1. Introduction
This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or engage with our services. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant international standards including CalOPPA (California Online Privacy Protection Act), COPPA (Children’s Online Privacy Protection Act), and CAN-SPAM (Controlling the Assault of Non-Solicited Pornography And Marketing).

By using our website, you consent to the practices described in this policy.

2. Who We Are
This website is operated by Winghigh Limited, registered in England and Wales (Company No. 2142509). Our registered office and principal place of business is: 27 Ballantyne Road, Rushden, Northamptonshire, NN10 9FJ

Our data protection officer is Robert Agar-Hutton, reachable at robert@winghigh.co.uk.

3. What We Collect
Device Information: IP address, browser type, operating system, referral source, and usage patterns. Collected via cookies, log files, and analytics tools (e.g., Statcounter, Google Analytics).

• Service Data: Information you provide when joining classes, including contact details and relevant health disclosures.
• Correspondence: Emails, phone calls, and other communications you initiate with us.
• Marketing Preferences: If you opt in to receive newsletters or updates.
•  We do not knowingly collect personal data from children under 18.

4. Legal Basis for Processing
We process personal data based on:
• Consent
• Contractual necessity
• Legal obligation
• Legitimate interest
You may withdraw consent at any time by contacting us.

5. Cookies and Tracking
We use cookies to understand site usage and improve performance. Non-essential cookies require your consent. You can manage cookie preferences via your browser or our cookie settings panel.

We use Statcounter and Google Analytics to collect aggregate usage data. Their privacy policies are available at:
• www.statcounter.com
• www.google.com/policies/privacy/

6. International Transfers
Data may be transferred outside the UK to trusted providers in countries with adequate data protection laws or under standard contractual clauses. By submitting data, you acknowledge that it may be accessible globally via the internet.

7. Data Retention
We retain personal data only as long as necessary for the purposes stated.

Membership forms and related emails are retained for at least five years after your last class attendance. We may retain data longer if required by law or for legal claims.

8. Your Rights
You have rights to:
• Access your data
• Correct inaccuracies
• Request deletion
• Restrict or object to processing
• Receive a copy of your data
• Withdraw consent
• Lodge a complaint with a supervisory authority
To exercise your rights, contact info@ahmaa.co.uk.

9. Children’s Privacy
Our website and services are not directed at individuals under 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, please contact us to request deletion.

10. Data Security
We use SSL encryption and secure networks to protect your data. Access is limited to authorized personnel who are required to keep data confidential. We do not store or process payment information directly; all transactions are handled by secure third-party providers.

11. Third-Party Disclosure
We do not sell or trade your personal data. We may share data with trusted partners who assist in operating our website or services, provided they agree to confidentiality. We may disclose data to comply with legal obligations or protect rights and safety.

12. Do Not Track
We do not alter our data collection practices in response to “Do Not Track” signals from browsers. We do not allow third-party behavioural tracking.

13. CalOPPA Compliance
We comply with the California Online Privacy Protection Act (CalOPPA).
• Users can visit our site anonymously.
• Our Privacy Policy link includes the word “Privacy” and is easily accessible.
• Users will be notified of any changes to this policy on this page.
• You may request to review, update, or delete your personal information by contacting us.

14. CAN-SPAM Compliance
We only send email communications to individuals who have explicitly contacted us or opted in. You may unsubscribe at any time by replying to our email or contacting us directly. Our emails include our physical address and a clear opt-out mechanism.

15. Changes to This Policy
We may update this policy periodically. Changes will be posted on this page. We recommend checking this page occasionally to stay informed.

16. Contact Us
For questions, concerns, or data requests, contact us: Winghigh Limited 27 Ballantyne Road, Rushden, Northamptonshire, NN10 9FJ Email: robert@winghigh.co.uk