Last updated: 20 May 2026
This Privacy Policy explains how Return to Source collects, uses, stores, and protects your personal information when you use our website, sign up for updates, book a class, or use our services.
1. Who we are
Return to Source is the controller of your personal information.
Business name: Return to Source
Owner / legal entity: Rose Long
Email: rose_long@icloud.com
Website: www.rose-long.com
If you have questions about this Privacy Policy or your personal information, contact us at rose_long@icloud.com.
2. Personal information we collect
We may collect the following information:
- name;
- email address;
- phone number;
- booking details;
- payment confirmation details;
- class attendance information;
- messages or enquiries you send to us;
- marketing preferences;
- emergency contact details, if relevant;
- health, injury, pregnancy, accessibility, or medical information that you choose to provide;
- technical information such as IP address, browser type, device information, and website usage data.
We only collect information that is relevant to providing our services, communicating with you, managing bookings, and operating our website.
3. Health information
If you tell us about injuries, pregnancy, medical conditions, accessibility needs, or other health-related information, this may be classed as special category data under UK data protection law.
We use this information only where necessary to help us provide yoga services safely and appropriately.
Where appropriate, we rely on your explicit consent to process this information. You can withdraw consent at any time by contacting us, although this may affect our ability to provide certain services safely.
4. How we collect your information
We collect information when you:
- complete a website sign-up form;
- subscribe to our newsletter;
- book or attend a class, workshop, event, or session;
- contact us by email, phone, social media, or website form;
- complete a health or consent form;
- use our website;
- make a payment through a third-party provider.
5. Why we use your information
We use your information to:
- create and manage bookings;
- provide classes, workshops, events, and related services;
- respond to enquiries;
- send service messages, such as booking confirmations or schedule changes;
- process payments;
- keep basic attendance and administrative records;
- support safe participation in yoga services;
- send marketing emails, where you have consented or where the law allows;
- understand how people use our website;
- improve our website and services;
- comply with legal, tax, accounting, and insurance obligations.
6. Our lawful bases
Under UK data protection law, we need a lawful basis to use your personal information. Depending on the situation, we may rely on:
Contract: where we need your information to provide a class, session, booking, or service you have requested.
Consent: where you have agreed to receive marketing emails, where you have accepted non-essential cookies, or where you provide health-related information and explicit consent is appropriate.
Legal obligation: where we need to keep records for tax, accounting, legal, or regulatory purposes.
Legitimate interests: where we use information to run and improve our business, respond to enquiries, manage our services, and keep appropriate business records, provided your rights do not override those interests.
7. Marketing emails
We will only send you marketing emails if you have signed up to receive them or where we are otherwise legally allowed to do so.
You can unsubscribe at any time by using the unsubscribe link in our emails or contacting us at rose_long@icloud.com.
We will not sell your personal information to third parties.
8. Analytics and Google Tag Manager
We use Google Tag Manager to manage website tags, including analytics tags.
Google Tag Manager itself helps us manage scripts and tags on our website. It may cause other tools, such as analytics services, to run depending on your cookie choices.
We use analytics to understand how visitors use our website, which pages are viewed, how people find the website, and how we can improve the user experience.
Where analytics involves non-essential cookies or similar technologies, we will only use them with your consent.
You can change or withdraw your cookie consent at any time by using the “Cookie settings” link in the website footer.
9. Who we share information with
We may share your information with trusted service providers who help us run our website and services, such as:
- website hosting providers;
- email marketing platforms;
- booking platforms;
- payment processors;
- analytics providers;
- Google Tag Manager and related Google services;
- accountants or professional advisers;
- insurance providers;
- IT and administration service providers;
- legal or regulatory authorities, where required.
We only share information where necessary and appropriate.
Current third-party providers may include:
- Website platform: [e.g. custom Next.js website]
- Booking platform: [e.g. Calendly, Acuity, Momence, Mindbody]
- Email marketing: [e.g. Mailchimp, ConvertKit, Brevo]
- Payments: [e.g. Stripe, PayPal]
- Analytics / tag management: Google Tag Manager and [Google Analytics, if used]
10. International transfers
Some of our service providers may process information outside the UK.
Where this happens, we will take appropriate steps to ensure your personal information is protected in accordance with applicable data protection law.
11. How long we keep your information
We keep personal information only for as long as necessary.
As a general guide:
- enquiry emails: up to [12 months];
- booking and attendance records: up to [6 years] for legal, tax, accounting, and insurance purposes;
- payment records: up to [6 years];
- newsletter subscription records: until you unsubscribe or ask us to delete them;
- health information: only for as long as needed to provide services safely, unless a longer period is required for legal or insurance reasons;
- analytics data: [insert retention period].
12. Cookies
Our website uses cookies and similar technologies. Some are necessary for the website to work. Others, such as analytics cookies, help us understand how visitors use the website.
For more information, please see our Cookie Policy.
13. How we protect your information
We take reasonable steps to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction.
These steps may include secure systems, access controls, password protection, encryption where appropriate, and limiting access to people who need the information.
14. Your rights
Depending on the circumstances, you may have the right to:
- access your personal information;
- correct inaccurate information;
- request deletion of your information;
- restrict how we use your information;
- object to certain uses of your information;
- request transfer of your information;
- withdraw consent where we rely on consent;
- complain to the UK Information Commissioner's Office.
To exercise your rights, contact us at rose_long@icloud.com.
15. Complaints
If you have concerns about how we use your personal information, please contact us first so we can try to resolve the issue.
You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator.
ICO website: ico.org.uk
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will be posted on our website. If we make significant changes, we may notify you by email or through the website.
17. Contact us
For questions about this Privacy Policy or your personal information, contact:
Email: rose_long@icloud.com