Privacy Policy

1. Who we are

This website (https://pilatesfloat.com) is operated by Pilates Float, with registered address in Madrid, Spain. We are the data controller responsible for the personal data processed through this website.

For any question about this policy or your personal data, you can contact us at [email protected].

2. What personal data we collect

Pilates Float is a business-to-business marketing website. We only collect the data you choose to give us, plus limited technical data needed to run the site securely:

• Contact form (“Request Information”): your full name and email (required), and your phone number, hotel or company name and message (optional). The form includes an explicit consent checkbox that you tick yourself.
• Email correspondence: if you write to us directly, we receive your message and your contact details.
• Language preference: we store a small value (pf_locale) in your browser to remember the language you chose. This is not a tracking cookie.
• Technical logs: our hosting provider may record technical data such as your IP address and request logs, which is standard for keeping a website available and secure.

We do not use advertising, analytics or tracking cookies, and our fonts are hosted on our own servers, so visiting the site does not send requests to third-party font providers.

3. Why we process your data and our legal basis

We process your personal data for the following purposes, each with its legal basis under Article 6 of the GDPR:

• To reply to your enquiry and prepare a commercial proposal: your consent (Article 6(1)(a)) given through the form checkbox, and the taking of steps at your request before entering into a contract (Article 6(1)(b)).
• To communicate with you as a business contact about our products and services: our legitimate interest in responding to and developing B2B relationships (Article 6(1)(f)).
• To keep the website secure and available: our legitimate interest in protecting our site and preventing abuse (Article 6(1)(f)).

4. Who receives your data

We do not sell your personal data. We share it only with service providers who process it on our behalf under data-processing agreements:

• Cloudflare: website hosting, content delivery and security.
• Resend: delivery of the emails generated by the contact form (once this service is live).

We may also disclose data where required by law or to defend our legal rights.

5. International data transfers

Some of our providers (including Cloudflare and Resend) are based in or process data in the United States. Where data leaves the European Economic Area, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

6. How long we keep your data

We keep enquiry data (contact form submissions and related correspondence) only for as long as needed to respond to you and to manage any business relationship that may follow. If no relationship develops, we delete or anonymise it, unless a longer period is required to comply with a legal obligation or to defend a legal claim. The pf_locale value stays in your browser until you clear it.

7. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, write to us at [email protected].

You also have the right to lodge a complaint with the data-protection supervisory authority of the country where we are established or where you live or work.

8. Cookies and local storage

Pilates Float does not use tracking, advertising or analytics cookies. The only item we store in your browser is the pf_locale preference, which simply remembers your chosen language. You can delete it at any time through your browser settings.

9. Children

This is a business service aimed at hotels, resorts and gyms. It is not directed at children, and we do not knowingly collect personal data from minors.

10. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls and trusted hosting and email providers. No system can be guaranteed perfectly secure, but we work to reduce the risk to your information.

11. Changes to this policy

We may update this policy from time to time. The current version always carries a “last updated” date, and the latest version is the one published at https://pilatesfloat.com.

12. How to contact us

For any question about this Privacy Policy or to exercise your rights, contact us at [email protected], or by post at our registered address in Madrid, Spain.