Your data,
handled carefully.

Last updated: 27 August 2026

This privacy notice explains how K Pilates in Salt Rock, KwaZulu-Natal (“K Pilates”, “we”, “us”) handles personal information when you use our website, make or manage a booking, contact the studio, or make a payment.

1. Who is responsible for your information

K Pilates is the responsible party for the personal information used to operate the studio and booking service.

Privacy contact:
kayvgraham@gmail.com
+27 83 231 4370
Salt Rock, KwaZulu-Natal, South Africa.

2. What we collect

• Identity and contact details such as your name, email address and mobile number.
• Booking details such as session type, date, time, duo partner name, cancellation status and booking reference.
• Payment status, amount and payment-provider references. K Pilates does not need to store full card numbers or card security codes in this booking database.
• Information you voluntarily include in booking notes or communications with the studio.
• Basic technical/security records generated when the website or administration system is used.

3. Why we use it

We use personal information to provide and administer Pilates sessions, process bookings and cancellations, reconcile payments and refunds, send service messages, respond to enquiries, keep accounting and operational records, prevent duplicate or fraudulent bookings, and comply with applicable legal obligations.

4. Payment information

Online checkout is handled by Yoco. The booking system sends the minimum transaction information needed to create and reconcile payment. Sensitive payment credentials and full card details remain with Yoco rather than being stored in the K Pilates booking database.

5. Service providers

We may use specialist providers to operate the service, including a hosted database/authentication provider, payment processor, website host, and transactional email provider. These providers process information only as needed to deliver their services and are subject to their own contractual, security and privacy controls.

6. How long we keep information

We keep booking, payment and accounting records for as long as reasonably required for studio administration, dispute handling and applicable tax/legal recordkeeping. Data that is no longer required should be deleted or de-identified according to the studio's retention process.

7. Security

We use access controls, restricted administrator accounts, server-side payment credentials, database security rules and encrypted network connections. No online system can guarantee absolute security, so access to administrator email accounts and studio systems should also be protected with strong account security and multi-factor authentication where available.

8. Your choices and rights

You may contact K Pilates to request access to or correction of personal information, object to certain processing, ask about deletion where applicable, or raise a privacy concern. Some records may need to be retained where a legal or legitimate recordkeeping obligation applies.

9. Cross-border / cloud processing

Some technology providers used by the booking service may store or process information outside South Africa. K Pilates uses these services where reasonably necessary to operate the website, booking, payment and communication systems and should maintain appropriate safeguards for cross-border processing as required by applicable law.

10. Changes

We may update this notice when the booking service or providers change. The current version will be published on this page.