Legal

Privacy Policy

Last updated: 30 May 2026

At KŌR Studio, we are committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and the rights you hold under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).

1. Data controller

The data controller responsible for your personal data is:

KŌR Studio is not required to appoint a Data Protection Officer under GDPR Article 37.

2. What information we collect

We collect personal information that you provide directly when you book a class, purchase a package, contact us, or sign up for updates. This may include:

• Name and contact details (email address, phone number)
• Booking and class attendance history
• Payment information (processed securely by Stripe — we do not store full card details)
• Health information you choose to share (e.g. injuries or conditions relevant to class participation) — see section 3 for details of how we handle this
• Communications you send us via email, WhatsApp, or social media
• Technical data from your visit (IP address, browser type, pages viewed), collected through cookies and analytics

Where we receive your personal data from a third party (for example, if someone books a class on your behalf), we will inform you of this and of the source at the earliest opportunity.

3. How we use your information

We process your personal data for the following purposes:

• To deliver our services: managing bookings, processing payments, communicating about your classes
• To ensure your safety: understanding any health considerations you choose to share before class. Health information is special category data under GDPR Article 9 and is processed only on the basis of your explicit consent (Art. 9(2)(a)), which you may withdraw at any time by contacting us at korstudiomallorca@gmail.com
• To improve the studio experience: analysing site usage and feedback
• To send marketing communications, only where you have given consent (you can withdraw this at any time)
• To comply with legal obligations, such as tax and accounting requirements under Spanish law

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Legal bases for processing

We rely on the following legal bases under GDPR Article 6:

• Contract: to provide services you have booked or purchased
• Consent: for marketing communications and non-essential cookies
• Legitimate interests: for service improvement and security
• Legal obligation: for tax records and regulatory compliance

4a. Resident discount verification

KŌR Lagree Studio offers a 10% discount to residents of Mallorca. To verify eligibility, we may request that you provide your NIE or DNI identification number by email to korstudiomallorca@gmail.com.

This information is collected solely for the purpose of validating residency and issuing a personal discount code. We do not request or store copies of identity documents.

The legal basis for processing this data is our legitimate interest in administering the resident discount programme in a fair and verifiable manner.

Your NIE or DNI number will be stored securely and will not be shared with any third party. This data will be retained for a maximum of 12 months from the date of verification, after which it will be permanently deleted.

You have the right to request access to, correction of, or deletion of your personal data at any time by contacting us at korstudiomallorca@gmail.com.

5. Sharing your information

We do not sell your personal data. We share information only with trusted service providers who help us operate the studio:

• Squarespace — website hosting and content management
• Acuity Scheduling (Squarespace Scheduling) — class bookings and scheduling
• Stripe — secure payment processing (EUR)
• Weglot — website translation
• Meta (WhatsApp) — communications sent via WhatsApp are subject to Meta's own privacy policy and data processing terms

These providers process your data on our behalf under contractual safeguards. Some may transfer data outside the EU/EEA, in which case we ensure appropriate protections are in place (such as Standard Contractual Clauses approved by the European Commission).

6. How long we keep your information

We retain personal data only as long as necessary for the purposes set out above, or as required by Spanish law:

• Booking and financial records are kept for the period required by tax legislation (generally six years)
• Health information shared for class safety purposes is retained for the duration of your membership and deleted promptly upon request or withdrawal of consent
• Marketing data is held until you withdraw consent
• Resident discount verification data (NIE/DNI number) is retained for a maximum of 12 months from the date of verification

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict our processing of your data
• Request a copy of your data in a portable format
• Withdraw consent for marketing or health data processing at any time
• Lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated

To exercise any of these rights, please contact us at korstudiomallorca@gmail.com. We will respond within one month, as required by GDPR.

8. Cookies

Our website uses cookies to ensure essential functionality, remember your preferences, and analyse site usage. You can manage your cookie preferences via your browser settings or our cookie banner on first visit. Disabling cookies may affect parts of the site.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted payment processing through Stripe and secure hosting through Squarespace. No method of transmission is entirely secure, however, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with a revised "Last updated" date.

11. Contact

If you have any questions about this policy or how we handle your data, please reach out: