Privacy Policy
Last updated: July 2026
At Pilates Massimo we respect your privacy and want you to clearly understand what data we collect, what we use it for, and what rights you have over it.
Data controller
Pilates Massimo, located at Calle Amarguillo 1, 29006 Málaga, Spain. You can contact us at any time at info@pilatesmassimo.com or +34 696 50 88 66.
What data we collect
Name, phone and email when you book a class, create an account in My Portal, or sign up on our opening announcement page to receive information. We do not collect payment data or health data through the website.
What we use it for
To manage your bookings and customer account, send you email confirmations and class reminders, contact you by phone or WhatsApp when needed, and — if you signed up on our opening announcement page — let you know when the studio opens.
Legal basis
We process your data because it is necessary to manage the contractual relationship of your bookings, or because you have given us your express consent by voluntarily submitting a form (for example, the opening announcement form).
Who we share your data with
We do not sell or share your data with third parties for commercial purposes. We use the following providers as data processors, solely to operate the service: Supabase (database hosting, servers in the European Union), Resend (sending confirmation and reminder emails) and Vercel (website hosting).
How long we keep it
We keep your data for as long as you maintain an active account or relationship with the studio. If you signed up on the opening announcement page, we keep your data until the studio opens or until you ask us to delete it, whichever comes first.
Your rights
You can access, rectify, delete, restrict or object to the processing of your data, as well as request its portability, by writing to us at info@pilatesmassimo.com. You also have the right to file a complaint with the Spanish Data Protection Agency (aepd.es) if you believe we have not handled your data correctly.
Minors
Our services are aimed at people over 16 years old. If you are younger than that, we need the consent of your parent or legal guardian to process your data.
Changes to this policy
We may update this policy occasionally to reflect changes in our services or applicable regulations. The date of the last update appears at the top of this page.