Privacy Policy

Introduction and Who We Are

SF Studios knows that you care how information about you is used and shared, and we appreciate your trust in us to do that carefully and sensibly. This privacy notice (the “Privacy Policy”) describes the types of Personal Data we collect on the www.sfstudioslondon.com  website and via the SF Studios Ltd. App, (“Forum”), social media pages, online shop or one of our other products or services, all of which are part of SF Studios Ltd.’s platform (the “Platform”), the purposes for which we use the information, the circumstances in which we may share the information and the steps that we take to safeguard the information to protect your privacy. As used throughout this policy, the term “SF Studios” refers to SF Studios Ltd. SF Studios website (the “Site”) is operated and owned by SF Studios Ltd. SF Studios is committed to respecting and protecting your privacy.

The terms “SF Studios,” “we,” “us,” and “our” refer to SF Studios Ltd. and its affiliates. The terms “data subject”, “you,” “your,” and “yours” refer to the user/customer utilizing the Site.

Data Controller: Any personal information provided to or gathered by SF Studios is controlled by SF Studios, whose registered office is at: SF Studios Ltd., 5 Ella Mews, London, NW3 2NH.

You can contact us at info@sfstudioslondon.com or by phone on 0207 2841168

By visiting the SF Studios website and using our services, you are accepting and consenting to the practices described in this Privacy Policy

Key Terms

Controller: Person (or entity) determining the purpose and means of processing personal data.

Processor: Person (or entity) that processes data on behalf of the Controller.

Personal Data: is information that identifies you as an individual or relates to an identifiable person, such as name, postal address, telephone number, email address, payment details, credit card number, details of products or services you have purchased, social media account ID and information about your access to our website.

Sensitive Personal Data: Data that reveals race or ethnic origin, political opinions, religious or other beliefs, trade union membership, physical or mental health, sex life and criminal background.

Data Subject: A living individual subject of the data.

Data Breach: Any accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

GDPR: General Data Protection Regulation (EU) 2016/679 .

1. What Personal Data do we collect (including by automated means)?

We may ask for and collect your Personal Data (either directly through your use of the Platform or when you communicate with us in any other way, or indirectly through our third-party partners or providers) in a number of ways to provide you with the products or services that you request – please refer to Section 3 below for more information on how we use your Personal Data. We may also collect information from you automatically when you visit our Platform – for more information, please refer to our Cookie Policy available at the following webpage:

Specifically, we may (either directly or indirectly) collect the following categories of Personal Data:

  • First and last names, email address and date of birth (these are mandatory information which we require when opening a user account on the Platform (“User Account”));
  • other information such as country of residence and gender, home address and telephone number;
  • health information (as described further below), including health information generated by the devices (e.g. smart watches, heart monitors) that you connect to the SF Studios Ltd. App;
  • fitness/lifestyle activity data provided by you on the Platform or generated through your use of the SF Studios Ltd. App (e.g. workouts completed, duration), including activity data generated by the devices (e.g. smart watches, heart monitors) that you connect to the SF Studios Ltd. App;
  • information you provide about yourself and any preferences in your User Account;
  • information about yourself which you choose to post or share in the Forum;
  • we may take a digital photograph of each member to whom a membership card is issued. By providing the digital photograph to us, you are consenting to our using it in the manner set out in this Policy
  • information about your purchases of products and services from us or our third party partners who may provide or promote their own products or services through the Platform;
  • payment information, such as your credit card, if you purchase something directly on the SF Studios Ltd. Platform (like one of exercise videos);
  • information about your use of the Platform;
  • communications with us or directed to us via letters, emails, chat services, calls, and social media;
  •  where you have selected particular services or features on the Platform (e.g. scheduling your workouts, sharing your fitness activities with friends through social media platforms), your photos, audio, contacts and calendar information, as well as your social network information (including credentials and any information from your public posts about SF Studios Ltd. or your communications with us);
  • when you have elected to sign up and log into the Platform using a third-party account you created (e.g. through Facebook or Apple), information you have agreed to make available to us (e.g. name, email address, profile information, preferences);
  • we use CCTV in our SF Studios for health and security reasons, and so images of you at our premises may be collected. If you have any queries in relation to the use of CCTV operating in and around our clubs please contact us; and
  •  your location where:
  • the IP address of your computer or device is used to determine your geographic location so that we can customise your experience on the Platform (e.g. language settings); and
  • you elect to use location-based features on the Platform (in particular, the SF Studios Ltd. App) and turn on the location services settings on your device or computer (e.g. GPS and/or Bluetooth) so that we can track your real-time geographic location to record your fitness activities (for example, your running route).
  • Information that you provide by filling in forms on our site www.sfstudioslondon.com (“our site”). This includes information provided at the time of registering to use our site, subscribing to our service, posting material or requesting further services.
  • Details of transactions you carry out through our site, including invoicing, collecting payment and of the fulfilment of your orders. However, any financial information (including debit and credit card numbers) collected from you is used only in order to authorise payment and bill you for products and services and is not stored by us.
  • Details of your visits to our site including, but not limited to, traffic data, location data, web blogs and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.

We may also ask you for information when you report a problem with our site.  If you contact us, we may keep a record of that correspondence.  We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.

Health Information – Users may choose to enter health information into the SF Studios Ltd. App, like their height or weight, or, in specific circumstances, designed to protect the user, whether they are pregnant. SF Studios Ltd. may use or otherwise infer information about your health, including information about your medical conditions or requirements, as well as data on your physical characteristics from this information.

For users in jurisdictions that require it (Europe, the UK, South Africa, Canada, etc.), SF Studios Ltd. requires explicit consent from users before they can add their health data (like height and weight) into the App. You can withdraw your consent at any time within the Profile Menu in the SF Studios Ltd. App. Withdrawing consent will not prohibit you from using the SF Studios Ltd. App, but please note some functionality across the Platform, like tracking weight loss progress, will be disabled or may not function properly.

The Platform may require information about your physical health to provide certain functions or services, including when you use or interact with a wearable or other connected device that integrates with the Platform. If you choose not to provide certain health information, some functions or services within the Platform may be unavailable or not function properly.

You may withdraw your consent for SF Studios Ltd.’s processing of your health information in the Profile Menu in the SF Studios Ltd. App at any time. You can manage what data your device shares with SF Studios Ltd. in the settings panel or relevant application (e.g. Apple Health) on that device. As described more fully below, you may always contact us at the details in Section 11 below with any questions or requests about your Personal Data.

Linked Devices – Users may choose to connect a third party device (like an Apple Watch or fitness tracker) and enable that device to share location data (e.g. running route), fitness activity, or health information (e.g. heart rate, steps, water intake) it collects with SF Studios Ltd.. You can manage what data your device shares with SF Studios Ltd. in the settings panel or relevant application (e.g. Apple Health) on that device.

Children – Users must be of legal age in their respective countries and not under 16 years old, or you must have consent from your parent or guardian. Individuals are not allowed to sign up for a User Account on the Platform without verifying that they are 16 years or older. If you are a parent or legal guardian of a child who is under 16 years old who you believe has provided Personal Data to SF Studios Ltd., please contact us at the details in Section 11 if you want to exercise any of the rights available under applicable Data Privacy Law as set out in Section 6 below. 

SF Studios collects your personal information on the lawful basis of legitimate interest or in the case of health data by your explicit consent. The information we ask for (for example name, date of birth, address, email address) is to ensure our products and services are used as intended and minimises company loss. (For example it helps us prevent and detect the creation of duplicate accounts and therefore the taking advantage of our offers more than once.)

2. Why and how do we use your Personal Data?

Your Personal Data may be used for the following purposes:

2.1 Provide features of the Platform and the products and services you request:

We use the Personal Data you give us to provide the Platform and the products and services you request, including:

  • to create and set up your User Account;
  • to fulfil any orders for products that you place on the Platform, including to communicate with you about the orders and to process information for our internal accounting, billing and audit purposes;
  • to facilitate bookings of classes and appointments;
  • to process payments and maintain accounts and records;
  • if you use the Platform to track your fitness activity, we will collect and store this information so that you can review it on the Platform and track your progress. We may also use this information to calculate further information about your activity so that this can be provided to you as part of the functionality of the Platform;
  • if you choose to post in the Forum, the information that you share will be public information that can be accessed by anyone whether or not they are a part of the SF Studios Ltd. community. As the information posted to the Forum is public information, it will also be indexed and accessible via third party internet search engines, websites and apps.

2.2 Communicate information about our products and services and for other promotional purposes:

With your consent, or as otherwise permitted by applicable Data Privacy Law, we will use your Personal Data to provide information that we believe is of interest to you, prior to, during, and after your interactions with us, including marketing communications and news concerning our products, services, events and other promotions. You can opt-out at any time after you have given your consent to such communications. In providing tailored promotional materials to you, SF Studios Ltd. may use the personal information collected through your use of the Platform, such as the user preferences you set and profile data you submit, any fitness activity data generated through your use of the Platform, and any medical conditions or dietary preferences that you have identified to us.

2.3 Customer service communications:

we use your data to manage our relationship with you as our customer and to improve our services and enhance your experience with us (e.g. to respond to your inquiries when you reach out to us). From time to time, we may also conduct customer surveys to gauge satisfaction with our Platform and the services and products that we provide.

2.4 Administrative or legal purposes:

We use your Personal Data to operate our business, including for statistical and marketing analysis, systems testing and to diagnose technical and service problems, maintenance and development of our Platform, or in order to deal with a dispute or claim. We may also perform data analysis based on the data we collect from you for statistical and marketing analysis purposes – for example, we may use information about how users of our Platform search for and find specific workouts to better understand the best ways to organise and present the content that we offer.

2.5 Security, health, administrative, crime prevention/detection and legal purposes:

We may use your Personal Data to verify your information and identity, and to protect against, identify and prevent fraud and other unlawful activities. We may also share your Personal Data with government authorities or enforcement bodies for compliance with legal requirements, or as otherwise required or permitted by applicable Data Privacy Law.

2.6 Other purposes:

We may also use your Personal Data in other ways, and where we do so, we will provide specific notice at the time of collection and obtain your consent unless otherwise permitted by applicable Data Privacy Law.

We will only process your personal data where we have a legal basis to do so, which will depend on the reasons for which we have collected and need to use your personal data. In most cases we will need to process your personal data so that we can enter into contracts with you under our terms of use (when orders for products are made), and to fulfil the provision or delivery of goods or services to you on the Platform (including subscriptions to the Platform).

Our processing of your Personal Data for the above purposes is done pursuant to the following legal basis:

  • to comply with a legal obligation;
  •  the processing is necessary for the performance of a contract with you, such as providing you with our services on the Platform;
  • if it is in our legitimate interests to do so as a business (e.g., for administrative purposes or to improve the functionality of our Platform);
  • where you have consented to our using your personal data (e.g., for the collection of data pertaining to your health status or marketing related uses);
  • where you have made such information public; and
  • to protect your vital interests or those of another person (e.g. in case of a medical emergency).

Where we receive your Personal Data as part of providing our services to you based on a contract, we require such Personal Data to be able to carry out the contract. Without that necessary Personal Data, we will not be able to provide our services to you.

We also use your details to send you newsletters and promotions, and to conduct online surveys or surveys by telephone; prize draws; competitions and other promotions via email, telephone or post. We will also use the information in the course of collecting your payments that may be due to us from you.

Other than as set out in this Privacy Policy we will not share your personal information with third parties for marketing or any other purposes without your consent, unless we are required to do so by law. We operate an automatic opt-in policy which means that when you request information from us on one of our studios or make an enquiry we add you to our database.

3. Processing Your Data

MindBody (MindBody Inc.) is our main Data Processor. SF Studios stores and processes data using the MindBody platform for all our business activities.

As Data Controller SF Studios only allows the processing of your personal data to:

  • Ensure that content from our site is presented in the most effective manner for you and for your computer.
  • Provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
  • Carry out our obligations arising from any contracts entered into between you and us.
  • Allow you to participate in interactive features of our service, when you choose to do so.
  • Notify you about changes to our service.

For more details about how MindBody Inc. handles your data please see www.mindbodyonline.com/privacy-policy.  To read in more detail about the relationship of us and our Processor please see the Privacy Annex on the MindBody website: www.mindbodyonline.com/terms-of-service/privacy-annex

4. Where Your Data Is Stored

Your data is stored outside of the EEA and is also processed by staff operating outside the EEA who work for us. Such staff maybe engaged in, among other things, the fulfilment of your booking, the processing of your payment details and the provision of support services.

By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

All information you provide to us is stored on secure servers. Any payment transactions will be encrypted. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

We maintain physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personally identifiable information. Our security procedures mean that we may occasionally request proof of identity before we disclose personal information to you.

4.1 International transfers of your Personal Data

SF Studios Ltd. operates businesses in multiple jurisdictions, some of which are not located in the European Union or European Economic Area (“EEA”). The Personal Data that SF Studios Ltd. collects from users will be stored in United Kingdom, South Africa and/or the United States of America and might also be shared with third party data recipients (e.g. e-commerce and logistics providers such as Shopify, and Cloud-based online scheduling such as Mindbody) that are not located in the EEA, United Kingdom, South Africa or the United States of America. Therefore, the Personal Data that you provide to SF Studios Ltd. may be transferred internationally to countries other than the country in which you initially provided your data.

While countries outside the EEA do not always have strong data privacy laws, we take measures to protect your Personal Data as described in this Privacy Policy and in compliance with applicable Data Privacy Law. We also require all third party data recipients (including our service providers) to process your information in a secure manner and in accordance with the GDPR and other applicable Data Privacy Law (e.g. through the signing of the EU Standard Contractual Clauses). If you have further questions about this or would like to request to view copies of the applicable safeguards (where required), please contact us at the details in Section 11 below.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

4.2 Retention of your Personal Data

We will not retain your data for longer than is necessary to fulfil the purposes for which it is being processed. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process it, and whether we can achieve those purposes through other means.

We also consider the periods for which we might need to retain personal data in order to meet our legal obligations, or to deal with complaints and queries, and to protect our legal rights in the event of a claim being made.

In general, this means that we will likely keep your Personal Data for as long as your User Account is open. Following closure of your User Account, however, we may still retain a limited portion of your Personal Data so that we can maintain a continuous relationship with you if and when we are in contact with you again, and to comply with our internal processes and any legal obligations.

When we no longer need your personal data, we will securely delete or destroy it. We will also consider if and how we can minimise over time the personal data that we use, and if we can fully anonymise your personal data so that it can no longer be associated with you or identify you, in which case we may use that information without further notice to you.

Information that you have shared in the Forum will remain public even after you have closed your Forum account. Where you choose to delete content that you have posted to the Forum, the information will not be deleted from third party websites, apps or internet search engine indexes instantly as removal of the content depends on third party policies.

5. Who do we share your Personal Data with?

We may share your Personal Data with the following people for the purposes described in this Privacy Policy:

  • other companies and members within the SF Studios Ltd. group;
  • where you have selected particular services or features on the Platform (e.g. scheduling your workouts, sharing your fitness activities with friends through social media platforms), other Users of the Platform;
  • our trusted third party ancillary partners (identified on our website), who may offer products and services on or through our Platform. If you choose to purchase products or services offered on our Platform by third parties, you may be a customer of both SF Studios Ltd. and these third parties, and we and our partners may collect and share information about you, such as your contact details and your billing information. We are not responsible for third parties’ use of your personal data where such use is permitted for their own purposes. You should consult their privacy policies for further information;
  • third party social media platforms in various circumstances, including where you are able to access third party social media services through our Platform or before coming to our Platform;
  • you connect your User Account to your social media account, in which case we will receive from the social media platform the Personal Data you choose to share, based on the preferences and settings on your social media account. We will use this information in order to improve and personalize your use of our Platform;
  • third party social media sites have placed cookies or pixels on our website; and
  • we use social media plugins on our Platform (e.g. a “share” or “like” button), and your use of these plugins, may result in the disclosure of certain of your information to the social media platform in question, and possibly presented on your social media profile, to be shared with others in your network – however, we will only share your Personal Data with these social media platforms if you have provided your express consent for us to do so.

Please refer to the privacy policy of those third-party social media platforms to find out more about these practices:

  • other companies, contractors or agents that assist us in providing services to you, including our online e-commerce platform that allows us to sell and deliver our products and services to you (which may include Shopify), support ticketing (which may include Zendesk),provides cloud based online scheduling(which may include Mindbody) legal services, debt collection, administration services, customer services and information technology support;
  • only where you have provided consent, other companies, contractors or agents in connection with our marketing efforts, or marketing platform providers;
  • credit and debit card companies which facilitate your payments to us, and for anti-fraud screening, which may need information about your method of payment to process payment or ensure the security of your payment transaction. These may include third party payment gateway providers, including at www.stripe.com or www.paypal.com or
  • government authorities, law enforcement bodies and regulators for compliance with legal requirements, or where otherwise required by applicable Data Privacy Law; and
  • our legal and other professional advisers in order to enforce our legal rights in relation to our contract with you.

Where you choose to post information in the Forum, the information that you share will be public information which can be viewed by anyone (whether or not they are a part of our community). Information posted in the Forum will be indexed to third party internet search engines (such as Google), websites and apps.

We may also transfer your Personal Data to potential buyers in the event that we sell or transfer all of a part of our business or assets (including in the event of a reorganization or dissolution / liquidation), under strict non-disclosure restrictions, and solely in order to allow a buyer to determine whether to proceed with the transaction, or where such a determination is made, to complete it.

6. Your Rights and Choices

Under certain circumstances, by applicable Data Privacy Law you may have the right to:

6.1 Transparency

You have the right to request information about whether we hold Personal Data about you, and, if so, what that information is and why we are holding/using it.

6.2 Access

You may request access to your Personal Data (commonly known as a “data subject access request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it

6.3 Correction

You have the right to request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

6.4 Erasure

You can request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have exercised your right to object to processing.

6.5 Object

You may object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.

6.6 Automated Decision Making and Profiling

You may also object to automated decision-making including profiling, that is not to be subject of any automated decision-making by us using your Personal Data or profiling of you.

6.7 Restriction of Processing

You have the right to request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you, for example if you want us to establish its accuracy or the reason for processing it.

6.9 Withdraw consent

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your Personal Data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time by contacting us using the details in Section 11 below.

If you wish to exercise your rights related to your Personal Data (including the rights set out above), please contact the SF Studios Ltd. team using the details at the beginning of this Privacy Policy.

While you will generally not be required to pay a fee to access your Personal Data or to exercise any of your other statutory rights, we may charge a reasonable fee if your request for access is clearly completely unfounded, excessive or decline to comply with such requests where permitted by applicable Data Privacy Law.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it and to prevent unauthorised modification of your Personal Data.

You also have the right to lodge a complaint about our processing of your Personal Data with the body regulating data protection in the country or state / province in which you live. If the GDPR applies to our processing of your Personal Data, you have the right to lodge a complaint with a supervisory authority if you are not satisfied with how we process your Personal Data. Specifically, you can lodge a complaint in the Member State of the European Union of your habitual residence, place of work, or of the alleged violation of the GDPR.

7. Cookies

We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. For the same reason, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service.

We use the following cookies:

  • Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
  • Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  • Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  • Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests.

You can find more information about the individual cookies we use and the purposes for which we use them in the table below:

Please provide a valid CSV file.

We do not share the information collected by the cookies with any third parties.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.

8. Links to other websites

Our Platform may provide links to other websites for your convenience and information. These websites may operate independently from us. If you visit any website linked to our Platform, you are subject to that website’s own privacy policies. Linked websites may have their own privacy notices or policies, which we strongly suggest you review. To the extent any linked websites are not owned or controlled by us, we are not responsible for their content, any use of the websites, or the privacy practices of the websites.

9. Updates to this Privacy Policy

SF Studios Ltd. may revise and update this Privacy Policy at any time in its sole discretion by posting an updated Privacy Policy on the Platform. All such changes to the Privacy Policy are effective immediately when posted to the Platform and apply to all access to and use of the Platform thereafter.   Last update: 21st  February 2022

10. Marketing Communication Policy

If you are an existing customer, meaning that you registered an account on our website prior to 25/05/2018, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to those which were the subject of a previous sale to you. You can at any time unsubscribe any time by clicking “Unsubscribe” in the emails and following the instructions in the texts. Or by emailing Info@sfstudioslondon.com

If you are a new customer, we will contact you by electronic means only if you have clearly consented to this. This is shown by you ticking the relevant box on our registration form. SF Studios does not allow marketing communication to be sent to you from any of our affiliates or other third parties without seeking your consent first. You can unsubscribe any time as mentioned previously.

As discussed above, you can always choose not to provide information. If you do not want to receive e-mail or other mail from us, make unticked the “subscribe to our newsletter & Promotion” box on your profile or let us know in writing if you don’t want us to receive these offers. However, please note, if you do not want to receive legal notices from us, such as this Privacy Policy, those notices will still govern your use of SF Studios and it is your responsibility to review them for changes.

You can also update your account information by logging in to your account using the MindBody Portal. To access this page, you will be given the option to subscribe or unsubscribe through one of the following:

  • Your automated emails from MINDBODY
  • From the MINDBODY app or
  • Via the link in your client account online

After clicking on one of these links, you’ll notice the Data Options tab located next to Communication Preferences. Here you can request access to, remove or alter your data.

11. Our Processors

As data controller SF Studios accepts responsibility for setting clear guidelines to its processors regarding the storing and processing of your data for business and marketing purposes. This includes information collected through our website. In case of a data breach SF Studios will do what is legally available and necessary to protect your interests.

SF Studios affiliates only have access to information that you, the data subject, provide at the point of creating an account via the SF Studios website, (www.sfstudioslondon.com), “Book Now”, given that you have not otherwise interacted with those companies. SF Studios does not take responsibility for information provided to its affiliates that were not acquired at the point of registration on the SF Studios website or were not provided to us directly using other means of communication. For example, if you register an account with MindBody using www.mindbodyonline.com or the MindBody app, SF Studios does not take responsibility for personal information provided using those means.

  • MindBody: As explained in (3) is our main Data Processor. For details please read above.
  • Constant contact: We use Constant Contact to manage our mailing list for our newsletter and other marketing communication. Constantcontact only has access to your name and email address and is not authorised to send you marketing communication in relation to any of their products and services. Constantcontact does not sell lists or email addresses. For more information please see: https://www.endurance.com/privacy
  • Perkville: Perkville is the company that allows you to create points every time you use SF Studios services. You then can use those points to turn them into perks. Perkville has the same information of you as us. The data is only processed for business purposes and to be able to identify you if there is a problem with your account. For more information please see: https://www.perkville.com/privacy/

Please note that our Data Processors use Sub-Processors to be able to fulfil their tasks. Sub-Processors are bound by the GDPR as long as they handle personal date of EEA citizens. In addition, agreements between Processors and Sub-Processors cannot violate agreements between the Data Controller and the Data Processor.

12. Disclosure Of Your Information

We may disclose your personal information to third parties:

  • In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
  • If our business or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
  • If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions of supply and other agreements; or to protect the rights, property, or safety of our business, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

13.     Your Right To Complain

If you have concerns about how we process your data, your initial contact should be with our Data Protection Officer (details above). If you are not satisfied with the outcome, you can contact the Information Commissioner’s Office via their website at www.ico.org/concerns or write to them at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

COUNTRY SPECIFIC ADDITIONAL TERMS

If you live in one of the following countries or states, these Additional Terms apply and override any inconsistent terms in the Privacy Policy:

CANADA

1.    Section 3.6 (Other purposes) is replaced with the following: ” We may also collect, use and disclose your Personal Data in other ways, and where we do so, we will obtain your further consent “.

2.    We will only process your personal data where required to operate the Platform, provide you with products and services, and to operate our business, including for the purposes outlined in this Privacy Policy. In most cases, we will need to process your personal data so that we can enter into contracts under our terms of use (when orders for products are made), and to fulfil the provision or delivery of goods or services to you on the Platform (including subscriptions to the Platform).

3.    In addition to the purposes set out elsewhere in the policy, SF Studios Ltd. may collect, use and disclose your Personal Data for marketing and analytics purposes, including to display targeted advertising, based on your interests as inferred from web activity, when you visit other sites around the web or as you use various social media platforms. Please see our Cookie Policy for further details, including how you can control the use of your Personal Data for targeted advertising purposes.

4.    By using the Platform or otherwise providing us with your Personal Data, you agree to the collection, use and disclosure of your Personal Data as set out in this Privacy Policy.

5.    We may also collect, use and disclose your Personal Data without your consent, as required or permitted by applicable Data Privacy Law, such as to use or disclose your Personal Data in the case of an emergency that threatens the life, health or security of you or another individual.”

6.    Section 4.2 (International transfers of your Personal Data) is replaced with the following: ” SF Studios Ltd. operates businesses in multiple jurisdictions, some of which are not located in your country of residence. The Personal Data that SF Studios Ltd. collects from users will be stored in South Africa and/or the United States of America and might also be stored or processed through third party service providers (e.g., e-commerce and logistics providers such as Shopify, and customer support providers such as Zendesk) in other countries. Therefore, the Personal Data that you provide to SF Studios Ltd. may be transferred internationally to countries other than the country in which you initially provided your data “.

7.    When transferring Personal Data to a third party service provider, or outside of your home country, we take measures to protect your Personal Data as described in this Privacy Policy and in compliance with applicable Data Privacy Law. Using contractual and other means, we also require all third party data recipients (including our service providers) to process your information in a secure manner and in accordance with the applicable Data Privacy Law in your country of residence. However, when stored or processed in another country, your Personal Data will be subject to the applicable Data Privacy Law of that country, which may not provide the same protections as the applicable Data Privacy Law in your country of residence. If you have further questions about this or would like to request to view copies of the applicable safeguards (where required), please contact us at the details in Section 11.

8.    The section dealing with the payment of a fee to access your Personal Data in Section 6 is replaced with the following: ” While you will generally not be required to pay a fee to access your Personal Data or to exercise any of your other statutory rights, where permitted by applicable Data Privacy Law, we may charge a reasonable fee if your request for access would require an exceptional amount of effort, or may decline to comply with frivolous or vexatious requests “.

CALIFORNIA, UNITED STATES OF AMERICA

The Privacy Policy and this Section of the Additional Terms were last reviewed on 3 June 2021. The provisions in this Section are intended to fulfil the requirements of the California Consumer Privacy Act (“CCPA”) and shall apply to Users who are resident in California.

To the extent that any terms used in this Privacy Policy and this Section of the Additional Terms are defined in the CCPA, such definitions shall apply. The term “Personal Data” as used in this Privacy Policy and this Section of the Additional Terms shall include “Personal Information” as such term is defined in the CCPA.

The categories of Personal Data collected by SF Studios Ltd. in the last 12 months are described in Section 2 of the Privacy Policy and, for the purposes of the CCPA, correspond to the following categories of Personal Information listed in the CCPA:

 

 

Please provide a valid CSV file.

The categories of third parties with whom SF Studios Ltd. shares each category of personal data are as follows:

Please provide a valid CSV file.

We may also disclose your Personal Data to government authorities, law enforcement bodies and regulators for compliance with legal requirements, or where otherwise required by applicable Data Privacy Law and to our legal and other professional advisers in order to enforce our legal rights in relation to our contract with you.

SF Studios Ltd. processes each category of your Personal Data described above for purposes described in Section 3 of the Privacy Policy. We will not process your Personal Data for purposes which are materially different, unrelated, or incompatible with the purposes set out in the Privacy Policy without providing you notice.

In the last 12 months, we have disclosed to third parties all of the categories of Personal Data listed in the table above for a business purpose.

"Sale" of Data:

SF Studios Ltd. generallydoes not sell your Personal Information in the conventional sense (i.e., for money). Like many companies, however, we use services that help deliver interest-based ads to you. As part of this process, we may transferPersonal Information to business partners (like Facebook or TikTok) for their use as they help us deliver interest-based ads. MakingPersonal Information (such as online identifiers or browsing activity) available to these companies to use outside of SF Studios Ltd.’s direction may be considered a “sale” under the CCPA. To request that SF Studios Ltd. not “sell” your Personal Information, please email to Info@sfstudioslondon.com.

California Consumer Rights:

Users who are resident in California may have the following rights under the CCPA in addition to the rights set out in Section 6 of the Privacy Policy:

1. The Right to "Opt Out"

You have the right to direct us to not sell your personal information at any time (the “right to opt-out”). As described above, SF Studios Ltd. doesn’t sell any of your information in the conventional sense. However, SF Studios Ltd. may provide information about you to third party advertising partners (like Facebook or TikTok), and this may constitute a “sale” under the CCPA.  To exercise the right to opt-out of this kind of information transfer, you (or your authorized agent) may submit a request to us by emailing  to Info@sfstudioslondon.com.

. If you change your mind, you can opt in as described below. We will only use personal information provided in an opt-out request to review and comply with the request.

1. The Right to "Opt In"

If you change your mind about opting out of the “sale” of your data and would like SF Studios Ltd. to resume providing your information to these advertising partners, you may contact us at Info@sfstudioslondon.com at any time.

1. Access:

Once we receive and confirm your verifiable consumer request, we will disclose the following to you:    

1.    the categories of your Personal Data and the specific Personal Data that we have collected;

2.    the categories of sources from which your Personal Data was collected;

3.    our business or commercial purpose for collecting your Personal Data; and the categories of third parties with whom we share your Personal Data, and where such third parties received your Personal Data from us for a business purpose, the categories of your Personal Data that we disclosed to such third parties.

4.    Under the CCPA, you are only entitled to exercise the Personal Data access right twice a year.

2. Deletion:

Once we receive and confirm your verifiable consumer request, we will (and will direct our service providers to whom we have disclosed your Personal Data to) delete your Personal Data unless an exception under the CCPA applies. The rights set out above do not apply to Personal Data collected from SF Studios Ltd.’s employees as part of their employment with SF Studios Ltd. or Personal Data collected as part of a business-to-business transaction. To exercise any of the rights set out above, please contact the SF Studios Ltd. team using the contact details set in Section 11 of the Privacy Policy. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Data. As set out in Section 6 of the Privacy Policy, we may need to request specific information from you to help us confirm that your request is a verifiable consumer request.

1. Exercising your right under the CCPA:

Verification of your identity to respond to your request to know and delete

To evaluate your request to know or delete, we may request additional information to verify your identity. We will only use the Personal Data you provide us in a request to verify the requestor’s identity or authority to make the request. Please note that you may only make a consumer request to know or data portability request twice within a 12-month period.

1.    Section 6 of the Privacy Policy is supplemented as follows:
Response Timing and format of our responses

If we need to charge a fee for a request which is excessive, repetitive, or manifestly unfounded, we will explain why we made that determination and provide you with a cost estimate before completing your request.
We will reply to all requests within 30 days, or inform you in writing if additional time is required. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will send our written response by mail or electronically, at your option.
If we cannot satisfy your request, we will also explain why in our response.

Authorized agent

You may appoint an authorized agent to exercise any of your privacy rights on your behalf, if the authorized agent is a natural person or a business entity registered with the Secretary of State of California.
To appoint an authorized agent, you must also sign a written declaration giving the authorized agent permission to act on your behalf., or you can appoint such agent via a power of attorney pursuant to Probate Code sections 4000 to 4465.
To verify that your authorized agent acts on your behalf, we will ask for this written permission from your agent or for the power of attorney. In case you provided your authorized agent with a written permission, we will require that you also verify your identity and we may also ask you to directly confirm with us that you provided the authorized agent permission to submit the request.
We will deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.
We will not discriminate against you for exercising any of your rights under the CCPA. Specifically, unless permitted by the CCPA, we will not:

1.    deny you access to goods and/or services provided by us on the Platform;

2.    charge you different prices or rates for the goods and/or services provided by us on the Platform, or imposing penalties on you;

3.    provide you with a different level or quality of goods and/or services than otherwise generally provided by us on the Platform; or

4.    suggest that you will receive a different price or rate for, or a different level or quality of, the goods and/or services generally provided by us on the Platform.