Legal

Privacy Policy

Last updated: 12 May 2026

At KŌR Studio, we are committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the rights you hold under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data controller

The data controller responsible for your personal data is:

2. What information we collect

We collect personal information that you provide directly when you book a class, purchase a package, contact us, or sign up for updates. This may include:

• Name and contact details (email address, phone number)
• Booking and class attendance history
• Payment information (processed securely by Stripe — we do not store full card details)
• Health information you choose to share (e.g. injuries or conditions relevant to class participation)
• Communications you send us via email, WhatsApp, or social media
• Technical data from your visit (IP address, browser type, pages viewed), collected through cookies and analytics

3. How we use your information

We process your personal data for the following purposes:

• To deliver our services: managing bookings, processing payments, communicating about your classes
• To ensure your safety: understanding any health considerations you choose to share before class
• To improve the studio experience: analysing site usage and feedback
• To send marketing communications, only where you have given consent (you can withdraw this at any time)
• To comply with legal obligations, such as tax and accounting requirements under Spanish law

4. Legal bases for processing

We rely on the following legal bases under GDPR Article 6:

• Contract: to provide services you have booked or purchased
• Consent: for marketing communications and non-essential cookies
• Legitimate interests: for service improvement and security
• Legal obligation: for tax records and regulatory compliance

5. Sharing your information

We do not sell your personal data. We share information only with trusted service providers who help us operate the studio:

• Squarespace — website hosting and content management
• Acuity Scheduling (Squarespace Scheduling) — class bookings and scheduling
• Stripe — secure payment processing (EUR)
• Weglot — website translation

These providers process your data on our behalf under contractual safeguards. Some may transfer data outside the EU/EEA, in which case we ensure appropriate protections are in place (such as Standard Contractual Clauses approved by the European Commission).

6. How long we keep your information

We retain personal data only as long as necessary for the purposes set out above, or as required by Spanish law. Booking and financial records are kept for the period required by tax legislation (generally six years). Marketing data is held until you withdraw consent.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict our processing of your data
• Request a copy of your data in a portable format
• Withdraw consent for marketing at any time
• Lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated

To exercise any of these rights, please contact us at korstudiomallorca@gmail.com. We will respond within one month, as required by GDPR.

8. Cookies

Our website uses cookies to ensure essential functionality, remember your preferences, and analyse site usage. You can manage your cookie preferences via your browser settings or our cookie banner on first visit. Disabling cookies may affect parts of the site.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted payment processing through Stripe and secure hosting through Squarespace. No method of transmission is entirely secure, however, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with a revised "Last updated" date.

11. Contact

If you have any questions about this policy or how we handle your data, please reach out: