Fire Pilates Club Privacy Policy

1. Introduction

  1. Purpose of This Privacy Policy. This Privacy Policy describes how Fire Pilates Club LLC, a California limited liability company (“Fire Pilates Club,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal information in connection with:
    1. Our websites that link to or display this Privacy Policy (each, a “Website” and collectively, the “Websites”).
    2. Our mobile applications that link to or display this Privacy Policy (each, an “App” and collectively, the “Apps”).
    3. Any related online services, digital platforms, content, and communications that we control and that link to or reference this Privacy Policy (together with the Websites and Apps, the “Services”).
  2. Scope. This Privacy Policy applies to personal information we collect from or about:
    1. Visitors and users of our Websites and Apps.
    2. Individuals who create an account, purchase or book classes, memberships, or packages, or otherwise use the Services.
    3. Individuals who visit our physical studios, interact with us at events, or contact us by phone, text, email, or other means in connection with the Services.
    4. Individuals who receive marketing or other communications from us.
    5. Job applicants who submit personal information to us through the Services.

2. California Consumers

If you are a resident of California, this Privacy Policy is intended to provide you with a comprehensive description of our online and offline personal information practices and your rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, the “CCPA/CPRA”), and other applicable California privacy laws.

3. Privacy Policy

This Privacy Policy should be read together with our Terms and Conditions (the “Terms”), which govern your use of the Services. Additional notices, consents, or disclosures may apply to certain products, services, promotions, or features. In the event of a conflict between this Privacy Policy and a more specific notice, the more specific notice will control to the extent of the conflict.

4. accessing or using

By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with this Privacy Policy, you should not access or use the Services.

5. Personal Information We Collect

  1. Definition of Personal Information. For purposes of this Privacy Policy, “personal information” has the meaning given in the CCPA/CPRA, and generally means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.
  2. Categories of Personal Information. Depending on how you interact with us and the Services, we may collect and have collected in the preceding twelve (12) months the following categories of personal information. The examples listed below are illustrative and may vary depending on your interactions with us.
    1. Identifiers. Such as:
      1. Name, alias, username, account name, and password.
      2. Postal address, billing address, shipping or service address.
      3. Email address and telephone number.
      4. Unique personal identifiers, online identifiers, cookies, pixel tags, mobile advertising identifiers, device IDs, and similar identifiers.
      5. Internet Protocol (IP) address and other identifiers associated with your browser or device.
    2. Customer Records Information. Personal information described in California Civil Code section 1798.80(e), such as:
      1. Name, signature, address, telephone number, and email address.
      2. Payment card information (such as cardholder name, card type, truncated card number, and expiration date) and billing-related information, which may be collected and processed by our third-party payment processors.
      3. Records of purchased, reserved, or redeemed classes, memberships, packages, retail items, or other services.
    3. Characteristics of Protected Classifications. Where voluntarily provided and applicable to our Services, such as age or date of birth (for eligibility, waiver, and discount purposes). We do not require you to provide information regarding race, ethnicity, religion, or similar sensitive characteristics for participation in typical consumer Services.
    4. Commercial Information. Such as:
      1. Records of personal property or services purchased, obtained, or considered, including classes, memberships, packages, and merchandise.
      2. Class attendance history, including times, dates, and locations of classes attended.
      3. Information regarding class preferences, instructor preferences, and other fitness or wellness interests you indicate to us.
      4. Information about your participation in promotions, loyalty programs, challenges, events, or referral programs.
    5. Internet or Other Electronic Network Activity Information. Such as:
      1. Browsing history, search history, and information regarding your interactions with our Websites, Apps, emails, text messages, and advertisements.
      2. Pages or screens viewed, links clicked, features used, access dates and times, and referring website or application.
      3. Device and usage information, including browser type, operating system, app version, language settings, and crash or diagnostic data.
    6. Geolocation Data. Such as:
      1. General location information inferred from IP address or other identifiers.
      2. More precise geolocation data if you enable location services on your device or within the App, for example to locate nearby studios or classes.
    7. Audio, Electronic, Visual, or Similar Information. Such as:
      1. Recordings of customer service calls or virtual class sessions, where we notify you as required by law.
      2. Video recordings from security cameras located in our studios or facilities (in areas where such cameras are used) to protect the safety and security of our customers, employees, and property.
      3. Photographs or other images you choose to upload to your profile or otherwise provide to us (for example, community features or testimonials).
    8. Professional or Employment-Related Information. Such as:
      1. Employer or company affiliation where you participate through a corporate or group wellness program.
      2. Job application information, including resume, employment history, educational background, and other information you submit if you apply for a position with us.
    9. Education Information. If you are a job applicant or otherwise provide such information, such as school(s) attended, degrees obtained, and other educational history.
    10. Inferences Drawn from Other Personal Information. Such as:
      1. Profiles or segments reflecting your exercise preferences, attendance frequency, purchase tendencies, and potential interest in certain classes, instructors, or services.
      2. Propensity scores or similar analytical indicators derived from your interactions with the Services.
  3. Sensitive Personal Information. To the extent we collect or process “sensitive personal information” under the CCPA/CPRA, it may include:
    1. Account log-in, in combination with password or security credentials allowing access to your account.
    2. Payment card or other financial account information, in combination with required security or access codes, processed primarily by our third-party payment processors.
    3. Health-related information that you voluntarily provide in connection with your use of our Services, including:
      1. Information on injuries, physical limitations, medical conditions, or pregnancy status relevant to your participation in classes or programs.
      2. Emergency contact information.
    4. More precise geolocation data when you grant location access to the App.
  4. Information Not Considered Personal Information. Personal information does not include:
    1. Publicly available information, as defined under applicable law.
    2. Deidentified or aggregated information that cannot reasonably be used to identify you.
    3. Information excluded from the CCPA/CPRA’s scope, including certain health or medical information covered by other sector-specific laws, where applicable.

6. How We Collect Personal Information

  1. Information You Provide Directly. We collect personal information that you voluntarily provide to us, including when you:
    1. Create an account on our Website or App.
    2. Purchase or book classes, memberships, packages, or other services, whether online or in-studio.
    3. Check in to classes, sign waivers, or complete intake forms, including any health questionnaires or consent forms.
    4. Communicate with us by email, phone, text message, social media, chat, or through other online forms.
    5. Participate in promotions, surveys, contests, referral or loyalty programs, or events.
    6. Provide reviews, testimonials, feedback, or other content through the Services.
    7. Apply for a job with us.
  2. Information Collected Automatically. When you access or use the Services, we and our service providers may automatically collect certain information about your device and usage, including through cookies, pixels, software development kits (SDKs), and similar technologies. This may include:
    1. Device and usage information described herein.
    2. Log and analytics information about your interactions with the Services, such as the pages you view, the links you click, the classes you browse, and the features you use.
    3. General location information and, if enabled, more precise geolocation data from your device.
    4. Information collected by cookies and similar technologies:
      1. Cookies and similar tracking tools may be set by us (first-party cookies) or by third parties (third-party cookies), including analytics and advertising providers.
      2. These tools may be used to recognize you, remember your preferences, track your interactions with the Services, and measure the performance of our content and advertising.
    5. Information from Third Parties. We may receive personal information about you from:
      1. Service providers and contractors, such as:
        1. Payment processors that process your transactions on our behalf.
        2. Scheduling and booking platforms that facilitate class and membership management.
        3. Analytics providers that help us understand how the Services are used.
        4. Marketing and advertising partners that assist us with campaigns, audience measurement, and communications.
      2. Business partners, such as:
        1. Corporate or wellness partners that sponsor or provide access to our Services.
        2. Co-branded or joint-offering partners connected with specific promotions or events.
      3. Social media platforms and single sign-on providers, if you choose to connect your account or interact with us through such platforms, consistent with your privacy settings and the platforms’ policies.
      4. Publicly available sources, such as public websites or social media profiles, subject to applicable law.
      5. Affiliates and related entities, if any, that share information with us in accordance with this Privacy Policy or otherwise as permitted by law.
    6. Information from Our Physical and IT Systems. We may collect personal information through:
      1. Studio reception, check-in systems, or other sign-in processes.
      2. Door entry systems and security cameras used for safety and security purposes.
      3. Automated monitoring and logging of our Websites, Apps, and other IT systems for security, fraud prevention, and diagnostics

7. How We Use Personal Information

  1. Business and Commercial Purposes. We may use personal information for one or more of the following purposes:
    1. Providing and Managing the Services. Including:
      1. Creating, maintaining, and securing your account.
      2. Processing your transactions, bookings, and membership-related activities.
      3. Managing your class participation, attendance records, and studio access.
      4. Providing customer service and responding to your questions or requests.
    2. Personalizing Your Experience. Including:
      1. Tailoring class and membership recommendations based on your activity, preferences, and stated interests.
      2. Presenting content, offers, or promotions that may be of interest to you.
    3. Communicating with You. Including:
      1. Sending you service-related announcements, confirmations, receipts, administrative messages, and information about changes to the Services or this Privacy Policy.
      2. Sending you marketing and promotional communications, consistent with your preferences and applicable law.
    4. Analytics, Research, and Service Improvement. Including:
      1. Analyzing usage of the Services to understand performance, improve features, and develop new services.
      2. Conducting internal research, training, and quality assurance.
    5. Security and Fraud Prevention. Including:
      1. Helping to ensure the security and integrity of our systems and facilities.
      2. Detecting, preventing, and investigating fraud, abuse, unauthorized access, and other harmful or illegal activities.
    6. Compliance with Legal Obligations. Including:
      1. Complying with applicable laws, regulatory requirements, and legal processes.
      2. Responding to lawful requests and orders from law enforcement or other government authorities.
    7. Protection of Rights and Safety. Including:
      1. Enforcing our Terms and other agreements.
      2. Protecting the rights, property, and safety of Fire Pilates Club, our customers, employees, and the public.
    8. Corporate Transactions. Including:
      1. Evaluating or engaging in corporate transactions, such as mergers, acquisitions, restructurings, financings, or transfers of assets, in which personal information may be transferred as part of the transaction.
    9. Other Purposes. Including:
      1. Any other purpose disclosed to you at the time we collect your personal information.
      2. Any purpose to which you consent.
  2. Use of Sensitive Personal Information. We use sensitive personal information, if at all, only as reasonably necessary and proportionate for the following purposes:
    1. To provide the Services you request, such as:
      1. Using account log-in credentials to authenticate your account.
      2. Processing transactions through our payment providers.
      3. Considering voluntary health-related information to help instructors tailor or moderate exercises and to promote your safety.
    2. To help ensure the security and integrity of our systems and facilities.
    3. To prevent, detect, and investigate security incidents, fraud, and other malicious or illegal activities.
    4. To verify or maintain the quality or safety of the Services and to improve, upgrade, or enhance them.
    5. To comply with applicable law, court orders, or other legal processes

8. How We Disclose Personal Information

  1. Disclosure for Business Purposes. We may disclose personal information to the following categories of recipients for one or more of the business purposes described herein
    1. Service Providers and Contractors. Third parties that process personal information on our behalf and under our instructions to support our business operations, including:
      1. Payment processors and financial institutions.
      2. Scheduling and booking platforms.
      3. Cloud hosting and data storage providers.
      4. IT support and security providers.
      5. Email, SMS, and push notification service providers.
      6. Analytics, research, and measurement providers.
      7. Marketing and advertising partners acting as service providers or contractors.
    2. Business Partners. Third parties with whom we partner to offer co-branded or joint services, promotions, or events, or that sponsor access to our Services (such as corporate wellness partners).
    3. Affiliates. Our parent, subsidiary, or affiliated entities, if any, consistent with this Privacy Policy.
    4. Professional Advisors. Attorneys, accountants, auditors, insurers, and other professional advisers to the extent reasonably necessary for the provision of their professional services.
    5. Governmental Authorities and Law Enforcement. Government, regulatory, or law enforcement authorities when we believe disclosure is necessary or appropriate to:
      1. Comply with applicable laws and legal processes.
      2. Respond to lawful requests and orders.
      3. Protect the rights, property, or safety of Fire Pilates Club, our customers, employees, or others.
    6. Corporate Transaction Parties. Actual or prospective buyers, investors, or other parties, and their advisers, in connection with any proposed or actual reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or equity interests.

9. Sale or Sharing of Personal Information

  1. As of the effective date of this Privacy Policy, we do not knowingly sell personal information as “sell” is traditionally understood. However, some of our practices involving cookies, analytics, and advertising technologies may be considered a “sale” or “sharing” of personal information under the CCPA/CPRA when personal information is disclosed to third parties for cross-context behavioral advertising. To the extent we engage in such practices:
    1. We will treat such disclosures as a sale or sharing of personal information under California law.
    2. We will provide you with the right to opt out of such sale or sharing, as described in herein.
    3. We do not knowingly sell or share the personal information of consumers under 16 years of age.
    4. Aggregated or Deidentified Information. We may create aggregated, anonymized, or deidentified information from personal information by removing or modifying data elements that make the information personally identifiable to you. We may use and disclose such aggregated or deidentified information for any lawful business purpose, provided that we will not attempt to reidentify deidentified data except as permitted by law

10. Retention of Personal Information

  1. General Retention Criteria. We retain personal information for as long as reasonably necessary to achieve the purposes described in this Privacy Policy, taking into account:
    1. The type and sensitivity of the personal information.
    2. The purposes for which we collect and process the information.
    3. The potential risk of harm from unauthorized use or disclosure.
    4. Our legal, regulatory, tax, accounting, and reporting obligations.
    5. The time periods for which we may need to retain information to exercise or defend legal rights or respond to inquiries.
  2. Operational Retention. For example, we will generally:
    1. Retain account information for as long as your account remains active and for a reasonable period thereafter.
    2. Retain transaction records for periods required by applicable tax and accounting laws.
    3. Retain security and fraud-related information as long as necessary to protect our interests and comply with legal obligations.
  3. Deletion or Deidentification. When we no longer have a legitimate business need or legal requirement to retain personal information, we will take reasonable steps to delete, anonymize, or deidentify it, in accordance with applicable law

11. Your Rights Under California Law

  1. If you are a California resident, you may have the following rights with respect to your personal information, subject to certain exceptions and limitations under the CCPA/CPRA:
    1. Right to Know. You may have the right to request that we disclose the following information for the twelve (12) months preceding your request:
      1. The categories of personal information we collected about you.
      2. The categories of sources from which the personal information was collected.
      3. Our business or commercial purposes for collecting, selling, or sharing personal information.
      4. The categories of third parties to whom we disclose personal information.
      5. The categories of personal information we sold or shared, and the categories of third parties to whom that information was sold or shared, if any.
      6. The categories of personal information we disclosed for a business purpose, and the categories of recipients.
      7. The specific pieces of personal information we collected about you (also referred to as a data portability right).
    2. Right to Delete. You may have the right to request that we delete personal information we collected from you, subject to certain statutory exceptions. If we grant your request, we will delete your personal information from our records and direct our service providers and contractors to do the same, subject to exceptions (for example, where retention is necessary to complete a transaction, comply with law, detect security incidents, or exercise legal rights).
    3. Right to Correct. You may have the right to request that we correct inaccurate personal information that we maintain about you, in light of the nature of the information and the purposes for which we process it.
    4. Right to Opt Out of Sale or Sharing. To the extent we sell or share your personal information as these terms are defined by the CCPA/CPRA, you have the right to direct us to stop such sale or sharing of your personal information.
    5. Right to Limit Use and Disclosure of Sensitive Personal Information. To the extent we use or disclose your sensitive personal information for purposes other than those permitted by the CCPA/CPRA without the right to limit, you have the right to direct us to limit such use or disclosure to certain purposes authorized by law.
    6. Right to Non-Discrimination. You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights. We will not, because you exercise your rights:
      1. Deny you goods or services.
      2. Charge you different prices or rates for goods or services, including through discounts or other benefits, or by imposing penalties, except as permitted by law (for example, in connection with a bona fide loyalty, rewards, or premium feature program).
      3. Provide you with a different level or quality of goods or services.
      4. Suggest that you may receive a different price or rate for goods or services, or a different level or quality of goods or services, because you exercised your rights, except as permitted by law

12. How to Exercise Your California Privacy Rights

  1. Submitting Requests. You may exercise your rights described in herein by submitting a request through one or more of the following methods:
    1. By calling us at: 424-416-9564
    2. By emailing us at: info@firepilatesclub.com
    3. By submitting a request through our online request form available via our Website or App.
  2. Information We May Request. To protect your privacy and maintain security, we may need to verify your identity before processing your request. The information we request from you may include:
    1. Your full name.
    2. Email address associated with your account.
    3. Telephone number.
    4. Mailing address.
    5. Limited additional information as needed to reasonably verify your identity and your relationship with us.
  3. Authorized Agents. You may designate an authorized agent to make a request on your behalf. If you choose to do so, we may require:
    1. A written and signed authorization from you granting the agent permission to submit the request on your behalf.
    2. Verification of the identity of both you and your authorized agent.
    3. For certain requests, a valid power of attorney that meets the requirements of California law.
  4. Response Timing and Process. We will endeavor to respond to verifiable consumer requests within forty-five (45) days of receipt. If we require more time (up to an additional forty-five (45) days), we will inform you of the reason and extension period in writing. Our response will:
    1. Explain the actions we have taken in response to your request.
    2. Explain any reasons we cannot fulfill part or all of your request, if applicable.
    3. Describe any rights of appeal you may have, if required by law.
  5. Limitations. We may deny your request, in whole or in part, where an exception applies or where we cannot verify your identity with the degree of certainty required by law. If we deny your request, we will provide you with an explanation consistent with applicable law.
  6. Opting Out of Sale or Sharing. If you wish to exercise your right to opt out of the sale or sharing of your personal information:
    1. You may contact us using any of the methods provided herein and specify that you wish to opt out of “sale” or “sharing” as defined under the CCPA/CPRA.
    2. Where available, you may use our “Your California Privacy Choices” link or a similarly titled link in the footer of our Website or in the settings section of our App.
    3. We will also recognize certain opt-out preference signals, such as a browser-based Global Privacy Control signal, in accordance with applicable law.
  7. Limiting Use of Sensitive Personal Information. To the extent we use or disclose your sensitive personal information beyond the limited purposes permitted by the CCPA/CPRA, you may direct us to limit such use or disclosure by contacting us through one of the methods in Section 8.1 and specifying that you wish to “limit the use of my sensitive personal information.”

13. Your Choices

  1. Marketing Communications. You may opt out of receiving marketing or promotional emails from us by:
    1. Following the unsubscribe instructions included in such emails.
    2. Adjusting your communication preferences within your account settings, if available.
  2. Contacting us at the email address listed herein and requesting to be removed from our marketing lists.
  3. Even if you opt out of marketing communications, we may still send you non-promotional communications, such as transactional emails relating to your account or purchases.
  4. Text Messages. If you have opted in to receive text messages from us, you may opt out of receiving further text messages by following the instructions we provide, which may include replying “STOP” or a similar keyword to any message you receive from us. Message and data rates may apply.
  5. Push Notifications. You may control push notifications from our App through your device settings. Disabling push notifications may limit your ability to receive certain time-sensitive information, such as class reminders or schedule changes.
  6. Cookies and Tracking Technologies. You can typically configure your browser or device settings to block or delete cookies and other tracking technologies. However, if you do so, some features of the Services may not function properly. For mobile apps, you may be able to limit certain tracking through your device’s privacy settings (for example, limiting ad tracking or resetting your mobile advertising ID).

14. Children’s Privacy

  1. General. The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete such information.
  2. Minors 13 to 17. Individuals between 13 and 17 years of age may be permitted to use certain aspects of the Services or participate in classes, subject to our policies, the Terms, and any required parental or guardian consents. We may request limited information relating to minors as needed for participation, safety, and consent documentation

15. Data Security

  1. Security Measures. We use reasonable physical, technical, and administrative measures designed to protect personal information under our control from loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures may include:
    1. Access controls and authentication procedures.
    2. Encryption of certain information in transit and at rest.
    3. Firewalls and intrusion detection systems.
    4. Regular monitoring and testing of our systems.
  2. No Absolute Security. While we take reasonable steps to protect personal information, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the security of your personal information, and you provide it at your own risk. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

16. International Users

  1. The Services are intended for use in the United States. If you access the Services from outside the United States, you understand that your personal information may be transferred to, stored in, and processed in the United States or other jurisdictions that may not provide the same level of data protection as your home jurisdiction. By using the Services, you consent to the transfer, storage, and processing of your personal information in the United States and other jurisdictions as described in this Privacy Policy

17. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this Privacy Policy and, where required by law, provide you with additional notice (such as by posting a notice on our Websites or Apps, or by contacting you directly). Your continued use of the Services after any changes become effective constitutes your acceptance of the revised Privacy Policy.

18. Contact Us

We may update or modify this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this Privacy Policy and, where required by law, provide you with additional notice (such as by posting a notice on our Websites or Apps, or by contacting you directly). Your continued use of the Services after any changes become effective constitutes your acceptance of the revised Privacy Policy.