Privacy Policy

Strong OS (“we”, “us”) provides software for fitness and pilates studios: online booking, memberships, payments and studio administration, at strong-os.com. This policy explains what personal data we collect, why, and the choices you have. It covers our website and the Strong OS platform.

Who we are

Strong OS is the data controller for data collected through this website (such as demo enquiries). For data inside a studio’s account — its members, bookings and payments — the studio is the controller and we process that data on the studio’s behalf. You can reach us at hello@strong-os.com.

What we collect

• Demo enquiries: your name, email address and anything you include in your message, used to respond and arrange a demo.
• Account data: when a studio signs up — names, email addresses, studio details, and login credentials (passwords are stored hashed, never in plain text).
• Member & booking data: class schedules, bookings, memberships and attendance, processed so the studio can run its business.
• Payments: card payments are processed by Stripe. Card numbers never touch our servers; we hold payment records (amounts, dates, status), not card details.
• Health questionnaire: where a studio turns it on, your answers to a short pre-exercise health questionnaire, and any health note the studio records on your member record. See Health information below.
• Technical basics: logs necessary to run and secure the service, and analytics on the marketing site. Analytics runs without cookies unless you accept them.

Why we process it (legal bases)

• Contract — providing the platform to studios and their members.
• Legitimate interests — responding to enquiries, keeping the service secure, improving the product.
• Consent — marketing emails, which you can withdraw at any time via the unsubscribe link.
• Legal obligation — records we must keep, such as for tax.
• Explicit consent — health questionnaire answers, which are special category data under Article 9(2)(a).

Health information

Some studios ask members to complete a short pre-exercise health questionnaire (a PAR-Q) before they can book — questions about heart conditions, chest pain, dizziness, and bone or joint problems. A studio may also record a brief health note on your member record, such as an injury to work around.

This is special category data under UK GDPR and we treat it as such. It is collected only where your studio has turned the questionnaire on, and our lawful basis is your explicit consent (Article 9(2)(a)), given when you complete it. You can withdraw that consent at any time — though a studio may then be unable to let you book, since the questionnaire exists so classes can be run safely.

Your answers are visible to your own studio’s owner and staff, so they can adapt a class or advise you to seek medical guidance first. They are never shared with other studios, never used for marketing, and are not accessed by Strong OS staff in the ordinary course of running the platform. They are deleted when your account is deleted — see deleting your account.

Sharing

We don’t sell personal data, and there is no consumer marketplace — a studio’s member list is never marketed to anyone. We share data only with the service providers that run the platform (hosting, database, email delivery and payment processing), each bound by their own data-protection obligations, and where the law requires it.

Retention

We keep personal data while an account is active or an enquiry is open, then delete or anonymise it within a reasonable period unless the law requires longer. Studios can export their data at any time.

Your rights

Under UK GDPR you can request access to, correction or deletion of your personal data, object to or restrict processing, and request portability. If you’re a member of a studio, the quickest route is usually your studio; either way, you can contact us and we’ll help. You can also complain to the ICO (ico.org.uk).

Cookies

The platform uses essential cookies only — to keep you signed in.

On the marketing site we ask before setting any non-essential cookie. We use Google Analytics: decline and it still counts the visit anonymously, with no cookies and nothing that identifies you; accept and it sets its own cookies to recognise returning visitors. You can change your mind by clearing this site’s data in your browser, which makes the choice banner appear again.

Changes

If we make material changes to this policy we’ll update this page and the date above, and for significant changes we’ll tell account holders directly.