Movement Island (by Danica) is the data controller for personal information collected through this website, based in Malta. This policy explains what we collect and how we use it.
We collect the information you give us when you book or create an account, including:
We do not store card or bank details. There is no payment gateway on this site — passes and one-off events are paid directly through Revolut, and we only record whether Danica has confirmed receiving your payment.
If you use the enquiry form for a private session or a team event, we collect the name, email, optional phone number and message you send. That enquiry is emailed to Danica and is notstored in this website's database, and it does not create an account for you.
We use your information to manage your bookings and passes, to contact you about your sessions (confirmations, reminders, waitlist offers and changes), and to run and improve the service. We rely on your consent and on the performance of our booking arrangement with you as the legal bases for this.
Health information and your emergency contact are used only for safety — to adapt exercises to your injuries or limitations, and to contact someone on your behalf in an emergency. Health information counts as a special category of data under the GDPR, so we collect it only with your explicit consent, keep it to the minimum described above, and never use it for anything else. It is visible only to Danica, is never included in any email we send, and is never shared with other participants. You can update or clear it yourself at any time from your account, or ask Danica to remove it.
An enquiryis used only to reply to you and to arrange whatever you asked about. Our legal basis is our legitimate interest in answering people who contact us. We don't add you to any mailing list, and the enquiry lives in Danica's email inbox for as long as it is useful to the conversation — ask her to delete it and she will.
We only share your information with the service providers that help us run the site — for example our hosting, database and email delivery providers — and only as needed to provide the service. We don't sell your data.
We keep your information for as long as you have an account or an active relationship with us, and as needed for legal and accounting purposes.
If your account is closed, we archive it rather than erase it: you can no longer log in or book, and you disappear from our working lists, but two things are kept deliberately — your signed waiver, as the record that you accepted the risks of the sessions you attended, and your booking history, for our own accounting. We keep these for up to six years, after which they are deleted.
You can ask us to close your account at any time, and you can ask for your health information and emergency contact to be deleted straight away — those are not part of the record we need to keep.
Under the GDPR you can request access to, correction of, or deletion of your personal data, object to certain uses, and withdraw consent. To exercise any of these, contact Danica.
Some of this you can do yourself: your phone number, emergency contact and health notes are editable in your account. For anything else — including closing your account — just ask Danica. Where we have to keep a record (see Retention above), we'll tell you what is kept and why.
For any privacy question or request, use the contact form, reach out via Instagram or the WhatsApp community, or see our terms & conditions.