Privacy notice

How Pilates Social Club collects, uses and protects your personal information. This notice applies to individuals in the United States.

We do not sell your personal information, and we do not use it to train AI models.

1. Who we are

Pilates Social Club LLC, 91 Washington Street, New York NY 10006. Contact info@pilatesocialclub.com. We do not knowingly collect personal information from anyone under 16.

2. What we collect

Identifiers: name, email, phone, and postal address if you provide it.
Account credentials: username and hashed password.
Payment information, processed by Wix Payments and Stripe. We do not store full card numbers.
Purchase history and booking history.
Health-related information you provide in the Participation agreement: conditions, injuries, pregnancy status, medications and emergency contact.
Photographs, only if you opt in.
Communications you send us.
Device information such as IP address, browser and device type, and site usage information collected through cookies. See the Cookie notice.
Security camera video footage while you are on the premises.

3. How we use it

To provide, book and deliver classes and manage your membership or pack.
To bill you and process refunds.
To communicate about your account, purchases and bookings.
To send marketing emails, only where you have opted in, always with an unsubscribe link.
To keep members safe and the studio secure.
To meet legal obligations including health club recordkeeping, tax, accessibility, anti-discrimination and consumer protection.
To detect and prevent fraud, misuse and unauthorised access.
To improve the service through aggregated analytics.

4. Health information

We collect health information only where it is needed to teach you safely. We store it separately from marketing data, restrict access to instructors and the studio manager on a need-to-know basis, and delete it a reasonable period after you leave or after it is no longer needed for the purpose it was collected for. We do not share health information with any third party for marketing, ever. We are not a HIPAA covered entity, but we treat health information as sensitive and apply reasonable safeguards under the New York SHIELD Act and our general duty of care.

5. Who we share information with

Service providers who help us run the business, on written terms limiting their use to our instructions: Wix for the website and scheduling, Wix Payments and Stripe for payments, our email marketing platform, our analytics provider, our customer support platform, our accounting provider and our insurance broker.
Professional advisors such as lawyers and accountants, on a confidential basis.
Emergency services if you are injured or in distress.
Government or courts where required by law, or where we in good faith believe disclosure is necessary.
A buyer of the business, in the event of a sale or reorganisation, subject to notice to you.

6. Security

We follow reasonable administrative, technical and physical safeguards, including access controls, encryption in transit, secure hosting, staff training and vendor diligence. Under the New York SHIELD Act we maintain a data security programme appropriate to our size and the sensitivity of the data.

7. Data breach

If we experience a security breach affecting your private information as defined by New York law, we will notify you and, where required, the New York State Attorney General, the New York Department of State and consumer reporting agencies, in accordance with the SHIELD Act.

8. How long we keep it

Account and booking data is kept for as long as your account is active and for a reasonable period afterwards for tax, legal and dispute purposes, currently seven years. Health information is kept only for as long as it is needed to teach you safely. Marketing data is kept until you unsubscribe. Camera footage is retained for thirty days by default, as described in the Media policy.

9. Your rights

You may ask us to confirm whether we hold personal information about you and provide a copy, correct inaccurate information, delete information we no longer need subject to legal retention duties, and stop sending you marketing at any time. Send requests to info@pilatesocialclub.com from the email address on your account. We may ask you to verify your identity, and we will respond within thirty days.

10. Children

This site is not for children under 16. If you believe a child has provided personal information to us, contact us and we will delete it.

11. Do Not Track

The site does not currently respond to browser Do Not Track signals. We describe our tracking practices in the Cookie notice.

12. State privacy laws

Where you reside in a state that grants specific privacy rights, including California, Colorado and Virginia, those rights apply to you and we will honour them on request. We do not sell or share your personal information under those laws.

13. Changes

We will post the current version here and email you about material changes.

Pilates Social Club LLC, 91 Washington Street, New York NY 10006