Privacy Policy

Who this policy covers

Pilates by Saffron Limited operates Pilates by Saffron in Hong Kong. This policy explains how we handle personal information when you visit our website, use our booking website or app, contact us, or attend the studio.

Information we collect

• Account and contact information, such as your name, email, phone number, date of birth and account preferences.
• Bookings, attendance and QR check-ins, purchases, membership agreements, credit balances and payment status. Stripe processes card payments; our booking system does not store your full card number or security code.
• Health intake answers, pregnancy or injury information, medical clearances, waiver signatures and guardian details where needed to support safe participation.
• Messages, enquiries, job applications and privacy requests you send us.
• Technical information such as IP address, device and browser details, usage events and error diagnostics.

Required information is identified when we collect it. Without information needed for registration, payment or safety, we may be unable to provide the relevant service. Optional information is voluntary. Collection notices on our booking forms give further context.

How we use information

We use information to create and secure accounts, manage bookings and memberships, process payments and refunds, record attendance, provide appropriate instruction, handle enquiries and privacy requests, and meet accounting and other obligations. Technical information helps us diagnose errors, prevent misuse and improve the service.

Health and guardian information is used for participation and safety decisions. Please keep it up to date and share only information relevant to your attendance.

Google and Apple sign-in

If you choose Google or Apple sign-in, we receive the account identifier and profile information provided for that sign-in, such as your name and email address. We use it to authenticate you and connect you to your studio account. Apple may provide a private relay email address. We do not receive your Google or Apple password. Those providers also handle information under their own privacy policies.

Cookies, analytics and diagnostics

Our booking services use cookies or device storage to keep you signed in, protect sessions and remember preferences. We use PostHog for product analytics and error monitoring, which can include page or screen activity, technical diagnostics and an account identifier. These tools help us understand use of the service and investigate failures. They are not intended to collect health-form answers or card details.

You can manage cookies and site storage through your browser settings; blocking essential storage may prevent sign-in or booking features from working.

Who receives information

Studio staff receive information needed for their work, including relevant attendance and safety information for instructors. We use service providers for hosting and database operations (Railway and Netlify), payments (Stripe), transactional email (Resend), analytics and diagnostics (PostHog), and encrypted backups (Backblaze). Apple and Google support optional sign-in. Providers process information relevant to those services.

We may also disclose information where required by law or needed to handle a specific dispute, security incident or professional advice. We do not sell personal information. Some providers process information outside Hong Kong; information may therefore be handled in other jurisdictions.

Service messages and marketing

Booking confirmations, payment notices and other service messages are part of operating your account. Marketing is separate: joining or purchasing does not by itself subscribe you to promotional messages. Where we offer marketing communications, we ask for the applicable consent and provide a way to withdraw it. You can also contact us to change your marketing preference.

Security and retention

We use access controls, encrypted connections and encrypted storage for medical documents and backups. No system can guarantee absolute security.

We keep information for as long as needed for the purposes described here, including applicable accounting, safety, dispute and legal requirements. Closing an account does not necessarily remove records we must retain. Backup copies may remain until their retention period ends and are restricted to recovery purposes.

Access, correction and other requests

You may request access to or correction of your personal data under Hong Kong’s Personal Data (Privacy) Ordinance. You can also ask about account deletion or information we retain. We may need to verify your identity and explain any information we cannot remove because it remains necessary or must be retained.

Use the privacy controls in your booking account or contact the studio through our contact page, asking for the person responsible for privacy. Please do not send medical documents or identity-document copies in an initial enquiry. We will explain what is needed to handle your request.

Updates

We may update this policy as our services or practices change. The date above identifies this version. Where appropriate, we will bring material changes to your attention.