Privacy Policy
1) Interpretations
In this Privacy Policy the following definitions apply:
“Activities” means all Pilates and/or Yoga classes, sessions, events, workshops, programmes, private sessions, consultations, and other services provided by the Company, in person or online.
“Client” means any person who has created an account with the Company on the Website (defined below) or through the in2 app or has (at their request) had an account created on their behalf by the Company, and whose in2 account has been connected to the Company’s account such that they appear as a “client” on the Company’s online system.
“Company” means Silent House SPC (CR 1566770) trading as Pilates House, including its owners, directors, shareholders, officers, employees, instructors, contractors, agents and representatives.
“in2 app” means the mobile and web-based application owned and operated by in2, including all associated software, platforms, services, and functionalities made available thereon, through which Clients may register for, purchase, schedule, and/or manage classes, memberships, and related services offered by the Company.
“Privacy Policy” means this privacy policy, as amended from time to time.
“Terms and Conditions” means the Company’s terms and conditions, as amended from time to time.
“Website” means www.pilateshouse-om.com and any sub-domain of such Website.
References in the Privacy Policy to the singular will include the plural and vice versa and references to the masculine gender will include references to the feminine gender.
If a provision of this Privacy Policy is determined by any court or other competent authority to be unlawful and/or unenforceable, the other provisions will continue in effect.
The Company reserves the right to amend this Privacy Policy from time to time. Any such amendments shall take effect upon publication or notification to Clients. A Client’s continued attendance of Activities run by the Company, use of the Website or use of services offered by the Company constitutes acceptance of the Privacy Policy by such Client.
2) Data Controller
Silent House SPC (CR 1566770), trading as Pilates House, is the data controller responsible for processing personal data in accordance with this Privacy Policy.
3) Introduction
At Pilates House we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal data when you use the Website, the Company’s page on the in2 app or our services.
4) Information the Company Collects
When a person becomes a Client, the Company may collect personal data relating to such Client, including (but not limited to) their name, email address, phone number, gender, date of birth and payment details.
The Company may also collect information about how people use the Website, including their IP address, browser type, and access times.
5) How the Company Uses Information
The Company uses personal data to provide and manage its services, process payments, and communicate with Clients about their bookings or inquiries.
With Client’s consent, the Company may use their contact information to send them promotional materials, newsletters, or special offers. Clients can opt out of marketing communications at any time.
The Company may use usage data to analyse trends, administer the Website, and improve its services.
The Company may use Clients’ personal data to meet legal, regulatory, and insurance obligations.
6) Legal Basis for Processing
The Company processes personal data on one or more of the following legal bases:
(a) performance of a contract with the Client;
(b) compliance with legal obligations;
(c) the Company’s legitimate business interests, provided such interests do not override the Client’s fundamental rights;
(d) the Client’s explicit consent, where required by law.
Where processing is based on consent, the Client may withdraw such consent at any time without affecting the lawfulness of prior processing.
7) Data Sharing and Disclosure
The Company does not sell, trade, or rent personal data to third parties. The Company may share information with trusted third-party service providers who assist it in operating the Website or delivering its services, provided they agree to keep this information confidential.
If a Client makes a payment for products or services on the Website or through the in2 app, the details the Client is asked to submit will be provided to the Company's payment provider via a secured connection.
8) International Transfers
The Company may transfer, store, or process personal data outside the Sultanate of Oman, including through third-party service providers, cloud services, booking platforms, payment processors, or hosting providers. Where such transfers occur, the Company shall take reasonable steps to ensure that appropriate safeguards are in place to protect personal data in accordance with applicable data protection laws and standards.
9) Children’s Personal Data
The Company does not knowingly collect personal data from individuals under the age of eighteen (18) (“Minors”) without the consent of a parent or legal guardian (“Guardian”). As the Company does not routinely verify the age of all Clients, it relies on Clients and their Guardian to inform the Company where a participant is a Minor. Where the Company becomes aware that personal data relating to a Minor is being processed, such processing shall occur only with appropriate Guardian consent and in accordance with applicable law. Guardians may contact the Company to request access to, correction of, or deletion of a Minor’s personal data, subject to applicable legal and regulatory retention obligations.
10) Data Security
The Company implements a variety of security measures to protect personal data. However, no method of transmission over the Internet or electronic storage is 100% secure, so the Company cannot guarantee its absolute security.
11) Data Retention
The Company retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, accounting, or insurance requirements.
When personal data is no longer required, it shall be securely deleted or anonymised.
12) Data Breach
In the event of a personal data breach that poses a material risk to the rights or freedoms of Clients, the Company shall take reasonable steps to investigate, mitigate, and notify affected individuals and relevant authorities, where required by applicable law, within the timeframe required by applicable data protection law.
13) Your Rights
Clients have the following rights under applicable data protection law, subject to statutory limitations:
(a) the right to access their personal data held by the Company;
(b) the right to request correction of inaccurate or incomplete data;
(c) the right to request deletion of their personal data where there is no lawful basis for continued processing;
(d) the right to withdraw their consent where processing is based on consent;
(e) the right to object to processing of their personal data based on legitimate interests;
(f) the right to request restriction of processing of their personal data in certain circumstances.
The Company may decline requests where it is legally required to retain data, to establish or defend legal claims, or to comply with regulatory obligations.
14) Cookies
Cookies may be used to enhance user experience. Users can modify browser settings to refuse cookies, though this may affect Website functionality.
15) Third-Party Links
The Website and in2 app may contain links to third-party platforms. The Company is not responsible for their privacy practices.
16) Contact Us
Clients may submit complaints or enquiries regarding the Company’s data handling practices to info@pilateshouse-om.com. Clients also have the right to lodge a complaint with the competent supervisory authority in the Sultanate of Oman where they believe their personal data has been processed in breach of applicable law.