Privacy Policy
Inner Light C.I.C.
Last updated: 10 October 2026
1. Who we are
Inner Light C.I.C. provides regulation-led wellbeing, movement and inclusive support for children, families, schools and community organisations.
We are committed to protecting the privacy and personal information of the people who contact us, participate in our programmes or use our website.
Data controller: Inner Light Yoga C.I.C., trading as Inner Light C.I.C.
Company registration number: 16307272
Registered in: England and Wales
Website: www.innerlight.yoga
Privacy enquiries: salma@innerlight.yoga
We are responsible for deciding how personal information collected through our services is used and protected.
2. Information we collect
Depending on how you interact with Inner Light, we may collect:
Your name, email address and telephone number.
Information submitted through website contact forms.
Session registrations, attendance information and booking details.
Information about your organisation or professional role when making an institutional enquiry.
Communication preferences and correspondence.
Feedback you voluntarily provide about our services.
Limited technical information about website use, including information collected through cookies and similar technologies.
Where necessary for safe and inclusive participation, we may separately request information about accessibility requirements, additional support needs or relevant health considerations.
We aim to collect only information reasonably necessary for the purpose explained to you.
3. How we use your information
We use personal information to:
Respond to enquiries and communicate about our services.
Manage session bookings, attendance and waiting lists.
Provide relevant information before and after sessions.
Understand accessibility requirements and support appropriate participation.
Manage relationships with schools, commissioners and community partners.
Administer funded programmes and meet applicable reporting obligations.
Request and review feedback to improve our work.
Maintain appropriate organisational records.
Protect the security and functionality of our website and services.
Send newsletters or promotional communications where permitted by law.
We do not use children's personal information for unrelated marketing purposes.
4. Our lawful basis for processing
Under UK data protection law, we must have an appropriate lawful basis for using personal information.
Depending on the purpose, these may include:
Contract or steps before entering a contract: To process bookings, deliver agreed services and respond to requests about participation.
Legitimate interests: To respond to relevant enquiries, administer our organisation, maintain appropriate records and improve our services, where those interests are not overridden by individuals' rights and freedoms.
Legal obligations: To comply with applicable accounting, regulatory, safeguarding and other legal requirements.
Consent: Where we ask for permission for a particular activity, such as optional communications or other uses requiring consent.
Where we need to process sensitive information, including relevant health or disability information, we will identify an additional lawful condition under Article 9 of the UK GDPR. Where explicit consent is the appropriate condition, we will seek it separately.
5. Children's information and safeguarding
Inner Light works with children and families, including children with special educational needs and disabilities (SEND).
We take particular care when handling information about children.
Where relevant, we collect information from parents, carers or other authorised individuals to support participation and communicate about a child's needs.
We limit access to this information to people who have a legitimate reason to use it.
We do not publish identifiable information about children, their health, personal circumstances or participation without appropriate permission and a lawful basis.
Where safeguarding concerns arise, it may be necessary to share relevant information with appropriate safeguarding professionals or statutory authorities, in accordance with applicable law and safeguarding responsibilities.
6. Session bookings through Momoyoga
Inner Light uses Momoyoga as its external session booking and registration platform.
When you book a session, join a waiting list or manage your registration through Momoyoga, relevant personal information is processed using that platform.
This may include your name, contact details, booking history and other registration information necessary to administer your participation.
Inner Light remains responsible for the personal information it controls in connection with its services. Momoyoga processes relevant booking data on our behalf under its applicable agreements.
You can read Momoyoga's privacy policy at:
https://www.momoyoga.com/en/privacy
7. Website enquiries and third-party services
Our website is hosted through Squarespace.
When you submit an enquiry through our website, the information is used to respond to your request and, where appropriate, discuss relevant services.
We use third-party technology providers to support website hosting, form processing, email communications and bookings.
These providers may process personal information on our behalf in accordance with their applicable contractual and data protection obligations.
We do not sell personal information to third parties.
8. Cookies and website analytics
Our website may use cookies and similar technologies to support essential website functions, embedded services, security, user preferences and website analytics.
Some cookies are necessary for the website to function. Others may require your consent, depending on their purpose and applicable law.
Where consent is required, we will provide an appropriate mechanism for you to make and change your choices.
You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.
For further information about cookies and any available consent controls, please refer to the cookie information presented on our website.
9. How we share information
We share personal information only where reasonably necessary and lawful.
This may include:
Service providers supporting bookings, website hosting and communications.
Authorised practitioners or delivery partners where necessary for agreed services.
Schools, Family Hubs or commissioning partners where appropriate to the relevant programme and lawful arrangements.
Funders, where required for programme monitoring or reporting, using anonymised or aggregated information wherever appropriate.
Safeguarding professionals, regulators or statutory authorities where disclosure is necessary and lawful.
We do not routinely disclose identifiable family or child information to funders for publicity or unrelated purposes.
10. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including relevant safeguarding, contractual, legal and funding obligations.
Different types of information may be subject to different retention periods.
We periodically review information held and securely delete or anonymise records when they are no longer required.
11. How we protect information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
These include appropriate access controls, use of established service providers and limiting access to information according to operational need.
No internet-based system can guarantee absolute security, but we aim to handle all information with appropriate care.
12. International data transfers
Some service providers may process or store personal information outside the United Kingdom.
Where international transfers occur, we will ensure that an appropriate lawful transfer mechanism or safeguard applies, as required by UK data protection law.
You may contact us for further information about relevant international transfers and safeguards.
13. Your data protection rights
Subject to applicable legal conditions and exemptions, you may have the right to:
Request access to personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Request deletion of information in certain circumstances.
Request restriction of processing.
Object to certain processing activities.
Request transfer of relevant information where applicable.
Withdraw consent where processing relies on consent.
You have the right to object to processing based on legitimate interests, and to object to direct marketing at any time.
To exercise your rights or raise a concern, contact:
You may also raise concerns with the Information Commissioner's Office (ICO):
14. Changes to this policy
We may update this Privacy Policy to reflect changes in our services, technology or legal obligations.
The latest version will be published on this website with an updated revision date.
15. Contact us
For questions about this Privacy Policy or how Inner Light handles personal information:
Inner Light C.I.C.
Email: salma@innerlight.yoga
Website: www.innerlight.yoga
Company number: 16307272
