Privacy Policy — Aurum Pilates

Effective Date: Aug 1, 2026

1. Introduction

Welcome to Aurum Pilates ("we," "our," or "us"), located in El Paso, Texas. We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes how we collect, use, and safeguard your information when you visit our studio, use our website, book sessions, or communicate with us in any capacity.
Please read this policy carefully. If you have questions or concerns, please contact us using the details provided at the end of this document.

2. Information We Collect

We collect personal information that you voluntarily provide when you:

Register for classes, private sessions, workshops, or a membership
Purchase products or services from our studio
Complete a health intake or wellness questionnaire
Subscribe to our newsletter or text message communications
Contact us with questions, requests, or feedback
Participate in studio promotions, challenges, or events

The types of information we may collect include:

Name, email address, phone number, and mailing address
Billing and payment information
Health and wellness information relevant to safe Pilates instruction (e.g., injuries, physical limitations, or medical conditions)
Text message opt-in consent and communication preferences
Website usage data (e.g., IP address, browser type, pages visited, and referring URLs)

Under the Texas Data Privacy and Security Act (TDPSA), health and physical condition information is classified as sensitive personal data. We handle all such information with the highest level of care and will not process it for any purpose beyond what is necessary for your safe participation in our programs.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and continuously improve our studio services and class offerings
Schedule sessions and process bookings and registrations
Process payments and issue receipts
Send appointment reminders and important studio communications
Deliver promotional content and updates you have specifically opted in to receive
Send text messages where you have provided express written consent
Respond to customer service and support inquiries
Ensure the safety and wellbeing of our clients and instructors
Fulfill our legal obligations under Texas and applicable federal law

We do not process your personal data for purposes beyond those described in this policy, consistent with the TDPSA's data minimization and purpose limitation requirements.

4. How We Handle Your Information

We do not sell your personal information. We work with trusted service providers who carry out specific functions on our behalf — such as payment processing, class scheduling software, and email delivery platforms. These providers are authorized to use your information only to perform services for us and are required to maintain appropriate data security standards. We enter into written contracts with these providers that specify how your data may be processed, in compliance with the TDPSA.
We may disclose your information when required by Texas law, court order, or governmental authority, or when necessary to protect the rights, property, or safety of our business, clients, or others.

No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

5. Text Messaging and Mobile Communications

If you opt in to receive text messages from Aurum Pilates, the following terms apply:

You are providing express written consent to receive text messages from us at the phone number you provide
Messages may include appointment reminders, session updates, wellness content, and promotional material you have elected to receive
You may opt out at any time by replying STOP to any text message
For assistance, reply HELP
Message and data rates may apply
Message frequency will vary based on your communication preferences

Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services required to deliver those communications to you.
We do not use your mobile opt-in data or consent for any purpose other than delivering the communications you have consented to receive. In compliance with Texas House Bill 2498, we do not send unsolicited text messages to numbers on the federal Do Not Call registry.

6. Health and Wellness Information

As a Pilates studio, we may collect basic health information — such as prior injuries, physical limitations, or relevant medical history — solely to ensure your safety and to provide instruction appropriate for your individual needs. This information is used exclusively by our instructors and staff for instructional and safety purposes.
Under the TDPSA, health data constitutes sensitive personal data. We will not process your sensitive personal data for any purpose not described in this policy, and we will not sell it under any circumstances, consistent with our obligations under Texas law regardless of our business size classification.

7. Your Texas Privacy Rights (TDPSA)

As a Texas resident, you have the following rights under the Texas Data Privacy and Security Act (Texas Business and Commerce Code, Chapter 541):

Right to Access: Confirm whether we are processing your personal data and obtain a copy of it in a portable, readily usable format
Right to Correction: Request that we correct inaccuracies in the personal data we hold about you
Right to Deletion: Request that we delete personal data we have collected from or about you, subject to applicable legal requirements
Right to Data Portability: Receive your personal data in a format that allows you to transmit it to another service without hindrance
Right to Opt Out: Opt out of any processing of your personal data for targeted advertising purposes
Right to Non-Discrimination: We will not discriminate against you in any way for exercising your rights under the TDPSA
Right to Appeal: If we decline to act on your request, you have the right to appeal that decision

To submit a request to exercise any of these rights, please contact us using the information at the end of this policy. You may also designate an authorized agent to submit requests on your behalf, consistent with the TDPSA provisions in effect since January 1, 2025. We will respond to all verifiable requests within the timeframes required under Texas law.

8. Universal Opt-Out Mechanisms (GPC)

In accordance with the TDPSA, which has required businesses to honor universal opt-out signals since January 1, 2025, we recognize Global Privacy Control (GPC) browser signals as valid opt-out requests. If your browser or device sends a GPC signal when visiting our website, we will process it as an opt-out of any applicable data processing for targeted advertising — automatically and without additional steps or friction, consistent with the Texas Attorney General's enforcement priorities.

9. No Dark Patterns

We do not use interface designs, default settings, or consent flows intended to mislead, coerce, or manipulate you into providing personal data or consenting to processing you would not otherwise agree to. This is consistent with the TDPSA's explicit prohibition on "dark patterns" that subvert consumer privacy choices.

10. Email Communications

Any commercial emails we send will clearly identify themselves as such and will include a simple, clear option to unsubscribe from future communications. All opt-out requests are honored promptly and in full compliance with the federal CAN-SPAM Act.

11. Data Security

We implement appropriate technical, administrative, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure payment processing, and access controls limited to authorized personnel only.
We also require all service providers handling your personal information on our behalf to maintain equivalent security standards. In the event of a data breach affecting your personal information, we will notify affected individuals and take all required steps in compliance with applicable Texas and federal law.

12. Data Retention and Disposal

We retain your personal information only for as long as is necessary to provide our services, fulfill the purposes described in this policy, and comply with our legal obligations under Texas and federal law. When your information is no longer needed, we securely delete or anonymize it consistent with applicable data disposal requirements.

13. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. Clients between the ages of 13 and 17 must have express parental or guardian consent to participate in our programs. A parent or guardian may also exercise TDPSA privacy rights on behalf of a child. If you believe we have inadvertently collected information from a minor, please contact us immediately.

14. Cookies and Website Tracking

Our website may use cookies and similar tracking technologies to understand how visitors interact with our site and to improve your browsing experience. You may disable cookies through your browser settings, or use a universal opt-out signal such as GPC, which we are required to honor under Texas law. Some features of our website may be affected if cookies are disabled.
We do not use tracking technologies to build advertising profiles or engage in behavioral advertising without your consent.

15. Links to Other Websites

Our website may contain links to external websites for your convenience. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policy of any external website you visit.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make updates, we will revise the "Last Updated" date at the top of this page. Your continued use of our services following any update constitutes your acceptance of the revised policy. We recommend reviewing this policy at least once a year.

17. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us:
Aurum Pilates Email: aurum.pilatesep@gmail.com
Address: 3500 N Mesa St C, El Paso, TX 79902, United States