Privacy Policy

Nimble Studio (trading name of LM Wellbeing Ltd, "Nimble," "we," "us," or "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you visit our website, book a class or appointment, join our priority list, or otherwise interact with us.

​

We are registered with the Information Commissioner's Office (ICO) as a data controller.

​

1. Who We Are

​

Nimble Studio

The Granary, Spring Hill Farm, Pitsford, Northampton, NN6 9AA

Email: info@nimble-studio.co.uk

​

2. Information We Collect

​

We may collect and process the following information about you:

• Contact details: name, email address, phone number, postal address

• Booking information: services booked, appointment history, class attendance

• Payment information: processed securely by our third-party payment provider (Momence, via Stripe) — we do not store full card details

• Health information: medical history, injuries, conditions, and other information you disclose to us in connection with physiotherapy, personal training, sports massage, or reformer Pilates, where relevant to your safety and care

• Marketing preferences: whether you've opted in to receive news and updates from us

• Technical information: IP address, browser type, and website usage data, collected via cookies (see our separate Cookie Policy)

 

3. How We Use Your Information

​

We use your information to:

• Process and manage your bookings, memberships, and payments

• Provide safe and appropriate physiotherapy, personal training, sports massage, and Reformer Pilates services

• Communicate with you about your bookings, appointments, and account

• Send you marketing communications, where you have opted in — you can withdraw this consent at any time

• Maintain accurate business and financial records (via our accounting software, Xero, connected to our banking provider, Tide)

• Comply with our legal and regulatory obligations

​

4. Health Information (Special Category Data)

​

Where you disclose health information to us — for example, injuries, medical conditions, or details relevant to physiotherapy or sports massage treatment — this is treated as special category data under UK GDPR.

​

We only collect and process this information with your explicit consent, and only for the purpose of providing safe, appropriate treatment or training.

This information is only accessed by staff and contractors directly involved in your care, and is stored securely and separately from general marketing data.

​

5. Legal Basis for Processing

​

We process your personal data under the following legal bases:

• Contract: to fulfil a booking or membership you've entered into with us

• Consent: for marketing communications and for processing health information

• Legitimate interests: to run and improve our business, including basic website analytics

• Legal obligation: where we are required to retain records for tax, insurance, or regulatory purposes

​

6. Who We Share Your Information With

​

We may share your information with:

• Momence — our booking, scheduling, and payment platform

• Xero and Tide — for accounting and payment processing

• Our freelance instructors, physiotherapists, and personal trainers, where relevant to delivering your service

• Regulatory bodies (e.g. HCPC), where required by law or professional obligation

• Emergency services, where necessary for your immediate health and safety

​

We do not sell your personal information to third parties.

​

7. Data Retention

​

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, and resolve disputes.

​

Health records relating to physiotherapy treatment are retained in line with professional (HCPC/CSP) record-keeping guidance.

​

Marketing data is retained until you unsubscribe or withdraw consent.

​

8. Your Rights

​

Under UK GDPR, you have the right to:

• Access the personal information we hold about you

• Request correction of inaccurate information

• Request deletion of your information, where applicable

• Withdraw consent at any time (for marketing or health data processing)

• Object to or restrict certain processing

• Request a copy of your data in a portable format

• Lodge a complaint with the Information Commissioner's Office (ico.org.uk)

​

To exercise any of these rights, contact us at info@nimble-studio.co.uk.

​

9. Cookies

​

Our website uses cookies to improve your browsing experience and understand how our site is used. For full details, please see our Cookie Policy.

​

10. Website & Booking Platform

​

When you make a booking, your information is processed via Momence, our third-party booking and scheduling platform. Momence has its own privacy and security practices in relation to how it processes and stores data — you can review these on their website.

​

11. Children's Data

​

Clients must be at least 16 years old to book services independently. Where a client is under 18, we require written consent from a parent or guardian, and may collect limited additional information as part of that consent process.

​

12. Changes to This Policy

​

We may update this Privacy Policy from time to time. Any significant changes will be communicated to registered clients by email where appropriate. The date at the top of this page shows when it was last updated.

​

13. Contact Us

​

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: info@nimble-studio.co.uk

Address: The Granary, Spring Hill Farm, Pitsford, Northampton, NN6 9AA.