Legal

Privacy Policy

Last updated: 30.06.2026

This Privacy Policy explains how Private Flow Pilates Reformer Studio ("Private Flow", "we", "us", "our") collects, uses, stores, and protects personal information when customers use our website, booking platform, and services.

Private Flow processes personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

By using our services, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal information is:

Private Flow Pilates Reformer Studio

Address:

Panagyurishte 11

Plovdiv, Bulgaria

Contact:

  • Instagram: @private.flow.pilates
  • Email: info@privateflow.bg

2. Personal Data We Collect

Private Flow may collect and process the following categories of personal data:

Identification Information

Including:

  • first and last name;
  • customer account information.

Contact Information

Including:

  • email address;
  • phone number.

Booking Information

Including:

  • booked sessions;
  • booking history;
  • attendance history;
  • memberships and packages purchased;
  • subscription status.

Payment Information

Including:

  • payment confirmation;
  • transaction information;
  • invoice details (if applicable).

Private Flow does not store full credit or debit card information.

Card payments are securely processed by third-party payment providers.

3. How We Use Your Personal Data

We process personal information for the following purposes:

  • creating and managing customer accounts;
  • managing bookings and reservations;
  • providing access to our services;
  • managing memberships and packages;
  • processing payments;
  • sending booking confirmations and notifications;
  • customer support;
  • improving our services;
  • complying with legal obligations.

4. Legal Basis for Processing Data

We process personal data based on:

Contract Performance

When processing is necessary to provide our services.

Examples:

  • creating bookings;
  • managing memberships;
  • processing payments.

Legal Obligations

When required by applicable laws.

Examples:

  • accounting requirements;
  • tax regulations.

Consent

When you have provided permission.

Examples:

  • marketing communication;
  • promotional updates.

You may withdraw your consent at any time.

Legitimate Interest

When necessary for:

  • improving our services;
  • protecting our business;
  • ensuring proper operation of our systems.

5. Sharing Personal Data

Private Flow does not sell personal data.

We may share information only when necessary with:

  • booking system providers;
  • payment processors;
  • accounting service providers;
  • IT service providers;
  • legal authorities when required by law.

All third parties must handle personal data according to applicable privacy and security requirements.

6. Data Retention

We keep personal data only for as long as necessary for:

  • providing our services;
  • fulfilling legal obligations;
  • accounting requirements;
  • resolving disputes;
  • protecting legitimate interests.

When data is no longer required, it will be deleted or anonymized.

7. Marketing Communication

With your consent, Private Flow may send:

  • studio updates;
  • promotions;
  • special offers;
  • service information.

You can unsubscribe from marketing communication at any time.

8. Cookies

Our website may use cookies and similar technologies.

Cookies may be used for:

  • website functionality;
  • improving user experience;
  • analytics;
  • marketing purposes.

Users can control or disable cookies through browser settings.

9. Data Security

Private Flow applies appropriate technical and organizational measures to protect personal information against:

  • unauthorized access;
  • accidental loss;
  • misuse;
  • unauthorized changes;
  • unlawful processing.

10. Your GDPR Rights

Under GDPR, you have the right to:

  • access your personal data;
  • request correction of inaccurate data;
  • request deletion of your data;
  • restrict processing;
  • object to processing;
  • request data portability;
  • withdraw consent.

To exercise these rights, please contact us.

11. Children and Minors

Private Flow services are intended for users who are legally allowed to participate independently.

If required by law, minors must have permission from a parent or legal guardian.

12. Third-Party Services

Our website and booking system may include services provided by third parties.

Private Flow is not responsible for the privacy practices of external websites or platforms.

We recommend reviewing their privacy policies separately.

13. Updates to This Policy

Private Flow may update this Privacy Policy from time to time.

The latest version will always be available on our website.

Continued use of our services means acceptance of the updated Privacy Policy.

14. Contact Information

Private Flow Pilates Reformer Studio

Address:

Panagyurishte 11

Plovdiv, Bulgaria

  • Instagram: @private.flow.pilates
  • Email: info@privateflow.bg