Bondi Rise Privacy Policy

Last updated: 19 June 2026

Bondi Rise (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data responsibly. This policy explains what personal data we collect, how we use it, who we share it with, and what rights you have, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025 (DUAA).

This policy reflects the DUAA provisions in force as at the date above, including the updated framework for handling data protection complaints, the “recognised legitimate interests” lawful basis, and revised timeframes for responding to data subject requests. We recommend this document is reviewed by a qualified data protection advisor before publication, and re-checked periodically as further ICO guidance on the DUAA is issued through 2026.

1. Who We Are

Data Controller	Bondi Rise, founded and operated by Lottie Anderson
Studios	East Molesey (Bridge Road) and Wimbledon (Leopold Road)
Online platform	online.bondirise.com
Contact	Lottie Anderson – hello@bondirise.com

Bondi Rise is the Data Controller for personal data collected through our studios, our online platform, our mobile apps, and our teacher training programme. We are responsible for deciding how and why your personal data is processed.

2. How We Collect Your Data

We collect personal data through two main systems, depending on how you interact with us:

2.1 Studio bookings, classes and memberships – via Momence

Momence is our studio management and booking platform, used for both our East Molesey and Wimbledon studios. Momence collects and processes all data relating to your relationship with us as a studio client, including:

Name, email address, phone number and address
Booking history, class attendance and membership or package details
Payment and billing information (processed securely by Momence and its payment processor)
The signed liability waiver and health declaration you complete before attending your first class, in which you confirm you are fit to participate and disclose any relevant injuries, conditions, or medical advice we should be aware of
Communications sent to you via Momence (booking confirmations, reminders, marketing messages where you have opted in)

Momence acts as our data processor for all studio-side data. Information you provide via the waiver is collected on the basis of your explicit consent, used solely to support your safe participation in classes, and is only accessed by instructors and studio staff where necessary for your safety during a class.

2.2 Online platform, on-demand classes and the Bondi Rise app – via Uscreen

Uscreen is the platform that powers online.bondirise.com and our iOS and Android apps. Uscreen collects and processes all data relating to your use of our online and on-demand content, including:

Name, email address and account login details
Subscription and billing information
Viewing history, progress, streaks and badge/achievement data
Device and app usage information, including Apple Watch connectivity data where enabled
Communications sent to you via the platform (trial nurture emails, onboarding sequences, app announcements)

Uscreen acts as our data processor for all online platform and app data.

Where you are both a studio client and an online member, your studio data (in Momence) and your online data (in Uscreen) are held separately by each respective platform. We do not currently operate a unified single customer record across both systems.

3. Why We Use Your Data (Legal Basis)

We rely on the following legal bases under UK GDPR, as supplemented by the DUAA, depending on the purpose:

Contract — to provide the classes, memberships, subscriptions or training you have booked or purchased
Consent — for marketing communications, the health/liability waiver, and any optional features you opt into; you may withdraw consent at any time
Legitimate interests (including recognised legitimate interests under the DUAA, where applicable) — for example, to improve our services, maintain studio safety, and run our business effectively
Legal obligation — where we are required to retain or disclose data, such as for tax, accounting or safeguarding purposes

4. What We Use Your Data For

Managing your bookings, classes, memberships and subscriptions
Processing payments
Ensuring your safety and wellbeing during classes (including reviewing waiver information where relevant)
Sending service communications (booking confirmations, schedule changes, account updates)
Sending marketing communications where you have opted in, which you can unsubscribe from at any time
Operating and improving the Bondi Rise app and online platform
Administering the Bondi Rise Method teacher training programme
Complying with our legal and regulatory obligations

5. Who We Share Your Data With

We share personal data only where necessary, with the following categories of recipient:

Momence — our studio booking, waiver and payment processor
Uscreen — our online platform, app and subscription processor
Payment processors used by Momence and Uscreen to handle transactions securely
Professional advisors (e.g. accountants, solicitors) where necessary
Regulatory or government bodies where we are legally required to disclose information

We do not sell your personal data to third parties. We do not currently use website tracking cookies, advertising pixels, or third-party analytics on bondirise.com.

6. International Transfers

Where Momence or Uscreen store or process data outside the UK, such transfers are made subject to appropriate safeguards, such as the UK’s International Data Transfer Agreement, an adequacy decision, or equivalent measures required under UK GDPR and the DUAA’s updated “data protection test” for assessing third-country data protection standards. You can ask us for more information about these safeguards at any time.

7. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this policy, including to meet legal, accounting or reporting obligations. Waiver and health declaration data is retained for as long as you remain an active client and for a reasonable period afterwards in case of a safety-related query, after which it is securely deleted. Marketing data is retained until you unsubscribe or withdraw consent.

8. Your Rights

Under UK GDPR and the DPA 2018, as updated by the DUAA, you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data erased, in certain circumstances
Restrict or object to certain processing, including direct marketing
Receive your data in a portable format
Withdraw consent at any time, where we rely on consent
Complain to us directly about how we have handled your data, and have that complaint acknowledged and addressed within a reasonable timeframe
Complain to the UK Information Commissioner (ICO) if you remain unsatisfied

To exercise any of these rights, please contact us using the details in Section 1. We will respond within the statutory timeframe, carrying out reasonable and proportionate searches for your information.

9. Data Protection Complaints

In line with the DUAA’s new statutory complaints framework, if you have a concern about how your personal data has been handled, you can raise this with us directly via privacy@bondirise.com. We will acknowledge your complaint, investigate it, and respond within a reasonable and statutory timeframe. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ico.org.uk).

10. Children’s Data

Our services are intended for adults. Where a young person under 18 uses the Bondi Rise app or attends a class with appropriate parental or guardian consent, we apply extra care to their data in line with the DUAA’s provisions on children’s higher data protection standards, and will only process such data where there is a clear lawful basis and appropriate safeguards in place.

11. Changes to This Policy

We may update this policy from time to time, including to reflect further guidance issued by the ICO on the DUAA throughout 2026. The “Last updated” date at the top of this policy shows when it was last revised. We encourage you to review it periodically.

12. Contact Us

If you have any questions about this policy or how we handle your personal data, please contact:

Data Controller	Lottie Anderson, Founder, Bondi Rise
Email	hello@bondirise.com
Studios	East Molesey (Bridge Road) · Wimbledon (Leopold Road)
ICO	ico.org.uk — if you wish to escalate a complaint