Privacy Policy

Data Controller

HRCA Lifestyle Sweden AB, with address Saltholmsgatan 26, 42676, Västra Frölunda, is responsible for the processing of your personal data.

Questions about how we handle your data? Reach us at hello@reformedpilates.se

Personal Data We Process

• Identification details: name, personal ID number, and date of birth
• Contact details: address, email address, and phone number
• Payment information: bank account details, membership transaction history, and billing information
• Digital identifiers: IP address, cookies, device information, and browsing activity

How We Collect Personal Data

We collect data when you:

• Register for an account or service
• Communicate with us via email, phone, or other channels
• Use our website, applications, or digital services
• Enter into a contract or business relationship with us
• Participate in surveys, campaigns, or promotions

Purpose of Processing

• To provide and manage our services and products
• To fulfill contractual obligations
• To comply with legal requirements and regulations
• To enhance security and prevent fraud or misuse
• To improve our services and customer experience
• To communicate relevant information and marketing (where permitted and with consent)

Camera Surveillance

We use camera surveillance in our facility to ensure customer safety and prevent criminal activity. Cameras are positioned only at public entrances — there is no surveillance in changing rooms or exercise areas.

Recordings are retained for 14 days. Access is restricted to key personnel bound by confidentiality agreements. Files are stored locally, with no external access beyond our service provider.

Legal Basis for Processing

• Necessity to fulfill a contract with you
• Compliance with legal and regulatory obligations
• Legitimate interests, such as security and fraud prevention
• Consent, where required by law (e.g. for marketing purposes)

Data Sharing & Third Parties

• Service providers: companies assisting with IT, payments, and customer support
• Authorities: when required by law, such as tax agencies or regulatory bodies
• Partners: third parties involved in delivering specific services, with your explicit consent where required

Data Retention

Data is retained only as long as necessary to fulfill the stated purposes or as required by law. After this period, data will be securely deleted or anonymised.

Data Security

We implement appropriate security measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

Your Rights

• Right to access and obtain a copy of your data
• Right to rectification of inaccurate data
• Right to erasure (‘right to be forgotten’)
• Right to object to processing
• Right to data portability
• Right to withdraw consent (where applicable)
• Right to lodge a complaint with the Swedish Data Protection Agency (IMY)

Changes to This Notice

We may update this Privacy Notice from time to time. Any significant changes will be communicated appropriately.