Privacy Policy

Effective Date: 10 November 2025
Last Updated: 10 November 2025

At One Flow, your privacy matters to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website oneflow.uk, related services, or any digital platforms operated by One Flow (collectively, the "Services").

By using our Site or Services, you agree to this Privacy Policy.

One Flow ("we", "us", "our") is an online platform that connects learners and tutors for yoga, mindfulness, and related wellness courses. If you have questions about this policy or your data, you can contact us at:

Data Controller: One Flow
📧 Email: support@oneflow.uk
🏢 Registered Address:
ICO Registration No:

We collect information to provide and improve our Services. The data we collect falls into three categories:

A. Information You Provide Directly

• Account details: Name, email address, phone number, password, and profile photo.
• Payment information: Billing details, transaction IDs (payment details are processed securely by third-party providers like Stripe or PayPal — we never store full card details).
• Tutor information: Biography, qualifications, certifications, class listings, availability, and related content.
• Communication: Messages, reviews, and support requests sent through our platform or email.
• Consent and preferences: Marketing opt-ins, cookies, and account settings.

B. Information Collected Automatically

• Usage data: IP address, browser type, device identifiers, operating system, referring URLs, and page interactions.
• Cookies and similar technologies: To track preferences, analyse traffic, and improve user experience. You can control or delete cookies via your browser settings.

C. Information from Third Parties

• Payment processors, analytics services, advertising partners, or social sign-in providers (e.g., Google, Facebook) if you use them to log in.

We process personal data to:

• Provide and manage services – including user accounts, class bookings, course access, and payments.
• Enable communication – between students, tutors, and our support team.
• Personalise your experience – recommend relevant courses or content.
• Improve and secure the platform – monitor performance, detect fraud, and fix technical issues.
• Comply with legal obligations – such as tax and accounting requirements.
• Send marketing updates – only if you've opted in; you can unsubscribe anytime.

We process personal data to:

• Provide and manage services – including user accounts, class bookings, course access, and payments.
• Enable communication – between students, tutors, and our support team.
• Personalise your experience – recommend relevant courses or content.
• Improve and secure the platform – monitor performance, detect fraud, and fix technical issues.
• Comply with legal obligations – such as tax and accounting requirements.
• Send marketing updates – only if you've opted in; you can unsubscribe anytime.

We may share your data with:

• Tutors and learners — to facilitate classes and communication.
• Payment processors — such as Stripe, PayPal, or other PCI-compliant providers.
• Service providers — hosting, analytics (e.g., Google Analytics), email services, and IT support.
• Legal authorities — when required by law, to prevent fraud or protect rights.
• Business transfers — if we merge, sell, or reorganise our company, your data may be part of the transfer.
  We do not sell your personal data.

If your information is transferred outside the UK or European Economic Area (EEA), we ensure it's protected using appropriate safeguards (e.g., Standard Contractual Clauses or equivalent protections under UK law).

We retain your data only as long as necessary to:

• Fulfil the purpose for which it was collected, or
• Comply with legal, tax, or regulatory requirements.
  Inactive accounts may be deleted after [e.g., 24 months] of inactivity. You may request deletion at any time (see section 9).

We use appropriate technical and organisational measures to protect your data from unauthorised access, loss, misuse, or alteration. These include encryption (SSL), secure data storage, access controls, and regular monitoring.

However, no online system is 100% secure, so we cannot guarantee absolute security.

Under UK and EU GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete information.
• Request deletion ("right to be forgotten").
• Restrict processing in certain cases.
• Data portability – receive a copy of your data in a structured format.
• Object to processing based on legitimate interests or direct marketing.
• Withdraw consent where processing is based on consent.

We use cookies and similar technologies to improve functionality and analyse usage.

• Essential cookies – required for the site to function.
• Analytics cookies – help us understand usage patterns.
• Marketing cookies – used only with consent.

You can manage cookie preferences in your browser or via our cookie banner. See our Cookie Policy for more details.

If you've opted in, we may send updates about new classes, offers, or features. You can unsubscribe anytime by clicking the "unsubscribe" link in our emails or updating your preferences in your account.

Our Services are not directed to children under 16 years old. If we become aware that we have collected personal data from a child without parental consent, we will delete it promptly.

Our Site may contain links to third-party websites (e.g., tutor pages or partner offers). We are not responsible for the privacy practices of those websites. Please review their policies before sharing personal data.

We may update this Privacy Policy periodically. We'll post the new version on this page and update the "Effective Date." If changes are significant, we'll notify you by email or platform notice.

If you have any questions, concerns, or complaints about how we handle your data, contact:

One Flow Privacy Officer
📧 Email: support@oneflow.uk

If you're unsatisfied with our response, you may contact the Information Commissioner's Office (ICO) at https://ico.org.uk.