Privacy Policy
Data Protection
At Mirabella Pilates, we take your privacy seriously. This policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).
Information We Collect
- Contact Information: Name, email address, phone number (when you book a class or contact us)
- Booking Data: Class bookings, attendance history, payment information (processed via PayPal)
- Communications: Messages you send us through our contact form
How We Use Your Data
- To process your class bookings and payments
- To send you class confirmations and schedule updates
- To respond to your inquiries
- To improve our services and website
Legal Basis
We process your data based on:
- Your consent (Article 6(1)(a) GDPR)
- Contract performance — booking a class (Article 6(1)(b) GDPR)
- Our legitimate interests in operating the business (Article 6(1)(f) GDPR)
Data Retention
We retain your personal data only for as long as necessary:
- Booking records: 2 years after last booking
- Contact form messages: 6 months
- Financial records: as required by tax law
Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Data Security
We use encryption (HTTPS/TLS) for data transmission. Payment data is processed by PayPal — we never store credit card information.
Use of Artificial Intelligence (EU AI Act)
Mirabella Pilates currently does not use any AI-based systems for automated decision-making, profiling, or content generation. Our website and booking system operate without artificial intelligence.
Should we introduce AI-powered features in the future (e.g., chatbots, automated content generation, or translation assistance), we will:
- Label all AI-generated content clearly and visibly, in accordance with Article 52(3) of the EU Artificial Intelligence Act (Regulation (EU) 2024/1689)
- Inform users when interacting with an AI system rather than a human, per Article 50
- Never deploy high-risk AI systems (as defined in Annex III of the EU AI Act) in connection with our services without full compliance, including conformity assessments and registration in the EU AI database
- Not use AI for automated decision-making that significantly affects users (e.g., class recommendations based on personal health/fitness data)
- Update this section to reflect any AI systems in use before they become operational
You have the right to human review of any automated decision affecting you. If you have concerns about AI in connection with our services, please contact us at: info@mirabellapilates.com
Contact
For privacy questions or to exercise your rights, contact us at: info@mirabellapilates.com
Updates
This policy may be updated. We will notify you of significant changes.