Data Controller contact details: 

• Business name: Steffi Paras 

• Email: stephaniaparas@gmail.com

  
  

We collect and process your personal data only where we have a lawful basis to do so.

Why We Collect Data

• To provide your sessions: Manage bookings and deliver the services you sign up for.

• With your consent: Send marketing emails, collect health information for class safety or track cookies on our website.

• To improve our services: Maintain website security and analyse how we can do better.

• To meet legal requirements: Accounting, tax or regulatory obligations.

What Data We Collect

• Basic details: Name, email, phone number, date of birth/age and address.

• Payment information (via our chosen payment provider) and booking history.

• Health information: Injuries or medical conditions to keep you safe in Pilates/fitness activities.

We collect information when you:

• Contact us via email, social media or on any similar technologies.

• Sign up or book classes

• Use our website

• Complete consent and waiver forms 

We use your information for the following purposes:

• To contact and communicate with you

• To manage bookings and client records

• To maintain safety records

• For internal administration and record-keeping

We do not sell or rent your personal data.

We use standard log files to monitor website usage, including Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, technical details that occur in conjunction with any errors you may encounter.

Please be aware that some information may not identify you on its own, but when combined with other data, it could potentially be used to identify you.

Your health information is sensitive and is only collected with your explicit consent. The Instructor agrees to keep all information strictly confidential, except where disclosure is required by law.

Classes, events and workshops may be recorded for quality control or promotional purposes. If you want to opt out of the use of photos or videos, please notify the Instructor in writing.

We protect your personal data using commercially reasonable measures. However, no system is completely secure. It is your responsibility to provide any personal information safely when communicating with us.

We retain personal data only as long as necessary for legal, safety, or business purposes, after which it is deleted or anonymised. Typical retention periods:

• Booking and payment records: 6 years.

• Health/waiver forms: up to 6 years after your last session.

• Contact form submission: up to 12 months after your inquiry has been resolved. 

• Marketing email data: until you unsubscribe or after inactivity.

Our website uses cookies to improve user experience. You can manage or disable cookies via your browser settings, but this may affect the website’s performance or limit certain features.

We may share your information with trusted service providers, such as:

• Website hosting & IT support

• Booking platforms 

• Email service providers

• Payment processors

• Analytics tools

These providers only process your data on our instructions and must comply with data protection laws.

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Your Rights (UK & EU GDPR)

You have the following rights over your personal information:

• Access your data

• Correct inaccurate information

• Delete your data (in certain circumstances)

• Restrict how we use your data

• Object to processing based on legitimate interests

• Withdraw consent (e.g., marketing emails)

• Request data portability

You have the right to complain to your local data protection authority. In the UK, contact the Information Commissioner’s Office (ICO) at https://ico.org.uk

Exercising your rights will not result in discrimination.

Children’s Privacy

We do not knowingly collect personal information from children under 16. If you believe your child has provided information, contact us immediately so we can remove it.

International Users

Please be aware that your personal information may be stored, processed or transferred to locations with different data protection laws than those in your country. Where this occurs, we ensure it is protected in accordance with applicable law.

If your personal data is affected by a breach, we will act promptly to protect your rights and inform you as required by law.

You may also contact us with complaints about data protection.

We may update this Privacy Policy to reflect changes in our business, legal requirements or regulations.

The “Last updated” date will be revised accordingly. We encourage you to review this policy periodically.

For questions about this Privacy Policy, contact us at stephaniaparas@gmail.com

By using our website, you consent to this Privacy Policy and agree to its terms.