Privacy Policy
Last updated: 1 June 2026
Data controller
The controller of your personal data is Superstar Studio S.R.L. (CUI 53386361, Nr. Reg. Com. J2026004234007), registered office at Strada Bogdan Vodă nr. 124, Rădăuți, 725400, Suceava, Romania, which operates Roots Pilates Studio. For any question regarding data processing, you can message us directly on WhatsApp at +40 756 479 198 (fastest), email us at hello@rootspilates.ro, or call us at the same number.
What data we collect
We collect only the data needed to provide our services: name, phone number, and the information you send when you message us on WhatsApp, email us, or make a booking. When you contact us on WhatsApp, we receive your phone number and the content of your message. If you create an account for online booking, we also process your login details (for example, your email address and password, stored in encrypted form) and your reservation history.
Purpose of processing
We use the data to manage bookings and packages, to communicate with you about sessions, and to improve our services. We do not sell or rent your data to third parties.
Legal basis
We process data on the basis of contract performance (providing the services), your consent (for example, for anonymous analytics or marketing communications where applicable), and legal obligations (for example, accounting records).
Who we share data with
We do not sell or rent your data. We may share it only with providers who help us run the studio and the website, acting as our processors: the WhatsApp messaging service (Meta), through which we receive messages and booking requests; the online booking and accounts platform (Supabase), once that service is live; and, only with your consent, an anonymous website analytics service. We may also disclose data to public authorities where the law requires it.
International transfers
Some of our providers (for example, WhatsApp/Meta) may process data outside the European Economic Area. In those cases, the transfer relies on the safeguards required by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.
Health data
Please do not send us sensitive data through WhatsApp messages or email. If, in connection with attending sessions, you voluntarily share health information (for example, an injury or a pregnancy), we process it only with your explicit consent and solely to provide your sessions safely.
Data retention
We keep data only as long as necessary for the purposes above or as required by applicable law, after which we delete or anonymise it. For example, accounting documents are kept for the period required by tax law, while contact details for bookings are kept for as long as you are an active client.
Data security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Access to data is limited to the people who need it to provide you with our services.
Cookies
The website uses essential cookies and local browser storage and, only with your consent, anonymous analytics tools. The details are described in our Cookie Policy.
Your rights (GDPR)
You have the right of access, rectification, erasure, restriction, portability and objection regarding your data, as well as the right to withdraw consent at any time. To exercise these rights, message us directly on WhatsApp at +40 756 479 198 or email us at hello@rootspilates.ro. We will respond within one month and, to protect your data, we may ask you to confirm your identity. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, www.dataprotection.ro).
Changes to this policy
We may update this policy from time to time. The current version is the one published on this page, with the last-updated date shown above.