Privacy Policy
This is a translation for convenience. In case of discrepancy, the Bulgarian version prevails.
Effective from: [website launch date]
In short: we collect only the data we need to book your class, reply to you and manage your class pass. We do not sell data and do not use it for advertising without your consent. You can ask to see or delete it at any time.
1. Who we are
The data controller is [Company name] EOOD, UIC [number], with its registered office and address of management at [address], which operates Maison LÉA Pilates Studio, 22 Todor Nedkov St, Malinova Dolina, Sofia.
Phone: +359 88 414 4476 · Email: maisonlea97@gmail.com
2. What data we collect
- When you book: name, phone number, email, the class and time you choose, and whether this is your first visit.
- When you send an enquiry through the “Write to us” form: name, phone number or email, and the topic and text of your message.
- When you order a voucher: your name, email and phone number, the type and value of the voucher, the recipient’s name and your note (optional).
- When you subscribe to the newsletter: email.
- Health information: only if you choose to tell us (injuries, pregnancy), so that we can plan a safe programme for you.
- Technical data: to protect the site from spam we keep a shortened (hashed) IP address for up to 10 minutes. Your browser stores your banner choice and the details you have entered so you do not have to type them again. See Cookies.
Your chat with the assistant Pili stays in your browser only and is not sent to us.
3. What we use it for and on what legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Booking, confirming and reminding you of a class | Performance of a contract |
| Managing class passes, visits and payments | Contract and legal obligation (accounting) |
| Replying to an enquiry | Your consent (the tick box in the form) |
| Ordering, paying for and sending a voucher | Performance of a contract |
| Newsletter with news and offers | Consent, which you can withdraw with one click |
| Health information for safe training | Explicit consent (Art. 9(2)(a)) |
| Protecting the website from spam and abuse | Legitimate interest |
4. How long we keep it
- Booking and class pass data: up to 2 years after your last visit.
- Accounting records: 10 years, as required by the Accountancy Act.
- Enquiries: up to 6 months after we reply.
- Newsletter: until you unsubscribe.
5. Who we share it with
We do not sell your data or give it to third parties for advertising. We only use service providers who help us operate, and give them only what is necessary:
| Provider | What it does | Where |
|---|---|---|
| [Hosting provider] | The website and the database of bookings and enquiries | [EU] |
| Telegram | Notifies our team of a new booking or enquiry (name, contact details, message) | Outside the EU |
| [Email service, e.g. Resend] and Google (Gmail) | Email confirmations and correspondence with you | EU / USA |
| Google Maps | The map on the Contact page. Google receives your IP address when the map loads | EU / USA |
| Accountant | Payment records | Bulgaria |
Where data is processed outside the European Union, we rely on a European Commission adequacy decision (e.g. the EU–US Data Privacy Framework) or on standard contractual clauses. You can ask for more information at the email below.
6. Your rights
- To find out what data we hold about you and receive a copy.
- To have it corrected if it is inaccurate.
- To request erasure (the “right to be forgotten”).
- To restrict or object to processing.
- To withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- To receive your data in a portable format.
We respond to every request within 1 month. We do not make automated decisions or profile you. Our services are for adults; anyone under 18 needs a parent’s consent.
7. Contact and complaints
For questions, email maisonlea97@gmail.com or call +359 88 414 4476. If you believe your rights have been infringed, you can lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, Sofia, www.cpdp.bg.