Privacy policy

AÉRIS FORM

Privacy Notice

Last updated: 17 August 2026

At AÉRIS FORM, privacy is treated with the same care and consideration as every other part of your experience with us.

This Privacy Notice explains how we collect, use, store, share and protect your personal information when you visit our website, join our waitlist, subscribe to our emails, contact us, create an account, make a booking, purchase a membership, class collection, gift or product, attend the AÉRIS studio, or otherwise interact with us.

It also explains your rights in relation to your personal information.

We process personal information in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (“PECR”), the Data (Use and Access) Act 2025 and other applicable legislation as amended from time to time.

1. WHO WE ARE

The data controller responsible for your personal information is:

MONTROSE ARC LTD
trading as AÉRIS FORM

Company number: 17184664
Registered office: 124 City Road, London, United Kingdom, EC1V 2NX
Website: www.aerisform.co.uk
Privacy enquiries: team@aerisform.co.uk

Montrose Arc Ltd is registered in England and Wales.

Where this Privacy Notice refers to “AÉRIS”, “AÉRIS FORM”, “we”, “us” or “our”, it means Montrose Arc Ltd trading as AÉRIS FORM.

You may contact us at any time regarding this Privacy Notice or our use of your personal information.

2. PERSONAL INFORMATION WE MAY COLLECT

The information we collect depends on how you interact with AÉRIS.

We may collect and process the following categories of personal information.

Identity information

This may include:

  • your name;

  • title;

  • date of birth or age where relevant;

  • username or account identifier; and

  • other information required to identify or administer your account.

Contact information

This may include:

  • email address;

  • telephone number;

  • postal address;

  • billing address;

  • delivery address; and

  • emergency contact details where appropriate.

Waitlist information

If you join the AÉRIS waitlist, we may collect:

  • your name;

  • email address;

  • telephone number where requested;

  • preferred class days;

  • preferred class times;

  • preferred studio times or availability;

  • your marketing preference; and

  • other information you voluntarily provide through the waitlist form.

We use this information to administer and understand demand for the AÉRIS waitlist, plan our class timetable and communicate with you about the waitlist and studio launch where appropriate.

Account, membership and booking information

Where our booking and membership services are available, we may collect:

  • account details;

  • membership type;

  • membership start date;

  • membership renewal information;

  • freezes, pauses or cancellations;

  • class-credit balances;

  • classes booked;

  • classes attended;

  • cancellations;

  • late cancellations;

  • no-shows;

  • waiting-list activity;

  • booking preferences;

  • membership benefits;

  • complimentary items or benefits redeemed; and

  • communications relating to your membership or bookings.

Transaction and payment information

If you make a purchase from AÉRIS, we may process:

  • products or services purchased;

  • order number;

  • transaction amount;

  • payment status;

  • billing details;

  • refunds;

  • credits;

  • chargebacks; and

  • limited information about the payment method used.

Payment-card information will generally be processed directly by specialist payment providers.

We do not ordinarily receive or store your complete payment-card number or card security code.

Retail, delivery and gift information

If you purchase products, gifts or gift experiences, we may process:

  • products ordered;

  • delivery information;

  • delivery recipient details;

  • gift recipient details;

  • gift messages;

  • delivery instructions;

  • returns;

  • exchanges; and

  • associated customer-service correspondence.

If you provide another person's details to us, for example when sending an AÉRIS gift, you should ensure that you are entitled to provide their information.

Health and participation information

When you participate in AÉRIS classes or services, we may ask you to provide information relevant to your safe participation.

This may include information concerning:

  • injuries;

  • physical limitations;

  • pregnancy;

  • relevant health conditions;

  • previous surgery;

  • mobility restrictions;

  • allergies where relevant;

  • medication where directly relevant to safe participation;

  • emergency information; and

  • information you voluntarily disclose to an instructor that may affect your participation.

Information concerning your health is classed as special-category personal data under UK data protection law and receives additional protection.

We will only collect health information where we have a genuine reason to do so and will aim to collect no more information than is reasonably necessary.

Where required, we will obtain your explicit consent to process health information for the relevant purpose.

We may also process health information where another lawful condition applies, including where necessary in relation to legal claims or, in limited circumstances, to protect someone's vital interests.

Providing health information to AÉRIS does not create a doctor-patient relationship, and AÉRIS instructors do not provide medical diagnosis or treatment.

Communications

If you contact AÉRIS, we may retain information contained within communications made through:

  • email;

  • telephone;

  • our website;

  • booking platforms;

  • WhatsApp;

  • social media;

  • customer-support services;

  • online messaging services; or

  • in person.

This may include the contents of your enquiry and our response.

Marketing and communication preferences

We may process:

  • whether you have opted into marketing;

  • the date and method of your consent;

  • marketing preferences;

  • email subscription status;

  • unsubscribe requests;

  • engagement with marketing emails;

  • emails opened;

  • links selected;

  • offers or promotions you respond to; and

  • interests inferred from your interactions with AÉRIS where permitted by law.

Website and technical information

When you use our website, we and our technology providers may collect information including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate location derived from IP address;

  • website pages viewed;

  • links selected;

  • referral source;

  • dates and times of visits;

  • session information;

  • cookie identifiers; and

  • information concerning how you interact with our website.

Further information is available in our Cookie Policy and through our cookie-preference controls.

CCTV information

If CCTV is used at an AÉRIS premises, we may record images for purposes including:

  • security;

  • crime prevention and detection;

  • protection of clients, employees, visitors and property;

  • health and safety; and

  • investigation of incidents.

Appropriate signage will be displayed wherever CCTV operates.

CCTV will not be installed in areas where individuals have a particularly high expectation of privacy, such as toilets or changing facilities.

Accident, incident and safety information

If an accident, injury, safeguarding concern, security incident or other significant event occurs, we may record information concerning:

  • the people involved;

  • witnesses;

  • circumstances of the incident;

  • injuries;

  • action taken;

  • emergency assistance provided;

  • insurance matters; and

  • associated evidence or communications.

3. HOW WE COLLECT PERSONAL INFORMATION

We may collect information directly from you when you:

  • visit our website;

  • join the AÉRIS waitlist;

  • subscribe to emails;

  • complete a form;

  • contact us;

  • create an account;

  • book a class;

  • purchase a membership;

  • purchase a Class Collection;

  • purchase an introductory offer;

  • purchase a gift or retail product;

  • make a payment;

  • complete a health or participation questionnaire;

  • attend the studio;

  • contact an instructor;

  • participate in a promotion;

  • respond to a survey;

  • provide feedback;

  • interact with us on social media; or

  • otherwise communicate with AÉRIS.

We may also receive personal information from third parties involved in providing our services, including website platforms, booking providers, payment providers, delivery services, technology providers and marketing platforms.

4. HOW AND WHY WE USE YOUR INFORMATION

We only process personal information where we have an appropriate lawful basis for doing so.

Depending on the circumstances, this may include the following.

Providing a service or performing a contract

We may process information where necessary to enter into or perform a contract with you.

This can include:

  • administering the AÉRIS waitlist;

  • creating and administering accounts;

  • managing memberships;

  • managing class bookings;

  • administering class credits;

  • managing waiting lists;

  • fulfilling purchases;

  • arranging deliveries;

  • processing payments;

  • issuing refunds;

  • providing membership benefits;

  • dealing with cancellations;

  • communicating important information about a booking, purchase or membership; and

  • providing customer support.

Our legitimate interests

We may process information where reasonably necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

These interests may include:

  • operating AÉRIS effectively;

  • understanding demand for classes and opening hours;

  • improving our customer experience;

  • managing studio capacity;

  • improving products and services;

  • managing customer relationships;

  • maintaining appropriate business records;

  • protecting our business;

  • preventing fraud and misuse;

  • maintaining website and information security;

  • understanding business performance;

  • handling complaints;

  • establishing, exercising or defending legal claims; and

  • protecting clients, employees and property.

Where we rely on legitimate interests, we consider those interests against your rights, freedoms and reasonable expectations.

Compliance with legal obligations

We may process personal information where necessary to comply with legal or regulatory obligations, including:

  • accounting obligations;

  • tax obligations;

  • health and safety requirements;

  • data-protection requirements;

  • responding to lawful requests from regulators;

  • responding to court orders;

  • maintaining records required by law;

  • cooperating with law enforcement where legally required; and

  • meeting other applicable statutory requirements.

Consent

Where appropriate, we may rely on your consent.

This may include consent relating to:

  • email marketing;

  • certain cookies and tracking technologies;

  • processing certain health information;

  • photography or promotional content where consent is appropriate; and

  • other optional activities.

Where we rely on consent, you may withdraw it at any time.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

5. WAITLIST DATA

If you submit the AÉRIS waitlist form, we will use the information you provide to:

  • record your interest in AÉRIS;

  • administer the waitlist;

  • understand preferred class days and times;

  • assist us in planning our timetable and studio services;

  • communicate relevant information concerning your waitlist registration; and

  • where appropriate, notify you about the AÉRIS studio launch or availability connected with the waitlist.

Submitting the waitlist form does not automatically mean that you have agreed to receive unrestricted promotional marketing from us.

Where we ask whether you would like to receive broader AÉRIS marketing by email, this will be presented separately.

You are free to join the waitlist without opting into broader marketing where the form provides that choice.

6. EMAIL MARKETING

Where you have opted to receive marketing from AÉRIS, we may send you emails concerning matters such as:

  • studio news;

  • the AÉRIS launch;

  • class releases;

  • timetable updates;

  • memberships;

  • events;

  • products;

  • gifts;

  • services;

  • promotions; and

  • occasional offers.

Where applicable, we may also send electronic marketing where another lawful basis permitted under UK electronic-marketing rules applies.

You can unsubscribe from marketing at any time by:

Unsubscribing from marketing does not prevent us from sending necessary service communications relating to an active booking, order, membership, account or other service you have requested.

We may retain limited information about an unsubscribe request in a suppression list so that we can continue to respect your preference.

7. HEALTH AND SPECIAL-CATEGORY INFORMATION

Health information receives additional protection under UK data protection law.

Where AÉRIS processes health information, we will identify both:

  • an appropriate lawful basis under Article 6 UK GDPR; and

  • an appropriate special-category condition under Article 9 UK GDPR.

Where appropriate, this may include obtaining your explicit consent.

Health information may be used to:

  • assist instructors in understanding information relevant to safe participation;

  • identify appropriate modifications;

  • respond to an injury or emergency;

  • record accidents or incidents;

  • consider whether further professional or medical advice may be appropriate;

  • support reasonable adjustments where appropriate; and

  • establish, exercise or defend legal claims where necessary.

Access to health information will be restricted to people who reasonably require access.

You should not provide AÉRIS with health information that is unrelated to your participation or safety.

8. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies, pixels, local storage and similar technologies.

These may be used to:

  • make the website function correctly;

  • maintain security;

  • operate forms;

  • remember preferences;

  • enable accounts and checkout;

  • understand website performance;

  • analyse how visitors use the website;

  • improve our services; and

  • where appropriate consent has been obtained, support advertising or marketing.

Where consent is legally required, relevant non-essential technologies will not be used for the relevant purpose until appropriate consent has been obtained.

You can manage available choices through our cookie-preference controls.

Further information will be available through our Cookie Policy.

9. PAYMENT PROCESSING

Payments may be processed on our behalf by specialist payment providers.

Depending upon the payment method used, those providers may process:

  • name;

  • billing information;

  • payment-card or account information;

  • transaction details;

  • IP address;

  • device information; and

  • information used for payment security and fraud prevention.

Payment providers may act as independent data controllers for some processing and as processors acting on our behalf for other processing.

Their use of your information may therefore also be governed by their own privacy notices.

AÉRIS does not seek to store full card information where this is handled securely by a payment provider.

10. WHO WE MAY SHARE YOUR INFORMATION WITH

We do not sell your personal information.

We may share personal information with organisations that help us operate AÉRIS where this is reasonably necessary and lawful.

These may include:

Website and ecommerce providers

Including Shopify and associated service providers used to host, manage and operate our website and ecommerce services.

Studio booking and membership providers

Including Momence, where used, or another booking or membership platform that we may use to manage:

  • accounts;

  • bookings;

  • memberships;

  • class credits;

  • attendance; and

  • studio communications.

Payment providers

Including, where applicable:

  • Stripe;

  • Shopify Payments;

  • Square; or

  • other authorised payment processors.

Communications providers

Including services used for:

  • business email;

  • email marketing;

  • customer support;

  • text messaging;

  • WhatsApp communications; and

  • other customer communications.

This may include providers such as Google Workspace, Gmail, Shopify Email or another email-marketing platform where used.

Analytics and advertising providers

Where enabled and lawfully configured, information may be processed by analytics or advertising providers.

Where consent is required for advertising or tracking technologies, we will obtain that consent before using them for the relevant purpose.

Professional advisers

We may share information where reasonably necessary with:

  • solicitors;

  • accountants;

  • insurers;

  • insurance brokers;

  • auditors;

  • consultants; and

  • other professional advisers.

Delivery and fulfilment providers

Where necessary to deliver an order, gift or other physical item.

Technology and security providers

Including:

  • cloud hosting;

  • IT providers;

  • data storage;

  • cybersecurity services;

  • website support; and

  • fraud-prevention services.

Public authorities and regulators

We may disclose information where required or permitted by law to:

  • courts;

  • regulators;

  • government departments;

  • law-enforcement authorities; or

  • other competent authorities.

Business transactions

If Montrose Arc Ltd or the AÉRIS business undergoes a merger, acquisition, investment, restructuring, financing, sale or transfer, relevant personal information may be disclosed or transferred as part of that process where lawful.

Where another organisation processes information on our behalf, we require appropriate contractual and data-protection safeguards where required by law.

11. INTERNATIONAL TRANSFERS

Some of our service providers or their sub-processors may process personal information outside the United Kingdom.

Where personal information is subject to a restricted international transfer, we will take appropriate steps to ensure that a lawful transfer mechanism is used.

Depending on the circumstances, this may include:

  • UK adequacy regulations;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved EU Standard Contractual Clauses; or

  • another transfer mechanism permitted under applicable UK data-protection law.

Where legally required, we will also consider the level of protection available in the destination country.

You may contact us for further information regarding safeguards applying to relevant international transfers.

12. HOW LONG WE KEEP YOUR INFORMATION

We do not intend to retain personal information for longer than is reasonably necessary.

Different categories of information may be retained for different periods.

When determining an appropriate retention period, we consider:

  • the purpose for which the information was collected;

  • whether your relationship with AÉRIS remains active;

  • legal obligations;

  • tax and accounting requirements;

  • insurance requirements;

  • health and safety matters;

  • applicable limitation periods;

  • the possibility of complaints or disputes;

  • the sensitivity of the information; and

  • whether continued retention remains necessary and proportionate.

Waitlist information

Waitlist information may be retained while the waitlist remains active and for an appropriate period afterwards where necessary to administer your relationship with AÉRIS, demonstrate consent preferences or meet legal obligations.

If the waitlist is no longer relevant and we have no other lawful reason to retain your information, it will be deleted or anonymised.

Membership and booking records

These may be retained during your relationship with AÉRIS and afterwards where reasonably necessary for contractual, legal, accounting, insurance or dispute-resolution purposes.

Financial and transaction records

Financial information will be retained for periods required by applicable tax and accounting legislation.

Health information

Health information will only be retained for as long as reasonably necessary, taking account of:

  • participation safety;

  • incident records;

  • insurance requirements; and

  • potential legal claims.

Marketing information

Marketing information may be retained while you remain subscribed.

If you unsubscribe, we may retain limited suppression information so that we know not to contact you for the marketing from which you have opted out.

CCTV

Where CCTV is used, footage will normally be retained only for the minimum period reasonably required for security purposes.

Relevant footage may be retained for longer where it relates to:

  • an incident;

  • complaint;

  • police investigation;

  • insurance matter; or

  • legal claim.

Customer enquiries

Customer enquiries and correspondence may be retained for an appropriate period depending on their nature and whether they relate to an ongoing customer relationship, complaint, transaction or potential claim.

At the end of an applicable retention period, personal information will be securely deleted, anonymised or otherwise disposed of appropriately.

13. HOW WE PROTECT YOUR INFORMATION

We take reasonable technical and organisational measures designed to protect personal information against:

  • accidental loss;

  • unlawful destruction;

  • unauthorised access;

  • unauthorised disclosure;

  • alteration;

  • misuse; and

  • other unlawful processing.

Measures may include, where appropriate:

  • restricted access;

  • password controls;

  • multi-factor authentication;

  • encryption;

  • secure technology providers;

  • employee and contractor confidentiality requirements;

  • appropriate device security;

  • secure account administration;

  • data backups;

  • staff training; and

  • procedures for responding to security incidents.

Access to personal information will be limited, where appropriate, to individuals who require access for legitimate business purposes.

No internet-based system can be guaranteed to be completely secure, but we take proportionate measures appropriate to the nature of the information we process.

14. PERSONAL DATA BREACHES

We maintain procedures for identifying, assessing and responding to suspected personal-data breaches.

Where a breach occurs, we will assess:

  • what information has been affected;

  • the individuals concerned;

  • the potential consequences;

  • the risk to people's rights and freedoms; and

  • the steps required to contain and address the incident.

Where legally required, we will notify the Information Commissioner's Office and/or affected individuals.

15. YOUR DATA-PROTECTION RIGHTS

Depending on the circumstances, you may have the following rights.

The right to be informed

You have the right to receive clear information about how your personal information is collected and used.

The right of access

You may request confirmation that we process your personal information and request a copy of information we hold about you.

The right to rectification

You may ask us to correct personal information that is inaccurate or incomplete.

The right to erasure

You may ask us to delete your personal information in circumstances where the right to erasure applies.

This right is not absolute, and we may need to retain information where we have a lawful reason or legal obligation to do so.

The right to restriction

In certain circumstances, you may ask us to restrict the way we process your personal information.

The right to object

You may object to certain processing based on legitimate interests.

You have a particular right to object to your personal information being used for direct marketing.

The right to data portability

Where applicable, you may have the right to receive certain personal information you provided to us in a structured, commonly used and machine-readable format.

You may also have the right to ask for that information to be transmitted to another controller where technically feasible.

The right to withdraw consent

Where we rely on consent, you may withdraw that consent at any time.

Rights concerning automated decision-making

You may have rights in relation to certain decisions based solely on automated processing that have legal or similarly significant effects.

AÉRIS does not intend to make decisions concerning clients solely through automated processing that produces legal or similarly significant effects without an appropriate lawful basis and safeguards.

Not every right applies in every circumstance.

Where an exemption or restriction applies, we will explain this where appropriate.

16. HOW TO EXERCISE YOUR RIGHTS

To exercise a data-protection right, contact:

privacy@aerisform.co.uk

Please provide enough information for us to understand your request.

We may request reasonable evidence of your identity before releasing personal information where necessary to protect your data from unauthorised access.

We will respond within the time limits required by applicable data-protection law.

We will not ordinarily charge a fee for exercising your rights, although the law permits fees or other action in certain limited circumstances.

17. DATA-PROTECTION COMPLAINTS

If you are concerned about how AÉRIS has collected, used, stored or shared your personal information, please contact us at:

privacy@aerisform.co.uk

Please provide enough information for us to understand and investigate your concern.

We will:

  • provide an accessible way for you to make a data-protection complaint;

  • acknowledge your complaint within the period required by law;

  • investigate the complaint appropriately and without undue delay;

  • keep you appropriately informed where necessary; and

  • communicate the outcome of our investigation.

You also have the right to raise a concern with the UK's data-protection regulator:

Information Commissioner's Office (ICO)
www.ico.org.uk

You are not required to contact us before contacting the ICO, although we welcome the opportunity to resolve concerns directly where possible.

18. CHILDREN AND YOUNG PEOPLE

AÉRIS services are not intended as online services directed primarily at children.

Where AÉRIS permits a person under the age of 18 to use a particular service, we may require appropriate information or authorisation from a parent or legal guardian.

We take additional care when processing children's personal information.

If you believe a child has provided information to us inappropriately, please contact us.

19. INFORMATION ABOUT OTHER PEOPLE

If you provide us with information about another person, such as:

  • an emergency contact;

  • gift recipient;

  • delivery recipient;

  • parent; or

  • guardian,

you should ensure that you have an appropriate reason or authority to provide that information.

We will use that information only for the relevant purpose unless another lawful basis applies.

20. SOCIAL MEDIA AND THIRD-PARTY WEBSITES

Our website and communications may contain links to websites or services operated by third parties.

These may include:

  • social-media platforms;

  • booking services;

  • payment platforms;

  • delivery providers; and

  • other third-party websites.

Those organisations may process personal information under their own privacy notices.

AÉRIS is not responsible for the privacy practices of an independent third-party organisation merely because our website links to it.

We encourage you to review the relevant third party's privacy information where appropriate.

21. PHOTOGRAPHY, FILMING AND PROMOTIONAL CONTENT

We may occasionally photograph or film within AÉRIS premises for marketing, editorial or promotional purposes.

Where an identifiable client is the subject or focus of promotional content and consent is the appropriate basis, we will seek appropriate permission.

We do not treat acceptance of this Privacy Notice as blanket consent to use identifiable photographs or videos of you for marketing.

Where photography or filming is taking place more generally within the studio, we will take reasonable steps to make clients aware where appropriate.

If you do not wish to appear in imagery, please speak to a member of the AÉRIS team.

22. SECURITY, FRAUD AND LEGAL CLAIMS

We may process personal information where reasonably necessary to:

  • prevent or investigate fraud;

  • protect customer accounts;

  • investigate misuse of our services;

  • protect clients, employees and property;

  • investigate payment disputes;

  • respond to chargebacks;

  • enforce our contractual rights;

  • establish, exercise or defend legal claims;

  • respond to insurance matters; and

  • comply with lawful requests from courts, regulators or law-enforcement authorities.

23. CHANGE OF OWNERSHIP OR BUSINESS STRUCTURE

If Montrose Arc Ltd or the AÉRIS business is involved in a:

  • merger;

  • acquisition;

  • investment;

  • restructuring;

  • financing;

  • sale of assets;

  • transfer; or

  • similar corporate transaction,

personal information may be disclosed or transferred where reasonably necessary and lawful as part of that transaction.

Any recipient will be required to process personal information in accordance with applicable data-protection law.

24. CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time.

This may occur to reflect:

  • changes to our business;

  • new services;

  • new technology;

  • new service providers;

  • changes in how we process personal information;

  • changes in legislation; or

  • changes in regulatory guidance.

The current version will be published on our website.

The Last updated date at the beginning of this Privacy Notice will be amended when appropriate.

Where a change materially affects how we use personal information and further notice or consent is legally required, we will take appropriate steps.

25. CONTACT AÉRIS

For questions about:

  • this Privacy Notice;

  • how your information is used;

  • your data-protection rights;

  • withdrawing consent;

  • marketing preferences; or

  • making a data-protection complaint,

please contact:

MONTROSE ARC LTD
trading as AÉRIS FORM

Company number: 17184664
Registered office: 124 City Road, London, United Kingdom, EC1V 2NX
Website: www.aerisform.co.uk
Email: team@aerisform.co.uk

PRIVACY AT AÉRIS

Your information is entrusted to us as part of your relationship with AÉRIS.

We aim to handle it carefully, transparently and only where there is a genuine and lawful reason to do so.

AÉRIS FORM
Begin within.