Privacy Policy

Agile Core Pilates (“we,” “us,” or “our”) is a private Classical Pilates studio operated from 2717 Mashie Circle, Castle Rock, Colorado 80109. This Privacy Policy explains what information we collect when you visit agilecorepilates.com or contact us, how we use it, and the rights you have over it. By using our website you agree to the practices described below.

Information we collect

Information you give us. When you submit our contact form we collect your name, email address, and the contents of your message. We use EmailJS to deliver these submissions to our inbox; the form data is processed by EmailJS and stored briefly in their systems before reaching us.

Information you give us when you buy sessions. Our checkout begins with a short intake form where we collect your name, email address, phone number, and anything you choose to tell us about your goals. The payment itself is handled by Stripe on their own hosted checkout page. Your card number, expiry date, and security code go directly to Stripe and never reach our website or our systems. Stripe returns to us a confirmation of the purchase along with the contact details you entered.

Information collected automatically. When you browse our site, we and our analytics and advertising partners automatically collect technical information including your IP address, device and browser type, operating system, referring URL, pages visited, time spent, and interactions such as clicks and scrolls. This is collected through cookies and similar technologies described below.

Cookies and tracking technologies

We use the following third-party tools, each of which sets its own cookies or uses similar technologies:

Google Analytics 4

Measures site usage, traffic sources, and conversion events. Operated by Google LLC.

Meta Pixel

Measures the effectiveness of advertising on Facebook and Instagram and enables retargeting. Operated by Meta Platforms, Inc.

Meta Conversions API

When a purchase is completed, our server sends a record of that purchase directly to Meta, in addition to the browser-based Meta Pixel described above. Your email address, phone number, and name are included only as irreversible cryptographic hashes, never as readable text, so Meta can match the purchase to an existing account without us disclosing your details. This server-side report honors the same choices as everything else on this page: if you have opted out on this device, or your browser sends a Global Privacy Control signal before you check out, we do not send it.

Microsoft Clarity

Records session heatmaps and anonymized session replays so we can understand how visitors use our site. Operated by Microsoft Corporation.

Stripe

Processes payments and screens the checkout for fraud, setting its own cookies on its hosted checkout page. Operated by Stripe, Inc. You can read Stripe’s privacy policy for details on how they handle your information.

You can disable cookies through your browser settings, opt out of tracking using the controls described in the Your choices section, or block tracking entirely with a privacy-focused browser such as Brave or Firefox.

How we use your information

We use the information we collect to:

• Respond to your inquiries and schedule sessions.
• Process payments for the sessions and packages you buy.
• Operate, maintain, and improve our website and the services we offer.
• Measure how visitors find and use our site so we can make it better.
• Show relevant advertising to people who have visited our site, and measure whether that advertising leads to bookings.
• Comply with legal obligations and protect our rights, property, and visitors.

We do not use your information for automated decision-making that produces legal or similarly significant effects about you.

How we share your information

We share information with the service providers and advertising partners listed above (Google, Meta, Microsoft, Stripe, EmailJS, and Vercel, which hosts our website). Each processes information on our behalf under their own privacy terms.

For purposes of Colorado law, our sharing of certain identifiers and behavioral data with Google and Meta to deliver targeted advertising may be considered a “sale” or “sharing” of personal information. This includes the hashed purchase records we send to Meta through the Conversions API. You can opt out of this in the Your choices section.

We do not sell personal information for money, and we do not share information with parties unrelated to operating our site, except when required by law (for example, in response to a valid legal request) or to protect our rights, property, or safety.

How long we keep your information

Contact form submissions are kept in our email inbox for as long as needed to respond to you and maintain a record of our correspondence, generally up to two years unless you ask us to delete it sooner. Records of purchases are retained by Stripe under their own policy, and we keep our copies for as long as tax and accounting rules require. Analytics and advertising data is retained according to the default settings of each provider (Google Analytics: 14 months; Meta and Microsoft: per their published policies). Cookies expire according to the duration set by each provider.

Your rights

If you are a Colorado resident, the Colorado Privacy Act gives you the right to:

• Know what personal data we have collected about you.
• Correct inaccuracies in that data.
• Delete your personal data.
• Receive a portable copy of your data in a commonly used format.
• Opt out of the processing of your data for purposes of targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.
• Appeal a decision we make about a rights request by replying to our response.

Residents of California, Connecticut, Virginia, Utah, and other U.S. states with comprehensive privacy laws have similar rights and may exercise them in the same way.

To exercise any of these rights, email us at agilecorepilates@gmail.com with the subject line “Privacy rights request” and a description of what you would like us to do. We will respond within 45 days. We may need to verify your identity before acting on your request; we will not retaliate against you for exercising any of these rights.

Your choices: opt out of advertising and analytics

You have several ways to limit how we and our partners collect and use information about you:

Universal Opt-Out (recommended). We honor the Global Privacy Control (GPC) signal. If your browser sends GPC, we will not load advertising or analytics scripts at all. Brave and DuckDuckGo browsers send GPC by default; Firefox has a toggle under Privacy & Security; for Chrome and Safari you can install the Privacy Badger or DuckDuckGo extension. This is the cleanest way to opt out across every site that respects it.

Opt out on this site. Use the button below to set a local preference that disables our advertising and analytics scripts on this device, including the server-side purchase reporting described above. This works alongside (but does not replace) GPC.

Tool-specific opt-outs. You can also opt out directly with each provider:

• Google Analytics Opt-Out Browser Add-On
• Meta ad preferences
• Microsoft advertising preferences

Children’s privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information. No system is perfectly secure, however, and we cannot guarantee that information transmitted over the internet will be free from unauthorized access.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. Material changes will be communicated through a notice on our website.

Contact us

For any questions about this Privacy Policy or about your information, contact us at: