Privacy and Cookie Policy

Effective Date: 21 June 2026

The Movement Hub (“we”, “us”, “our”) is the trading name of Kim Tomlin. Primal Flow is a brand operated by: Kim Tomlin, trading as The Movement Hub.

We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy explains how we collect, use, store and protect your information. This includes how we use cookies and similar technologies on our website (hosted via Podia).

Business correspondence address: [To Be Confirmed]

Email: education@themovementhub.co.uk

1. Information we collect

1.1 Information you provide directly

We may collect:

  • Name

  • Email address

  • Phone number

  • Postal address (where required)

  • Date of birth (where required)

  • Emergency contact details

  • Relevant medical or health information (for safe participation only)

  • Learning or accessibility requirements

  • Qualification history or supporting documentation

  • Information you submit inside Podia communities (posts, comments, messages)

1.2 Account, membership and purchase information

When you create an account, join a community or purchase a course/product:

  • Login details (email and password encrypted by Podia)

  • Membership or subscription status

  • Payment details (processed securely via Stripe. We do not store card details)

  • Transaction history

  • Course enrolment and progress data

  • Community participation data

1.3 Automatically collected information

When using our website (via Podia):

  • IP address

  • Device and browser type

  • Pages visited and time spent on site

  • Referral source

  • Login activity

  • Cookie and tracking data

1.4 Email marketing and communication data

If you receive emails from us (via Podia or Brevo):

  • Email engagement (opens, clicks)

  • Preferences and interests

  • Subscription status

2. How we use your information

We use your data to:

  • Deliver online and in‑person training

  • Provide access to course materials, communities and assessments

  • Manage free and paid memberships

  • Communicate about bookings, updates and support

  • Send newsletters and automated email sequences (only with your consent)

  • Ensure safe participation (including health considerations)

  • Verify eligibility for certification

  • Improve our services, website and user experience

  • Meet legal, financial and regulatory obligations

3. Legal basis for processing

We rely on the following lawful bases:

  • Contract: to deliver the services, memberships and communities you access

  • Consent: for marketing communications

  • Legal obligation: for record keeping, tax and compliance

  • Legitimate interests: to operate and improve our business

For health information, we rely on:

  • Explicit consent

  • Vital interests (ensuring safe participation in physical activity)

4. How we share your data

We only share your data when necessary to deliver our services.

4.1 Service providers

  • Podia: website hosting, course delivery, communities, email communications, membership management

  • Stripe: secure payment processing

  • Brevo: email communications

4.2 Training and assessment

  • Approved tutors or assessors (only where required for course delivery, marking, or certification)

4.3 Legal requirements

We may share data:

  • With regulatory bodies

  • Where required by law

We never sell your personal data.

5. Data storage and retention

  • Data is stored securely on password protected systems

  • Physical records (if used) are securely stored

  • We retain data for up to 7 years for legal, financial and educational purposes

  • After this period, data is securely deleted or destroyed

6. Data security

We take appropriate technical and organisational measures to protect your data, including:

  • Encrypted systems

  • Secure platforms

  • Restricted access for authorised personnel only

While no system is completely secure, we take all reasonable steps to safeguard your information.

7. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent (for marketing) at any time

To exercise your rights, contact: education@themovementhub.co.uk

We will respond within 30 days.

8. Cookies and tracking technologies

Our website uses cookies to improve your experience and help us understand how visitors use the site.

8.1 What are cookies?

Cookies are small text files stored on your device when you visit a website.

8.2 How we use cookies

We use cookies to:

  • Ensure the website functions properly

  • Enable login and account features

  • Analyse website traffic and performance

  • Support marketing and advertising activities

  • Improve user experience inside Podia communities

8.3 Types of cookies we use

8.3.1 Essential cookie

Required for basic website functionality, login, checkout and course access (via Podia).

8.3.2 Analytics cookies

Help us understand how visitors use the site and improve user experience.

8.3.3 Marketing cookies

Used by services such as Google Ads, social media platforms, Podia email tracking and Brevo.

8.3.4 Third‑party cookies

Some cookies are set by third‑party providers, including:

  • Podia

  • Stripe

  • Brevo

  • Google (analytics/ads)

  • Social media platforms (if you interact with embedded content)

8.4 Managing cookies

You can:

  • Disable cookies via your browser settings

  • Control cookie preferences via your device

Please note: disabling cookies may affect website functionality, including login and course access.

9. User‑generated content (communities)

If you participate in Podia communities:

  • Your posts, comments and profile information may be visible to other members

  • You are responsible for the content you share

  • We may remove content that breaches our Terms of Service or community guidelines

10. Third‑party links

Our website may contain links to third‑party websites or platforms. We are not responsible for their privacy practices or content.

11. Updates to this policy

We may update this Privacy and Cookie Policy periodically. The most recent version will always be available on our website.