Privacybeleid

Privacy Policy

Yu Pilates by Nicole (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website, book classes, purchase memberships or packs, attend retreats, or otherwise interact with our studio.

1. Who We Are

Yu Pilates by Nicole
Leiden, Netherlands
Contact: info@yupilatesstudio.nl

We act as the “data controller” for the personal data you provide.

2. What Information We Collect

We may collect and process the following personal information:

Identity details: name, date of birth, gender.
Contact details: email address, phone number, address.
Account details: login information if you create an account on our booking system.
Booking & payment data: classes booked, membership type, payments, cancellations (processed securely by our payment provider; we do not store full card details).
Health & safety information: relevant medical conditions, injuries, or pregnancy information you choose to share for class safety.
Marketing preferences: your consent to receive newsletters, offers, and updates.

3. How We Use Your Data

We process your personal data for the following purposes:

To manage bookings, memberships, and payments.
To communicate with you about your classes, schedules, and updates.
To ensure safety and adapt exercises to your needs.
To comply with legal obligations (e.g. accounting, tax).
With your consent, to send you marketing communications (you can opt out at any time).

4. Legal Basis for Processing

We process your data under:

Contractual necessity (to provide services you book or purchase).
Legal obligation (to maintain tax and business records).
Legitimate interest (to improve services and manage studio operations).
Consent (for marketing or optional health information).

5. Data Sharing

We may share your data with trusted third parties only when necessary:

Payment processors (for secure payments).
Booking platform providers (e.g. Wix, Six).
Professional service providers (IT support, accountants).
We will never sell your data.

6. Data Retention

We retain your data only as long as necessary:

Bookings & membership records: 7 years (Dutch tax law).
Health & safety forms: up to 2 years after last class attended.
Marketing preferences: until you withdraw consent.

7. Your Rights

You have the right to:

Access the data we hold about you.
Correct inaccurate data.
Request deletion (“right to be forgotten”).
Restrict or object to processing.
Withdraw consent at any time (for marketing).
Data portability (receive a copy of your data).

To exercise these rights, please contact us at [insert studio email].

8. Cookies

Our website may use cookies to improve user experience and analyze traffic. You can manage or disable cookies in your browser settings.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for their privacy practices.

11. Updates to this Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “last updated” date.

Last updated: November, 2025