PRIVACY POLICY

Last updated: 11 August 2026

1. Controller

The controller responsible for the processing of your personal data in connection with this website and our services is:

Tatiana Rooney

tatianarooney@gmail.com

If you have any questions about how your personal data is processed or wish to exercise your data protection rights, you can contact us using the details above.

2. General Information

We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains what personal data we collect, why we process it, how we use it, with whom it may be shared, how long we retain it, and what rights you have under applicable data protection law.

Our processing of personal data is primarily governed by the EU General Data Protection Regulation (GDPR/DSGVO) and, where applicable, national data protection and telecommunications/digital-services legislation.

We process personal data only where a valid legal basis exists.

Depending on the circumstances, processing may be based on:

Art. 6(1)(a) GDPR – your consent;
Art. 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps at your request before entering into a contract;
Art. 6(1)(c) GDPR – processing necessary to comply with a legal obligation; or
Art. 6(1)(f) GDPR – processing necessary for our legitimate interests, provided that your interests or fundamental rights do not override those interests.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

3. Website Hosting and Wix

Our website, Virtual Studio and related digital services are operated using Wix.com.

Wix may process personal data on our behalf in connection with the hosting, operation, security and functionality of our website and online services.

This may include technical information such as:

IP address;
browser type and version;
operating system;
device information;
date and time of access;
pages or content accessed;
technical logs; and
information necessary to maintain the security and functionality of the website.

Wix may also use service providers and subprocessors in connection with its services.

Further information about Wix's processing of personal data can be found in Wix's Privacy Policy:

Wix Privacy Policy:

https://www.wix.com/about/privacy-onepager

The legal basis for processing depends on the particular processing activity and may include Art. 6(1)(b), Art. 6(1)(c), Art. 6(1)(f) GDPR or, where required, Art. 6(1)(a) GDPR.

4. Member Accounts

To access our Virtual Studio and other member-only services, you may create a personal account.

When you create an account, we collect:

your name;
your email address; and
your password.

We use this information to:

create and maintain your account;
authenticate your access;
provide access to your subscription and purchased content;
manage your membership;
provide customer support;
communicate with you about your account and services; and
protect the security of your account.

The legal basis for this processing is generally Art. 6(1)(b) GDPR, as the processing is necessary to provide the services you request and perform our contractual relationship with you.

Your password is used for authentication and should be kept confidential. We do not ask you to provide your password by email or through customer-support messages.

5. Subscription and Digital Services

Our Virtual Studio provides access to online fitness, Pilates, dance, flexibility, conditioning and related video classes and programs.

Depending on the service you purchase or subscribe to, we may process information relating to:

your account;
your subscription status;
purchases;
access rights;
purchased programs;
subscription history; and
technical information required to provide the service.

This information is processed so that we can provide the digital content and services you have purchased or subscribed to.

The primary legal basis is Art. 6(1)(b) GDPR.

We do not require you to provide medical information, health information, injury information or other special-category personal data in order to create a standard Virtual Studio account.

6. Video Content

Our Virtual Studio's video classes and programs are hosted and delivered through Wix.

When you access video content, technical information may be processed by Wix in order to deliver the video and maintain the functionality and security of the service.

Video access may also be associated with your account and subscription status where necessary to determine whether you are entitled to access particular content.

The processing necessary to provide the video service is generally based on Art. 6(1)(b) GDPR.

7. Payments

We offer payment options including:

credit and debit cards through Wix Payments
PayPal.

When you make a purchase or subscribe to a paid service, information necessary to process and document the transaction may be processed.

This may include:

your name;
email address;
billing information;
transaction information;
purchased product or subscription;
payment status;
refund or cancellation information; and
other information required for payment processing or fraud prevention.

Payment card details are processed through the relevant payment service provider. We do not intentionally store your complete payment card details on our own systems.

Wix Payments

Wix Payments allows us to accept credit and debit card payments through payment processing services. Depending on the transaction and Wix's current processing arrangements, payment processing may involve payment processors such as Adyen, Stripe or PayPal and their relevant affiliates or acquiring banks.

Further information can be found in the applicable Wix Payments terms and Wix Privacy Policy.

Wix Payments Terms:

https://www.wix.com/about/terms-of-payments

PayPal

If you choose PayPal as your payment method, your payment and personal information will be processed by PayPal in accordance with PayPal's applicable privacy policy and terms.

You may be transferred to or interact with PayPal's services during the payment process.

The processing of payment information is generally necessary to perform the contract under Art. 6(1)(b) GDPR.

Processing may also be necessary to comply with legal obligations relating to accounting, taxation and financial records under Art. 6(1)(c) GDPR.

8. Contact Forms

We use Wix Forms to allow you to contact us.

When you submit a contact form, we process the information you provide, such as:

your name;
email address; and
the contents of your message.

We use this information solely to respond to your enquiry, provide customer support or otherwise handle the matter you have contacted us about.

Where your enquiry relates to a contract or potential contract, the legal basis may be Art. 6(1)(b) GDPR.

For general enquiries, the legal basis may be Art. 6(1)(f) GDPR, based on our legitimate interest in responding to communications.

9. Newsletter and Marketing Emails

You may voluntarily subscribe to our newsletter.

Newsletter subscription is separate from your Virtual Studio membership.

Creating an account, purchasing a subscription or purchasing a program does not by itself constitute consent to receive our newsletter.

When subscribing to our newsletter, you may be asked to provide your email address and, where applicable, your name.

We use this information to send you communications such as:

new classes;
new programs and series;
upcoming live classes;
special offers;
website updates;
announcements; and
other information about our services.

The legal basis for sending the newsletter is generally Art. 6(1)(a) GDPR, based on your consent.

10. Newsletter Double Opt-In

We use a double opt-in process for newsletter subscriptions through Wix Email Marketing.

This means that after you submit your newsletter subscription and provide your consent, you will receive a confirmation email.

You must click the confirmation link in that email before your subscription becomes confirmed.

This process helps verify that the email address belongs to the person who requested the subscription and provides evidence of the subscription process.

Until confirmation has been completed, the subscription may remain in a pending status.

Wix confirms that its double-opt-in process requires the subscriber to verify their email address before becoming a confirmed subscriber.

We may retain information necessary to document your newsletter consent, including the email address, date/time of subscription and confirmation status.

The legal basis for this processing is Art. 6(1)(a) GDPR.

11. Withdrawal of Newsletter Consent

You may unsubscribe from our newsletter at any time.

Every marketing email will provide an option to unsubscribe.

You may also contact us directly using the contact details provided in this Privacy Policy.

Withdrawal of consent does not affect the lawfulness of processing carried out before your withdrawal.

Once you unsubscribe, we will stop sending you newsletter and marketing communications unless another lawful basis for sending a particular communication applies.

Wix itself recommends using explicit consent and double opt-in as part of responsible email marketing practices.

12. Wix Email Marketing

Our newsletter is sent using Wix Email Marketing.

Wix may process subscriber information on our behalf in order to send and manage newsletter communications.

Depending on the functionality enabled, Wix may also process technical information relating to the delivery of emails, such as whether an email could be delivered.

Further information about Wix's processing of personal data can be found in its Privacy Policy:

https://www.wix.com/about/privacy-onepager

13. Wix Analytics

We use Wix Analytics to understand how visitors use our website and to help us improve the website and our services.

Analytics may involve information such as:

pages visited;
interactions with the website;
technical information;
device and browser information;
approximate usage information; and
other information generated through your use of the website.

Where the use of analytics technologies requires consent under applicable law, they will be managed through our consent-management system and will not be activated until the applicable consent has been obtained.

Where analytics processing can lawfully take place without consent, the applicable legal basis may be Art. 6(1)(f) GDPR.

14. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

These technologies may be necessary for:

website functionality;
account login and authentication;
security;
remembering preferences;
analytics; and
other website functionality.

We distinguish between technologies that are technically necessary and technologies that require consent.

Where consent is legally required, we will request your consent before activating the relevant technology.

Under § 25 TDDDG, storing information on a user's device or accessing information already stored on the device generally requires the user's consent unless a statutory exception applies. One relevant exception applies where the storage or access is strictly necessary to provide a digital service expressly requested by the user.

15. Usercentrics Consent Management

We use Usercentrics for Wix as our consent-management solution.

Usercentrics helps us manage your preferences regarding cookies and similar technologies and document consent where required.

When you visit our website, the consent-management system may store information relating to your consent choices so that we can respect your preferences and demonstrate that consent was obtained where necessary.

Depending on your choices, certain non-essential technologies may remain disabled.

You can change or withdraw your consent through the available cookie-consent settings on our website.

16. No Third-Party Embedded Content

We do not intentionally embed third-party services such as YouTube videos, Instagram feeds, Google Maps or other external content providers into our website.

Our Virtual Studio video content is delivered through Wix.

External links may nevertheless be provided from time to time. When you click an external link, you leave our website and the privacy policy of the respective provider applies.

17. Legal and Accounting Obligations

We may process and retain certain personal data where this is necessary to comply with legal obligations.

This may include obligations relating to:

taxation;
accounting;
payment records;
business records;
consumer protection; and
responding to lawful requests from authorities.

The legal basis for such processing is Art. 6(1)(c) GDPR.

18. Data Recipients

We may provide access to personal data to service providers where this is necessary to operate our business and provide our services.

Depending on how you use our website, these may include:

Wix.com – website hosting, website functionality, member accounts, video delivery, forms, analytics and email marketing;
Wix Payments and its relevant payment processors – card and payment processing;
PayPal – PayPal payments;
Usercentrics – consent management; and
professional advisers, accountants or authorities where disclosure is required or legally permitted.

We do not sell your personal data.

Where service providers process personal data on our behalf, appropriate contractual and data-protection arrangements are used where required by applicable law.

19. International Data Transfers

Some service providers used in connection with our website may process personal data in countries outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on an appropriate legal transfer mechanism where required by applicable data protection law.

Depending on the circumstances, this may include:

an adequacy decision of the European Commission;
Standard Contractual Clauses approved by the European Commission; or
another legally recognised transfer mechanism.

Wix may use service providers and subprocessors located in different countries. Further information about Wix's international processing arrangements can be found in Wix's current Privacy Policy and related documentation.

20. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or where a longer retention period is required or permitted by law.

The applicable retention period depends on the type of data and the reason for processing.

Member account data

Your account information is generally retained while your account remains active.

After account closure, information may be retained where necessary to fulfil legal obligations, resolve disputes, enforce agreements or protect our legitimate interests.

Payment and transaction information

Payment and transaction information may be retained for the periods required by applicable accounting, tax and commercial laws.

Newsletter information

Newsletter information is retained while you remain subscribed or until you withdraw your consent, subject to any information that must be retained to document consent or comply with legal obligations.

Contact enquiries

Information relating to customer enquiries is retained for as long as necessary to handle the enquiry and any resulting contractual, legal or business matter.

Once personal data is no longer required and no legal obligation requires its retention, it will be deleted or otherwise securely disposed of.

21. Your Rights

Under the GDPR, you have a number of rights regarding your personal data.

Depending on the circumstances and applicable legal requirements, these include:

Right of access

You have the right to request confirmation as to whether we process personal data concerning you and, where applicable, to obtain a copy of that personal data.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where the legal requirements for deletion are met.

Right to restriction of processing

You may request that processing of your personal data be restricted in certain circumstances.

Right to data portability

Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format.

Right to object

Where processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR, you may have the right to object to the processing for reasons arising from your particular situation.

You also have the right to object at any time to processing of your personal data for direct marketing purposes.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

22. Exercising Your Rights

To exercise any of your data protection rights, please contact us at:

[YOUR PRIVACY EMAIL ADDRESS]

Please provide sufficient information to allow us to identify your request and respond appropriately.

We may need to verify your identity before fulfilling certain requests in order to protect your personal data from unauthorised disclosure.

23. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data is being processed unlawfully.

You may contact the supervisory authority in the EU Member State where you live, work or where you believe an infringement occurred.

If your business is established in Germany, the competent German supervisory authority depends on the relevant federal state.

If your business is established in another EU Member State, the relevant authority in that Member State may be competent.

24. Data Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures include the security measures provided through our website and service providers.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

25. Children's Data

Our services are not intended to knowingly collect personal data from children in circumstances where parental or guardian consent is legally required and has not been obtained.

If you believe that a child has provided personal data to us in circumstances where this should not have occurred, please contact us so that we can take appropriate action.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

our services;
our website;
the technologies we use;
the way we process personal data; or
applicable legal requirements.

The current version of this Privacy Policy will be published on our website.