Who is responsible

DOSA Studio, a pilates studio run by María Luisa in Santa Cruz, Guanacaste, Costa Rica (Calle La Danta, Finca Brasil, Santa Cruz, Guanacaste), is responsible for the personal data handled through this website. You can reach us on WhatsApp at +50660124324 or by email at hola@dosastudiocr.com.

This policy follows Costa Rica's Law No. 8968 on the Protection of Individuals regarding the Processing of their Personal Data and its regulations.

What we collect

Health information (injuries, medical conditions, pregnancy) is something you tell the instructor directly so she can adapt the exercises. It is not recorded in this site.

• Account details: your name, email address and, if you add it, your phone number.
• Bookings: which classes you book, cancel or attend, and when.
• Classes and payments: the plan you buy and the credits loaded to your account. Payments are made outside the site (SINPE Móvil, cash or bank transfer); we never see or store card numbers.
• Messages you send us on WhatsApp or Instagram, which stay on those platforms.
• Technical data needed to serve the site: IP address, browser and the pages you open, kept in server logs for a short time.

Why we use it

We only send news and promotions by email if you tick the box for it when you sign up or in your profile. You can untick it there at any time, or use the unsubscribe link in any of those emails; the list lives in Resend, the email service we use. We do not profile you and we do not sell or rent your data.

• To run your account and your bookings, including the waiting list.
• To send you the emails the service needs: booking confirmations, class reminders and notices when a class is cancelled.
• To keep track of the credits you have paid for.
• To answer your messages.

Who else sees it

Only the providers we need to run the site, and only for that purpose: the hosting provider where the site and its database run (Hetzner Online GmbH, Germany), the email service that delivers our notices (Resend), and Google if you choose to sign in with your Google account. Each of them processes the data under its own privacy terms and our instructions.

We only hand data to authorities when a law requires it.

How long we keep it

For as long as you keep your account, and up to 24 months after your last class so we can answer questions about credits and attendance. After that we delete or anonymise it, unless a legal obligation requires keeping it longer.

You can ask us to delete your account at any time; we will do it within ten working days.

Your rights

You can ask to see the data we hold about you, correct it, delete it, or withdraw your consent, at no cost, on WhatsApp at +50660124324 or by email at hola@dosastudiocr.com. We answer within the terms set by Law No. 8968.

If you believe we have not handled your request properly, you can file a complaint with PRODHAB, the Costa Rican data protection agency.

Security

The site is served over HTTPS, passwords are stored hashed, and access to the administration panel is restricted to the studio. No system is infallible, but we take reasonable measures to keep your data safe.

Changes

If this policy changes, we will publish the new version here with its date. Using the site after that date means you accept the updated version.