Privacy Policy

Strong OS (“we”, “us”) provides software for fitness and pilates studios: online booking, memberships, payments and studio administration, at strong-os.com. This policy explains what personal data we collect, why, and the choices you have. It covers our website and the Strong OS platform.

Who we are

Strong OS is the data controller for data collected through this website (such as demo enquiries). For data inside a studio’s account — its members, bookings and payments — the studio is the controller and we process that data on the studio’s behalf. You can reach us at hello@strong-os.com.

What we collect

• Demo enquiries: your name, email address and anything you include in your message, used to respond and arrange a demo.
• Account data: when a studio signs up — names, email addresses, studio details, and login credentials (passwords are stored hashed, never in plain text).
• Member & booking data: class schedules, bookings, memberships and attendance, processed so the studio can run its business.
• Payments: card payments are processed by Stripe. Card numbers never touch our servers; we hold payment records (amounts, dates, status), not card details.
• Technical basics: logs necessary to run and secure the service. If we use analytics on the marketing site, it is privacy-friendly and cookie-free.

Why we process it (legal bases)

• Contract — providing the platform to studios and their members.
• Legitimate interests — responding to enquiries, keeping the service secure, improving the product.
• Consent — marketing emails, which you can withdraw at any time via the unsubscribe link.
• Legal obligation — records we must keep, such as for tax.

Sharing

We don’t sell personal data, and there is no consumer marketplace — a studio’s member list is never marketed to anyone. We share data only with the service providers that run the platform (hosting, database, email delivery and payment processing), each bound by their own data-protection obligations, and where the law requires it.

Retention

We keep personal data while an account is active or an enquiry is open, then delete or anonymise it within a reasonable period unless the law requires longer. Studios can export their data at any time.

Your rights

Under UK GDPR you can request access to, correction or deletion of your personal data, object to or restrict processing, and request portability. If you’re a member of a studio, the quickest route is usually your studio; either way, you can contact us and we’ll help. You can also complain to the ICO (ico.org.uk).

Cookies

The platform uses essential cookies only — to keep you signed in. The marketing site sets no advertising or cross-site tracking cookies.

Changes

If we make material changes to this policy we’ll update this page and the date above, and for significant changes we’ll tell account holders directly.