Privacy Notice

Last updated: 27 September 2026

Who we are

Forma is provided by Georgia Thomas, trading at pilatesmethodclub.com. For the purposes of data protection law, Georgia Thomas is the data controller for the personal data described in this notice.

What we collect and why

• Account details — your name, email address, and login credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Business information you enter — your business name, phone, address, studios, sessions, income, expenses, and invoices, used to provide the service (legal basis: contract).
• Support messages — if you contact us, we keep the conversation so we can help you (legal basis: legitimate interests).
• Usage and device data — basic telemetry, device identifiers, and IP address, used for security, fraud prevention, and improving the product (legal basis: legitimate interests).

Payment details are collected and processed by Paddle (our Merchant of Record) when you subscribe — we never see or store your card number.

Who we share data with

• Service providers — hosting, database, and analytics providers who process data on our behalf under contract.
• Paddle — our Merchant of Record, for the sale of your subscription, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — such as accountants or lawyers, where needed.
• Authorities — where we're required to by law.

International transfers

Some of our service providers are based outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

How long we keep data

We keep your data for as long as your account is active. When it's no longer needed — for example after you close your account — we delete or anonymise it, unless the law requires us to keep it longer (for example, tax records).

Your rights

Under UK GDPR you have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent where processing is based on consent. You can also complain to the Information Commissioner's Office (ICO). We'll respond to any request within one month — just contact us via pilatesmethodclub.com.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and strict access controls.

Cookies

Forma uses essential cookies only — the ones needed to keep you signed in and the app working. We don't use advertising or marketing cookies. You can clear cookies anytime in your browser settings, though signing in won't work without the essential ones.