Privacy
Full Privacy Policy - Updated 16/01/26Oncore understands the importance of the security of your personal data. We are committed to processing your personal data in accordance with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, store, and protect your personal information when you engage with Oncore’s services, including our classes and facilities.
1. Legal Basis for ProcessingWe process your personal data based on the following legal bases under GDPR:
ConsentWhere you have given us explicit consent to process your data.
Contractual NecessityTo fulfill our contractual obligations, such as processing bookings and payments.
Legal ObligationWhere processing is necessary for compliance with a legal obligation, such as tax or financial laws.
Legitimate InterestsWhere we have a legitimate interest in processing your data that does not override your rights and freedoms.
2. Data SharingCookies, analytics and marketing technologies
We use cookies and similar technologies (such as local storage, SDKs, tags and pixels) on our website. Some are strictly necessary to make the website work. Others help us understand how the site is used (analytics) and measure the effectiveness of our marketing (advertising/measurement). Where required, we will only set or read non-essential cookies/technologies if you have provided consent. You can change your preferences at any time via our cookie settings.
Analytics and session replay. We use PostHog to understand how visitors use our website, troubleshoot issues, and improve our services. This includes analytics (for example: pages viewed and actions taken) and session replay (which helps us understand how the website behaves during a visit).
What we collect:PostHog collects information about your device and your interactions with the website (for example: pages viewed, clicks/actions taken, timestamps, referrer URL, approximate location derived from IP address, and a pseudonymous identifier stored in a cookie and/or local storage). We do not need to identify you by name to use PostHog and we do not intentionally send your name or contact details to PostHog.Session replay privacy controls:PostHog masks input fields by default and we use masking to reduce the risk of capturing information you enter into forms. Retention:We retain session replay recordings for up to 90 days. We retain website analytics event data for up to 18 months, then delete or aggregate it.International transfers: Our PostHog Cloud account is hosted in the United States, so personal data may be transferred outside the UK/EEA with appropriate safeguards. Marketing measurement (Google Ads conversion tracking)We use Google Ads conversion tracking to measure whether our advertising results in actions on our website (for example, a purchase, enquiry, or sign-up). Google may set cookies or use similar technologies to measure conversions and attribute them to ads. International transfers:Google operates globally and data may be processed outside the UK/EEA with appropriate safeguards.
Bookings and payments (Mindbody)To view schedules and make bookings/payments, we direct you to Mindbody (a third-party booking and payments provider). If you proceed with a booking or payment, the information you provide is processed by Mindbody under its own privacy terms. Mindbody states that personal information may be stored and processed in the United States and the United Kingdom and describes its international transfer safeguards (including SCCs and the Data Privacy Framework).We may share your personal data with third-party service providers to help deliver services, including payment processing, class booking systems, and customer support. These third parties are required to comply with GDPR and ensure the security of your data.
3. Retention of DataWe will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Retention periods vary depending on the type of data and purpose of processing. Please contact us for further details.
4. Your RightsYou have the following rights regarding your personal data:
Right to accessRequest a copy of your personal data.
Right to rectificationRequest corrections to inaccurate or incomplete data.
Right to erasureRequest the deletion of your data, subject to certain conditions.
Right to restriction of processingRequest restriction of processing under specific circumstances.
Right to objectObject to processing in certain situations.
Right to data portabilityRequest the transfer of your data to another provider.
To exercise any of these rights, please contact us at hello@oncorelondon.com
5. Data Security We implement appropriate technical and organizational measures to safeguard your personal data against unauthorized access, alteration, or destruction. These measures include encryption, secure access controls, and regular data security audits.
6. Fees for Accessing Personal Data
You may request a copy of the personal data we hold about you at no charge. However, we may charge a reasonable fee for administrative costs if the request is excessive or manifestly unfounded.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Please review this policy periodically to stay informed.