Privacy notice

formadxb is a private one-to-one Pilates studio in Victory Heights, Dubai, run by a single instructor, who is the data controller for everything described here. For any question about your data, or to exercise any of the rights below, contact liset@formadxb.com.

When you sign up: your name, email, phone number, date of birth and an emergency contact. About your training: your experience, how often you currently train and at what, what you want from the sessions, and whether you prefer music.

Health information — injuries, medical conditions, medications, and pregnancy or post-natal status. This is “special category” data and is treated with more care than the rest.

If you become a client, I also hold your bookings, attendance, session notes and payment records.

• Health information — to plan and adapt sessions so they are safe for you. My lawful basis is your explicit consent, which you give with its own tick box when you sign up, and which you can withdraw at any time.
• Contact and training details — to arrange sessions, contact you about them, and provide the training you asked for. My lawful basis is performance of our agreement, and my legitimate interest in running the studio.
• Payment records — to know what has been paid, and to meet record-keeping obligations.

I do not use your information for advertising, I do not profile you, and I do not sell or share it for anyone else's marketing.

Only me. No other instructor, assistant or agency has access. Some suppliers process data on my behalf so the website works, and are permitted to use it only for that purpose:

• Supabase — the database holding your details and bookings.
• Netlify — hosting for this website.
• Google Workspace — email notifications and calendar scheduling.
• Stripe — card payments, if you pay online. I never see your card number.

These providers may store or process data outside the UAE, including in the EU and the United States, under the safeguards their own terms provide.

While you are a client, and for up to two years after your last session, so I have your history if you come back. Payment records are kept longer where the law requires it. If you sign up but never book, I delete your details within twelve months. You can ask me to delete them sooner.

You can ask me at any time to:

• give you a copy of what I hold about you;
• correct anything that is wrong;
• delete your information;
• stop or limit how I use it, or object to a particular use;
• provide it in a portable form, or send it to someone else;
• withdraw your consent to holding health information.

Just email me and I will act on it within one month. Withdrawing consent for health information does not undo anything done before you withdrew it, but it does mean I can no longer safely programme around an injury or condition.

If you are in the EU or UK and think I have handled your data badly, you have the right to complain to your national data protection authority — though I would rather you told me first so I can put it right.

If this notice changes materially, I will tell existing clients by email rather than quietly editing the page.