Privacy Policy
Last Updated: 05.05.2026
xx pilates SARL-S (“we”, “us” or “our”) is committed to protecting the privacy and personal data of its Clients. This Privacy Policy is an integral part of our Terms and Conditions and aims to inform all Clients about the nature of the personal data we collect, the purposes for which we process it, and their rights as data subjects, in accordance with the General Data Protection Regulation (GDPR).
By using our services or website (www.xxpilates.com), the Client expressly agrees to the terms set out in this Privacy Policy.
This policy explains how we collect, use, and safeguard your personal data when you visit our studio, website (www.xxpilates.com), or use our services.
Data We Collect
We may collect and process the following categories of personal data:
Identity Data: name, gender, date of birth.
Contact Data: email, phone number.
Health Data: injury history and pilates experience.
Payment Data: credit card or other payment information (processed securely via Stripe).
Usage Data: class attendance, booking history, preferences.
Website Usage Data: IP address, cookies, browsing activity on our website.
Video Surveillance Data: images recorded by CCTV camera installed in the studio for security and safety purposes.
We only collect data necessary for the membership/class participation of the Clients.
How We Use the Data
We use your personal data for the following purposes:
Class booking & membership management.
Processing payments.
Compliance with Legal Obligations.
Marketing.
Improving our services.
Security and safety of clients, staff, and premises (via CCTV where applicable).
Video Surveillance (CCTV)
To ensure the safety of our clients, staff, and studio premises, we may operate video surveillance systems in certain areas of the studio.
Cameras are placed only in appropriate areas (e.g. entrance, reception, studio space if necessary) and are never installed in private areas such as changing rooms or restrooms.
CCTV footage is used strictly for security purposes and is not used to monitor performance or behaviour.
Recordings are stored securely and retained for a limited period (generally up to 7 days, unless required longer in case of an incident), after which they are automatically deleted.
Clear signage is displayed in the studio to inform you about the presence of video surveillance.
Data Sharing
We may share the personal data with our booking system provider Arketa, payment processor Stripe or IT service providers under GDPR-compliant agreements. We do not share the personal data with third parties, except as required by law.
CCTV footage may be shared with authorities only if required by law or in case of an incident.
Data Retention
Booking and payment data: kept for 10 years in line with Luxembourg accounting laws.
Health and safety information: kept only as long as necessary for class participation.
Marketing data: kept until you unsubscribe or withdraw consent.
CCTV data: retained for a limited period (generally up to 7 days unless required longer for investigation purposes).
Your Rights
Under GDPR, you have the right to:
Access your data.
Correct inaccurate data.
Request deletion of your data.
Restrict or object to processing.
Data portability (receive a copy in electronic format).
Withdraw consent (for marketing or health information).
To exercise your rights, contact us at studio@xxpilates.com.
Data Security
We take appropriate technical and organizational measures to protect your data against loss, unauthorized access, or misuse. Payment details are processed securely by certified third-party providers.
CCTV recordings are stored securely and access is restricted to authorised personnel only.
Cookies
Our website may use cookies for functionality, analytics, and marketing. You can manage cookie preferences in your browser settings.
Updates to the Privacy Policy
We may update this Privacy Policy from time to time. The updated version will always be posted on our website with the date of last update.
Contact
For any questions or concerns related to this Privacy Policy or the processing of personal data, Clients can contact us via email at: studio@xxpilates.com.
