Privacy Policy

Vitalija Wellness Studio is the data controller for personal data processed via this website and in our studio in Mullingar, Ireland. You can reach us at info@vitalijawellness.com.

We collect the following personal data:

• Identity and contact details: name, email address, phone number.
• Date of birth.
• Emergency contact information.
• Booking history and class attendance.
• Purchase and payment history.
• Package and credit data, including expiry dates.
• Health and safety data: PAR-Q answers, Health Questionnaire answers, injuries, medical conditions, medications, pregnancy or postnatal information, exercise history.
• Health review status and any flags raised from your questionnaire answers.
• Signed waiver / health declaration: your full name, the exact waiver text you agreed to, the waiver version, the date and time of signing, and your device user agent.
• Email logs and transactional email records (e.g. booking confirmations, cancellations, waitlist notifications).
• Basic technical and session data needed to operate the app: device type, browser, IP address.

Payment card details are handled directly by Stripe — we never see or store full card numbers.

We use your personal data to create and manage your account, take bookings and payments, send transactional emails (confirmations, cancellations, billing, waitlist updates), keep our classes safe, comply with our legal obligations, and — only where you have asked us to — share occasional studio updates.

Health and safety data is collected to assess your readiness for physical activity, identify conditions that may require instructor awareness, and fulfil our duty of care. It is only used for safety, class planning and legal compliance.

We process data to perform our contract with you (bookings, packages), to comply with legal obligations (e.g. accounting, health and safety), to pursue our legitimate interests (running a safe and well-organised studio), and with your explicit consent where required (e.g. marketing emails, health data).

Health data (including PAR-Q answers, Health Questionnaire responses, injuries, medical conditions, pregnancy/postnatal information and signed waivers) is special category data under GDPR. We process this only with your explicit consent, collected as part of the onboarding flow.

Carefully selected service providers that help us run the studio:

• Supabase — database, authentication and cloud infrastructure.
• Stripe — secure payment processing.
• Google Workspace / Gmail — client communication and transactional email.
• Hosting and app infrastructure providers.

They process data only under our instructions and appropriate safeguards. We do not sell your data.

Account, booking and purchase records are retained for as long as your account is active and for a reasonable period afterwards to meet legal and accounting requirements. Health and safety records, including PAR-Q answers, Health Questionnaire responses and signed waivers, are retained while your account is active and for a reasonable period afterwards to meet health and safety obligations. You can ask us to delete your account at any time.

You have the right to access, correct, delete or port your data, to restrict or object to processing, and to withdraw consent for marketing emails (one-click unsubscribe in every email). You may also withdraw consent for health data processing, although this may mean you cannot participate in classes. To exercise these rights, contact us at the address above. You may also lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

You can request deletion of your account from your profile page or by emailing info@vitalijawellness.com. Full details of what we remove and what we may retain are on our account deletion page. Certain records may be retained for up to 6 years where required for legal, accounting, insurance, health & safety, dispute or legitimate business purposes.

We use a minimal set of cookies needed to keep you signed in and to remember your preferences. We do not use third-party advertising trackers.