasreformer.co.uk.
What we collect
Your name, email address and phone number. The health notes you give us in the waiver, and the name and phone number of the emergency contact you name there — held only so we can call someone if you are hurt in class, deleted with the waiver, and never used for anything else. Your bookings, the classes you attend, your waitlist places, and what you buy — intros, packs, memberships, gift cards and founding reservations — with the amounts and dates. If you join the list: the days and times that suit you, whether you have done reformer before, and how you heard about us. If a friend's link brought you, we note whose, so they get their free class. If you sign in with Google, Google tells us your name, email address and profile picture. If you turn notifications on, a notification token for your phone or browser (see App notifications).
Signing in
No passwords: we email you a sign-in link or a six-digit code. Each works once, for 15 minutes, and we keep it only in scrambled form, clearing it once it has expired. To stop anyone guessing codes we count wrong tries against the email address; the count is cleared when you sign in, or after a day at most. To stop abuse we also count sign-in requests from the internet address they come from, and keep that address for up to a day.
Cookies and measurement
If you say yes to the cookie banner, we use Google Analytics to count visits (IP addresses anonymised) and a Meta pixel to see whether our Instagram and Facebook posts bring people here. Say no and neither loads, and no visit is counted. The same yes covers campaign tags: if you arrive from an ad or campaign link and have said yes, the tags and click id in that link are kept with your list signup so we know which posts work; say no and they are not kept. A friend's referral link, and the page it brought you to, is kept either way, because that is how they earn their free class. You can change your mind any time: “Cookie choices” at the bottom of every page asks the question again. Some cookies do not wait for that question, because they do a job you asked for: the ones that keep you signed in and keep signing in secure; one that remembers you have joined the list, so the join page greets you instead of asking again; Stripe's fraud-prevention cookies, set only when you open a payment form; and, inside the app, one that tells our site it is the app.
How we contact you
By email, and in the app if you turn notifications on. Emails: your sign-in link or code, a welcome, booking confirmations with a calendar file, reminders 24 hours and 2 hours before class, waitlist offers, gift card codes, a warning before credits expire, class cancellations, membership payment problems, one list confirmation, one "booking is open", founding-membership reservation updates, a note when a friend you referred pays for their intro or founding membership, and the odd note from the studio — about a class you are booked on, or studio news. Studio news goes to the list and to customers (anyone who has paid for something or booked a class). An account on its own, with nothing bought or booked, gets none. Every studio-news email carries an unsubscribe link, and no marketing spam. We only text you if you’ve turned SMS reminders on from your account.
App notifications
If you turn notifications on, we use them for booking confirmations, waitlist offers, class cancellations, changes to your booking (a class moved or cancelled for you), notes from the studio about a class you are booked on or waiting for, and a reminder 2 hours before class. To send them, your phone or browser hands us a notification token — a device address, not a name. In the app that token comes from Firebase Cloud Messaging, run by Google, which passes the message to your phone on our behalf (on an iPhone, through Apple's notification service); in a browser, the browser's own push service does the same. The token is deleted when you turn notifications off from the More tab, when you log out, when your phone or browser tells us it no longer works, and when you delete your account.
In the app
The Saras Reformer app shows the same booking screens as this site, and collects the same things. It loads no analytics and no advertising tags, so it never asks you the cookie question. Links to these policies open in your phone's own browser, outside the app.
Who handles it for us
A few companies run parts of the studio for us and handle your details only on our instructions: Stripe takes payments and holds card details (card numbers never touch our systems, and Stripe also keeps its own payment records, as the law requires of it); Resend sends our emails; Google's Firebase Cloud Messaging delivers app notifications; Vercel hosts the site and the app, on servers in London; and Neon runs our database, also in London. Each is bound by contract to protect your details to the standard UK data-protection law sets, and where one of them handles your details outside the UK, it does so under the safeguards that law requires. If you say yes to cookies, Google and Meta also receive visit data, as set out above.
How long we keep it
Your account, bookings, attendance and credits, and your waiver — every version you have signed, with the emergency contact — until you delete your account or ask us to. Payment records for at least six years, because tax law requires it; deleting your account takes your name and email off them. Your place on the list until you unsubscribe or ask us to remove you; after an unsubscribe we keep your address marked as unsubscribed, so no studio news reaches you again. Messages you send through the contact form until you ask us to delete them or delete your account. Sign-in links and codes until they expire, and the sign-in counts, with the internet address a request came from, for up to a day. Notification tokens as set out above.
What we never do
Sell or rent your details, or share them with anyone beyond the companies named above, who handle them for us. Health notes and your emergency contact stay in the studio's booking system, open only to the studio's own staff — your trainer and the studio owner — and they are never sent by email.
Your call
Email hello@sarasreformer.co.uk to see, correct or get a copy of what we hold, or to ask us to stop using it; we reply within one month. To delete your account: in the app, More, then Delete my account; on this site, see the deleting your account page (linked below), which sets out exactly what goes and what we have to keep. Deleting means we can no longer hold your bookings, and any credits left go with it. If you are unhappy with how we handle your details, you can complain to the Information Commissioner's Office at ico.org.uk.
Last updated
23 September 2026. If we change this page, we change this date.