PRIVACY
Your data,
handled carefully.
Last updated: 18 August 2026
This privacy notice explains how K Pilates in Salt Rock, KwaZulu-Natal (“K Pilates”, “we”, “us”) handles personal information when you use our website, make or manage a booking, contact the studio, or make a payment.
1. Who is responsible for your information
K Pilates is the responsible party for the personal information used to operate the studio and booking service.
Privacy / Information Officer contact:
[ADD STUDIO EMAIL]
[ADD STUDIO PHONE]
Salt Rock, KwaZulu-Natal, South Africa.
2. What we collect
- Identity and contact details such as your name, email address and mobile number.
- Booking details such as session type, date, time, duo partner name, cancellation status and booking reference.
- Payment status, amount and payment-provider references. K Pilates does not need to store full card numbers or card security codes in this booking database.
- Information you voluntarily include in booking notes or communications with the studio.
- Basic technical/security records generated when the website or administration system is used.
3. Why we use it
We use personal information to provide and administer Pilates sessions, process bookings and cancellations, reconcile payments and refunds, send service messages, respond to enquiries, keep accounting and operational records, prevent duplicate or fraudulent bookings, and comply with applicable legal obligations.
4. Payment information
Online payment is handled by the payment provider selected by K Pilates. The booking system sends the minimum transaction information needed to create and reconcile payment. Sensitive payment credentials and full card details remain with the payment provider rather than being stored in the K Pilates booking database.
5. Service providers
We may use specialist providers to operate the service, including a hosted database/authentication provider, payment processor, website host, and transactional email provider. These providers process information only as needed to deliver their services and are subject to their own contractual, security and privacy controls.
6. How long we keep information
We keep booking, payment and accounting records for as long as reasonably required for studio administration, dispute handling and applicable tax/legal recordkeeping. Data that is no longer required should be deleted or de-identified according to the studio's retention process.
7. Security
We use access controls, restricted administrator accounts, server-side payment credentials, database security rules and encrypted network connections. No online system can guarantee absolute security, so the studio should also use strong unique passwords, multi-factor authentication where available, and controlled access to administrator accounts.
8. Your choices and rights
You may contact K Pilates to request access to or correction of personal information, object to certain processing, ask about deletion where applicable, or raise a privacy concern. Some records may need to be retained where a legal or legitimate recordkeeping obligation applies.
9. Cross-border / cloud processing
Some technology providers may store or process information outside South Africa. Before launch, K Pilates should verify the locations and safeguards used by its chosen providers and document the basis for any cross-border processing required by applicable law.
10. Changes
We may update this notice when the booking service or providers change. The current version will be published on this page.
Operational note: This page is a practical website template, not a substitute for legal advice. Confirm POPIA, Information Officer, retention and cross-border requirements for the final business setup before launch.