What we hold, and why.

Who we are

Pivot & Plane Ltd, Sheffield, is the controller of personal data collected through pivotnplane.co.uk. Any question or request about your data goes to Brad personally: [email protected].

What we collect, and what it is for

The Founding Fifty. Your name and email, to issue your discount code, hold your ten percent against that address, and send one email when the studio opens. Kept for twelve months after signup, then deleted.

The Break Test. Your score, tier, name and email, so your result and code can reach you. Your quiz answers travel in your result email for your own record; they are not kept on our servers. Kept for twelve months, then deleted. The Break Test is a teaching quiz, not a medical assessment, and nothing on this site offers medical advice.

Enquiries. Your name, email and message, used to answer you. These live in the business mailbox and are not copied to the website.

Orders. Payments run through Stripe. Your card details go to Stripe, never to us. We receive your name, email and what you ordered, to deliver it and handle any question about it.

Class health screening. Your PAR-Q answers are delivered privately to Brad and are not stored on the website. The website keeps the paid booking reference and completion time, solely to confirm whether that booking is cleared to take part. The clearance record is kept for twelve months.

The concierge. Chat messages are handled in the moment and are not stored on our servers. Routine abuse counters, tied to IP address, expire within days.

Marketplace shop orders

Pivot & Plane Ltd also sells products through online marketplaces, including TikTok Shop. When you buy from our shop there, the marketplace passes us your name, delivery address, phone number and what you ordered. We use them only to send your order, give the carrier what it needs to deliver it, and handle returns, refunds or questions. The supplier or carrier dispatching your parcel receives your delivery details for that order and nothing else.

We process these details on our own systems in the United Kingdom. We keep them no longer than 90 days after delivery, then delete them, except for the sales records the law requires us to keep. We never sell them, use them for marketing or build profiles from them. If our arrangement with a marketplace ends, we delete the personal data we received through it within 30 days.

The marketplace's own privacy policy covers what it does with your data. You can ask us for a copy, correction or deletion of what we hold at the address below, or through the marketplace, which may pass your request to us.

Why we are allowed to

Because you asked for something — a code, a reply, an order — and we use your details to deliver exactly that. And because any business may protect itself from abuse: the site checks IP addresses to rate-limit bots and form spam. Those counters expire within hours or days.

Who else processes it

Cloudflare hosts the site and holds its storage. Resend delivers our email. Stripe takes payments. Anthropic powers the concierge chat. OVH hosts our order-processing server in London. For marketplace orders, the supplier and carrier that dispatch your parcel receive your delivery details. Each processes data on our instructions under its own data protection terms, and none of them is given your data for their own marketing.

Cookies and tracking

None. No analytics, no advertising trackers, no profiling. There is no cookie banner because there is nothing to decline.

Marketing

One email when the doors open, as promised on the page you signed up from. Anything beyond that, we ask first.

Your rights

You can ask for a copy of what we hold, a correction, or its deletion, at [email protected]. Requests are handled personally and promptly. If you are unhappy with the answer, you may complain to the Information Commissioner's Office at ico.org.uk.

Reviewed October 2026. We review this page at least every six months and whenever what we do with personal data changes.