Privacy Policy
Last updated: 29 August 2026
Who I am
I am Mara Cimatoribus, a yoga, barre and mindfulness teacher trading as She Smiles. I am a sole trader based in London, United Kingdom, and I am the data controller for the personal information described in this policy.
You can reach me at mara@she-smiles.com about anything on this page.
What I collect
If you join a mailing list or a waitlist: your email address, and your first name if you give it.
If you sign up through an advert on Instagram or Facebook: your email address, and your name, taken from the details Meta has already filled in for you.
If you buy something: your name, email address, billing address and order details. I do not see or store your card number. That is handled by the payment provider.
If you register for a live class: your email address, and your name if you give it.
If you message me: whatever you choose to tell me, on Instagram, by email, or through an automated Instagram reply.
When you use the site: pages viewed, approximate location by country, the type of device and browser you used, and how you arrived. This is collected in aggregate and I cannot identify you from it.
From November 2026, if you join The Postnatal Reset: health information you choose to give me, which may include your birth date and delivery type, injuries, diastasis recti, pelvic floor symptoms and any medical clearance to exercise. This is special category data under UK GDPR. I collect it only so I can teach you safely, I ask for your explicit consent before you give it, and I do not share it with anyone.
Why I use it, and my lawful basis
To send you emails you asked for. Lawful basis: your consent. Every email has an unsubscribe link and you can use it at any time.
To deliver what you bought and to support you. Lawful basis: performance of a contract with you.
To keep records HMRC requires. Lawful basis: legal obligation.
To understand which content works and to improve the site. Lawful basis: my legitimate interests in running and improving a small business. You can object to this at any time.
To teach you safely inside a programme. Lawful basis for health information: your explicit consent.
I do not sell your information and I do not share it with anyone for their own marketing.
Who processes it for me
I use a small number of services to run the business. Each one only handles what it needs to.
- Squarespace, for the website, mailing lists, email campaigns and online sales.
- Meta (Facebook and Instagram), for advertising and for sign-up forms completed inside Instagram or Facebook.
- Stripe and PayPal, for taking payments.
- ManyChat, for automated replies to Instagram messages and comments.
- Zoom, for live classes.
- My accountant and HMRC, where the law requires it.
Where your information goes
Some of these companies are based in the United States, so your information may be transferred outside the United Kingdom. Where that happens, the transfer is covered by the UK International Data Transfer Agreement, the UK Addendum to the European Commission's standard contractual clauses, or the UK Extension to the EU-US Data Privacy Framework, depending on the provider.
How long I keep it
Mailing list details: until you unsubscribe, and then for a short period so I do not email you again by mistake. If you have not opened anything from me in three years I will remove you.
Sign-ups collected through Instagram or Facebook adverts: I download these and delete them from Meta within 90 days.
Order and payment records: six years after the end of the tax year they fall in, because HMRC requires it.
Health information given for a programme: for as long as you are taking part, and for two years afterwards in case you come back. You can ask me to delete it sooner.
Messages: for as long as the conversation is useful, and no longer than two years.
Your rights
Under UK GDPR you have the right to:
- ask for a copy of the information I hold about you
- ask me to correct anything that is wrong
- ask me to delete it
- ask me to restrict how I use it
- object to my use of it, including for marketing
- receive it in a portable format
- withdraw your consent at any time, which does not affect anything done before you withdrew it
Email mara@she-smiles.com and I will respond within one month. There is no charge.
If you are not happy with how I have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I would rather you came to me first so I can put it right.
Cookies
The site uses cookies that are necessary for it to work, and, if you agree, cookies that help me understand how the site is used. You choose when the banner appears on your first visit, and you can change your mind at any time through the cookie settings link in the banner.
Changes to this policy
If I change how I handle your information I will update this page and change the date at the top. If the change is significant and you are on my mailing list, I will tell you by email.
Contact
Questions, requests, or anything that does not look right: mara@she-smiles.com