Privacy Policy

Last updated: October 2026

MEGASMART LTD (company no. 16364392), trading as StudioWhirl (“StudioWhirl”, “we”, “us”, or “our”) provides booking and membership software for yoga studios, gyms, martial arts schools, and boutique fitness studios (the “Service”). This Privacy Policy explains what information we collect from studio owners, instructors, and members, how we use it, and the choices you have.

1. Information we collect

We collect information you provide directly to us, including:

  • Account information such as your name, email address, studio or business name, and password.
  • Billing information such as your billing address, collected and processed securely by our payment provider, Stripe.
  • Operational data you or your studio input into the Service, such as class schedules, pricing, instructor rosters, membership tiers, and booking policies.
  • Member information entered during booking, such as name, email, phone number, and class or membership selections.
  • Communications you send to us, such as support requests, onboarding questions, and feedback.

We also collect information automatically when you use the Service, including:

  • Log and usage data (IP address, browser type, pages visited, timestamps, referring URLs).
  • Device information (device type, operating system, and identifiers).
  • Cookies and similar tracking technologies, as described in our Cookie Policy.

2. How we use your information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including class booking, scheduling, and membership management.
  • Process bookings and StudioWhirl plan purchases, and send related confirmations, receipts, and reminders.
  • Communicate with you about account activity, product updates, security alerts, and support messages.
  • Monitor and analyze usage to understand how studios and members use StudioWhirl and to improve the product.
  • Detect, investigate, and prevent fraudulent transactions or unauthorized activity.
  • Comply with our legal, tax, and accounting obligations.

We do not sell your personal information to third parties.

3. How we share your information

We do not sell your personal information. We may share it with:

  • Service providers (sub-processors) who perform functions on our behalf, listed in Section 5.
  • The studio you booked with, or the studio's staff, when you book a class or membership through their StudioWhirl booking page — studios need this information to manage their own rosters and schedules.
  • Other members of your studio's team, where a studio owner has granted them dashboard access to bookings or schedules.
  • Law enforcement, regulators, or other parties where required by law, legal process, or to protect the rights, property, or safety of StudioWhirl, our customers, or the public.
  • A successor entity in the event of a merger, acquisition, financing, or sale of some or all of our assets.

4. Payment information

Payments for StudioWhirl plans are processed by Stripe (PCI DSS Level 1). StudioWhirl does not store card numbers on its own servers. Stripe's own privacy policy governs how payment data is collected, transmitted, and stored during checkout.

5. Sub-processors

We use the following sub-processors to run the Service:

  • Stripe Payments UK Ltd / Stripe, Inc.: payment processing for StudioWhirl plans (UK and United States).
  • Cloudflare, Inc.: website hosting, content delivery, security, and cookieless web analytics (United States, global network).

Where a sub-processor processes personal data outside the UK, the transfer is covered by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or the UK Extension to the EU-U.S. Data Privacy Framework. We will update this list before adding a new sub-processor.

6. Legal bases for processing (UK GDPR)

We only process personal data where the UK GDPR gives us a legal basis:

  • Contract: to create your account, take payment for your plan, and provide the Service.
  • Legitimate interests: to keep the Service secure, prevent fraud, and improve the product, balanced against your rights.
  • Consent: for optional communications such as marketing emails, which you can withdraw at any time.
  • Legal obligation: to keep tax and accounting records and respond to lawful requests from authorities.

7. Data retention

We retain account and booking data for as long as your account is active, and for a reasonable period afterward as needed to comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. You may request deletion of your data as described in Section 10.

8. Data security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, access controls, and regular reviews of our systems and dependencies. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See our Security page for more detail on our practices.

9. International data transfers

Your information may be transferred to, and processed in, countries other than the one in which you or your studio is located. Where this occurs, we take steps to help ensure such transfers comply with applicable data protection laws.

10. Your rights and choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. Studio owners and members can exercise these rights at any time by contacting our support team through the Contact page; we aim to respond within one business day.

You can complain to the ICO (ico.org.uk), the UK's data protection authority, if you are unhappy with how we handle your personal data.

11. Children's privacy

The Service is intended for use by studio owners, instructors, and adult members. It is not directed to individuals under 18, and we do not knowingly collect personal information from children. Where a studio manages bookings for minors (for example, a youth martial arts class), the studio — not StudioWhirl — is responsible for obtaining any necessary parental consent.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify active accounts of material changes by email and by posting the updated policy on this page and updating the “Last updated” date above.

13. Contact us

If you have questions about this Privacy Policy or our data practices, please reach out via our Contact page and we'll get back to you within one business day.

You can also contact MEGASMART LTD by email at info@studiowhirl.com, by phone on +44 7575 385352, or by post at MEGASMART LTD, 109 Clarence Road, Manchester, England, M13 0ZE.