Privacy Policy

Last Updated: 1st November 2025

INTRODUCTION

Your privacy is important to us.
It is the policy of Floé Pilates to respect your privacy regarding any information we may collect from you across our website, https://floepilates.com, or through any other interactions with us.

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

By using our website or attending our services, you agree to this Privacy Policy.

WHO WE ARE

Floé Pilates is a Pilates studio and wellness service operated by an independent freelance instructor based in Nicosia, Cyprus.

For the purposes of the GDPR, Floé Pilates is the Data Controller, meaning we are responsible for deciding how your personal information is collected and used.

If you have any questions about this policy or how your data is handled, please contact us immediately through the details provided on our website.

INFORMATION WE COLLECT

We collect and process personal information that is necessary to provide our services safely and effectively.
This may include:

Contact details: name, phone number, and email address.
Booking details: class reservations, credit packages, attendance records.
Payment details: limited information processed securely through third-party payment providers.
Website usage data: such as IP address, browser type, and pages visited (via cookies or analytics tools).

We do not collect sensitive health information unless voluntarily provided (for example, you inform us of an injury or health limitation relevant to class participation).

You are free to refuse providing certain personal information, understanding that this may limit our ability to deliver specific services (e.g. online booking, class reminders).

HOW WE COLLECT YOUR INFORMATION

We collect data in the following ways:

When you book a class or purchase a credit package through our website or booking system.
When you contact us directly (by form, phone, or in person).
When you subscribe to updates or newsletters.
Automatically through cookies or analytics when you use our website.

We collect data by fair and lawful means, with your knowledge and consent, and always let you know why we’re collecting it and how it will be used.

WHY WE COLLECT INFORMATION

We collect and process personal data to:

Provide and manage your bookings and class attendance.
Communicate with you about upcoming classes, changes, or cancellations.
Process payments securely.
Respond to your inquiries or feedback.
Improve our website, services, and customer experience.
Comply with any legal obligations.

We only collect what is necessary and relevant to these purposes.

HOW WE PROTECT YOUR INFORMATION

We retain collected information only for as long as necessary to provide your requested services and to meet legal obligations.
We use appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

Your data is stored securely, and we only share it when required to deliver our services (for example, with a payment processor).

SHARING YOUR INFORMATION

We do not sell or rent your personal data to anyone.
However, we may share it in limited circumstances:

With trusted third-party service providers who help us operate our website, booking, or payment systems.
With instructors or staff involved in your class or service.
When required by law or legal authorities.

Any third parties that process data on our behalf are contractually obligated to respect your privacy and handle your data in compliance with GDPR.

CROSS-BORDER DATA TRANSFERS

Floé Pilates operates within the European Economic Area (EEA) and aims to keep all personal data stored within the EEA.
If, in rare cases, data is transferred outside the EEA (for example, due to a third-party service provider’s location), we will ensure the transfer is protected under GDPR-compliant safeguards such as Standard Contractual Clauses or equivalent mechanisms.

DATA RETENTION

We retain your personal information for as long as necessary to:

Provide the services you’ve requested.
Fulfil legal and tax obligations.
Resolve disputes or enforce agreements.

After this period, your data will be securely deleted or anonymized.

YOUR RIGHTS UNDER GDPR

You have the following rights regarding your personal data:

Right to access – request a copy of the data we hold about you.
Right to rectification – correct inaccurate or incomplete information.
Right to erasure – request deletion of your data (unless we must keep it for legal reasons).
Right to restriction – request limitation of processing under certain conditions.
Right to data portability – receive your data in a structured, commonly used format.
Right to object – object to how your data is processed.

To exercise any of these rights, please contact us immediately.

If you believe your personal data has been mishandled, you may also lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus:

Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
P.O. Box 23378, 1682 Nicosia
Tel: +357 22818456
Email: commissioner@dataprotection.gov.cy

COOKIES & WEBSITE TRACKING

Our website may use cookies or similar technologies to improve user experience and analyze website traffic.
You can control or disable cookies through your browser settings, but some site features may not function properly without them.

NEWSLETTERS & MARKETING

If you subscribe to updates, we may occasionally send information about upcoming classes, offers, or wellness news.
You can unsubscribe at any time by contacting us or using the unsubscribe option included in any message.

After you unsubscribe, your contact details will be removed from our mailing list.

LINKS TO OTHER WEBSITES

Our website may include links to third-party websites.
Please note that we have no control over the content or privacy practices of those sites and cannot accept responsibility for their policies.

We encourage you to review the privacy policies of any third-party sites you visit.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
Updates will be posted on our website, and significant changes may be communicated to you directly.

This policy is effective as of 01/11/2025.

CONTACT

If you have any questions or concerns about this Privacy Policy or the handling of your data, please contact us immediately using the details available on our website.