Skip to content

Coffee shop closed TuesdaysWeekdays from 8am · later at weekends

Legal

Privacy policy & cookies

How a small Wandsworth studio handles your information. Written for UK GDPR and PECR. Last updated August 2026.

Who we are

Rose & Stone (“we”) is an independent yoga studio and café at 63 East Hill, Wandsworth, London SW18 2QE. For privacy queries: info@rosenstone.co.uk.

What we collect

  • Contact form: name, email, message, and the time you sent it.
  • Class bookings (via Instabook, once connected): the details you give that platform — typically name, email, phone, class history and payment metadata. Instabook is an independent controller/processor; read their policy as well.
  • Café: card payments processed by our till provider, not stored by us.
  • Optional analytics (Google Analytics 4) only if you accept cookies.

Why we use it

To reply to you, run classes, take payment, keep the studio safe, and — with consent — understand how the website is used. Legal bases: contract (bookings), legitimate interests (a functioning café and studio, answering email), consent (analytics, marketing if we ever send a newsletter).

Cookies

Strictly necessary cookies remember your cookie choice. They do not track you. Analytics cookies (Google Analytics) load only after you press Accept on the banner. You can refuse; the site still works. You can clear the choice in your browser and decide again.

We do not use advertising cookies. We do not sell your data.

How long we keep it

Contact messages: up to 24 months, unless we still need them for an ongoing conversation. Booking records: as required for accounting and class safety, typically up to 6 years for financial records. Analytics: according to the GA retention setting (default 14 months once configured).

Sharing

We share data with services that run the studio: Instabook (bookings), Formspree or our email provider (contact form), our card acquirer, and Google (analytics, only with consent). They may process data outside the UK under an appropriate safeguard (e.g. UK Addendum / adequacy).

Your rights

Under UK GDPR you can access, correct, erase, restrict or object to processing, and withdraw consent. You can complain to the ICO (ico.org.uk). Email us first — we are small and will try to sort it.

Children

This website is not aimed at children. Public classes are for adults unless a class is expressly listed otherwise.

Related: class cancellation policy.