Privacy Policy
Last updated: 6 September 2025

This Privacy Policy explains how LERÉI Ltd. ("we", "us", or "our") collects, uses, and protects your personal data when you use our website www.lerei.com or our services. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are
Business name: LERÉI Ltd.
Address: 171 Brompton Rd, London, United Kingdom, SW3 1NF
Website: www.lerei.com
Contact email: info@lerei.com
LERÉI Ltd. is the data controller of the personal data we collect about you.

2. Personal data we collect
We collect the following types of information when you interact with us:
Contact details - your name, email address, phone number.
Account and booking details - information you provide when booking classes or creating an account.
Payment information - processed securely via our third-party payment provider. We do not store full card details.
Technical data - IP address, browser type, device information, collected through cookies and analytics tools (see Section 6).
We do not collect or process health or medical information through our website.

3. How we use your data
We use your data for the following purposes:
To process bookings and provide our services.
To manage payments and invoicing.
To communicate with you about your bookings, account, or enquiries.
To send you updates and marketing (if you've opted in or if you're an existing client).
To analyse website traffic and improve our online services.

4. Legal bases for processing
We rely on the following lawful bases under the UK GDPR:
Contract to provide services you request (e.g. booking a class, taking payment).
Legal obligation - to keep necessary records (e.g. tax and financial records).
Legitimate interest - to market similar services to existing clients, to improve our services, and to prevent fraud.
Consent - where required, for direct marketing to new subscribers and for non-essential cookies.

5. Sharing your data
We share your personal data with:
Hapana - our booking and marketing platform.
Payment processors - Stripe who handle your online payments securely.
Analytics providers - Google Analytics and Meta Pixel, to track website performance and advertising effectiveness.
We will never sell your personal data to third parties.

6. Cookies and tracking
Our website uses cookies and similar technologies to:
Enable website functionality.
Measure website traffic and performance (via Google Analytics).
Deliver personalised advertising (via Meta Pixel).
When you first visit our site, you will be asked to accept or reject non-essential cookies.
You can also manage cookies through your browser settings.

7. Data retention
Marketing data - retained in accordance with UK law and ICO guidance (typically until you withdraw consent or opt out, or for up to 24 months of inactivity).
Booking and financial records - kept for at least 6 years, as required by UK tax law.
Other data - retained only as long as necessary for the purposes outlined above.

8. International transfers
Some of our providers (e.g. Hapana, Google, Meta) may transfer data outside the UK.
Where this happens, we ensure appropriate safeguards are in place, such as UK Addendum to EU Standard Contractual Clauses.

9. Your rights
Under UK data protection law, you have the right to:
Access your personal data.
Request correction of inaccurate data.
Request deletion of your data (where legally possible).
Object to processing based on legitimate interests.
Withdraw consent for marketing at any time.
Data portability (in certain circumstances).
To exercise your rights, please contact us at [Insert contact email].
You also have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk

10. Changes to this policy
We may update this Privacy Policy from time to time.
Any updates will be posted on this page with the "last updated" date above.