Effective date: May 31, 2026

1. Introduction WuTan UK ("we", "us", "our") operates classes and programs teaching Tai Chi, Qigong, and Wushu in Fareham and Bishop’s Waltham. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you interact with us, including via our website, registration forms, email, phone, and in-person sign-ups. By using our services or providing information, you agree to the practices described in this policy.

2. Information We Collect We collect information necessary to provide classes, manage memberships, process payments, communicate with you, and meet legal or safety obligations.

• Contact and identity information: name, date of birth, gender (optional), postal address, email address, phone number, emergency contact details.

• Account and membership details: membership status, class enrollments, attendance records, class preferences, instructor notes.

• Health and safety information: medical conditions, injuries, allergies, disability information, and doctor or physiotherapist notes when provided for safe participation.

• Payment and billing information: credit/debit card details (processed by third-party payment processors), bank account details for refunds/recurring payments, billing address, transaction history.

• Communication and marketing preferences: opt-in status for newsletters, event invitations, and other marketing communications.

• Device and technical information: IP address, browser type, device identifiers, and usage data when you visit our website or interact with our online systems.

• Photographs and video: images or recordings taken during classes or events for identification, safety, or promotional use (only used consistent with consent).

• Other information you provide: messages, forms, feedback, testimonials, or documents submitted to us.

3. How We Collect Information

• Directly from you: when you register, sign waivers, contact us, book classes, complete forms, or provide health information.

• Automatically: through website cookies, server logs, and analytics when you visit our website or use our online booking system.

• From third parties: payment processors, referral partners, emergency contacts, or healthcare professionals with your consent.

4. Use of Your Information We use personal data to:

• Provide, manage, and administer classes, memberships, bookings, and payments.

• Communicate class schedules, booking confirmations, safety updates, changes, and customer support responses.

• Assess fitness and safety for participation and provide reasonable accommodations.

• Process payments, refunds, and billing.

• Comply with legal, regulatory, or insurance requirements.

• Improve our services, analyze usage, and perform research and reporting.

• Send marketing communications (with your consent where required) and manage preferences.

• Protect our rights, property, staff, and participants and respond to legal requests.

5. Legal Basis for Processing (where applicable)

• Contract: to perform services you request (e.g., class enrollment, membership management).

• Consent: for certain uses such as promotional materials, photographs, or direct marketing where required.

• Legal obligation: to comply with laws, safety, or regulatory requirements.

• Legitimate interests: for administrative operations, fraud prevention, service improvement, and ensuring participant safety, balanced against your privacy rights.

6. Sharing and Disclosure We may share personal information with:

• Service providers: payment processors, booking platforms, email providers, IT and cloud service providers, background-check services, and other vendors who perform services on our behalf.

• Instructors and staff: to manage class participation and ensure safety.

• Emergency contacts and healthcare providers: when necessary for participant safety or as authorized by you.

• Legal and regulatory authorities: when required by law or to respond to legal processes.

• Third parties in connection with business transfers: in the event of a sale, merger, or reorganization, subject to confidentiality and data protection obligations. We do not sell personal information for monetary consideration.

7. Data Security We implement reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. Examples include access controls, secure storage, encryption where feasible, and staff training. No system is completely secure; we cannot guarantee absolute security.

8. Data Retention We retain personal data for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, enforce agreements, and maintain records. Typical retention periods:

• Membership, booking, and transaction records: retained for a minimum period required by law or for business needs (commonly up to 7 years for financial records).

• Health and incident records: retained as required by insurance or legal guidelines.

• Marketing and communications preferences: retained until you opt out or withdraw consent.

9. Your Rights and Choices Depending on your jurisdiction, you may have rights regarding your personal data, including:

• Access: request a copy of personal data we hold about