Privacy policy

01 — The studio and this notice

The You Studio is powered by TeamYou HQ. This draft concerns the You Studio website and its Pilates intake process. The connection between the studio and gym does not, by itself, mean that your health details are shared with every gym employee or used for unrelated gym services.

Separate TeamYou HQ services and any future booking or payment service may have their own notices. Their information practices must be explained before you are asked to use them; this draft does not describe an active booking account or payment process.

02 — What you share at intake

The client intake form requests information in the following groups:

• Contact details: your first and last name, email address, phone number and optional date of birth.
• Emergency contact: the name and phone number of a person you nominate, and their relationship to you. Please make sure they know you are providing their details for this purpose.
• Movement preferences: your Pilates experience, interest in Mat, Reformer or Fusion classes, and any goals you choose to share.
• Participation considerations: responses about recent hospitalization or surgery and concerns such as injuries, medical conditions, pregnancy or heat sensitivity, with optional notes about comfort or modifications.
• Submission confirmation: your initials, confirmation of accuracy, collection consent and a record of when the intake was submitted and which consent version applied.

03 — A considered approach to health details

Health-related answers can be sensitive. Share only what is relevant to preparing for your participation. The form provides “Prefer to discuss privately” choices and optional space for notes; it does not ask you to upload medical records or identification numbers.

These details support a conversation about participation and possible modifications. They are not a medical assessment, diagnosis or guarantee that a class or heated amenity is suitable for you.

The form asks for specific collection consent before submission. That consent is separate from promotional messages and any liability waiver. You may contact the studio to discuss a concern or ask about withdrawing consent; any implications for your intake and any legal retention requirements should be explained in response.

04 — Why the intake is requested

The intake collection notice identifies three purposes: preparing for your participation, discussing suitable modifications and contacting you about your intake. Your emergency contact details are requested so the studio has a nominated person to contact if a situation requires it.

Completing an intake is not a subscription to marketing. Any proposed use beyond the stated intake purposes should be explained separately, with consent obtained where required. Reading this draft does not expand the permission you have given.

05 — Private storage and responsible access

Intake submissions are stored privately in Lovable Cloud for review by authorized studio project managers, as stated in the form’s collection notice. Website visitors and ordinary signed-in users cannot read those submissions.

The proposed standard is to limit access to people who need the information for its stated purpose and to service providers supporting its secure storage and operation. Any additional access, including access by instructors or gym personnel, must be defined and communicated rather than assumed.

Disclosure may also be necessary where permitted or required by law, or to respond to an emergency, subject to applicable legal limits. The studio must confirm its provider arrangements, processing locations and safeguards before this policy is finalized. No online storage or transmission method can eliminate every security risk.

06 — Website requests and external services

To help prevent repeated or automated intake submissions, the submission process uses hashed identifiers derived from your email address and, where available, your connecting IP address. These identifiers support request limits; the raw IP address is not stored in the intake record.

The website loads typefaces from Google Fonts, which involves your browser contacting that service. Links to Instagram and TeamYou HQ take you to separate websites whose own privacy notices apply.

A complete list of hosting providers, cookies, browser storage, technical logs and any analytics used on the published website still needs confirmation. This draft does not claim that the website is cookie-free or that advertising or analytics consent has been collected.

07 — Keeping information only as needed

The intended approach is to keep personal information only for the relevant service purpose and any applicable legal or recordkeeping requirements, then securely delete or de-identify it when appropriate.

Specific retention periods, deletion procedures and backup handling have not yet been confirmed. This draft does not promise automatic deletion after a set period. Please contact the studio if you would like to ask how a particular record will be handled.

08 — Questions, corrections and your choices

You can contact the studio to ask about information you have submitted, request access or a correction, discuss withdrawal of consent, or request deletion. Requests are subject to applicable law; withdrawal or deletion may not remove records that must legally be retained.

Use the contact details below and describe the request without sending detailed medical information in your first email. Identity may need to be verified before a personal record is released or changed. The studio’s verification and response procedures must be confirmed as part of final approval.

09 — Approval and future changes

The approved version will be published here with its effective date. If the studio later introduces booking, payments, promotional communications or other new uses of personal information, the notice should be reviewed and updated to reflect those actual practices. Additional notice or consent must be provided where required.