Privacy Policy
As of October 1, 2026
Coastal Core Pilates ("Coastal Core," "we," "us," or "our") operates the website www.coastalcore-pilates.com (the "Site"), the Coastal Core Pilates mobile application for Android and iOS (the "App"), and our studio at 1931 S Coast Hwy C101, Oceanside, CA 92054. The Site, App, and studio services are together called the "Services."
This Privacy Policy explains what personal information we collect (including health information), how we use it, who we share it with, how long we keep it, how you can delete it, and the rights you have. By using the Services, you acknowledge this Privacy Policy.
Contact: info@coastalcore-pilates.com. Coastal Core Pilates, 1931 S Coast Hwy C101, Oceanside, CA 92054
1. Who Provides Our App and Booking System
Our App, online booking, client accounts, and payments are powered by Mariana Tek, a fitness studio software platform owned by Xplor Technologies. Mariana Tek acts as our service provider (data processor): it stores and processes your information on our behalf and only to provide the Services to you. Mariana Tek does not own your information and may not sell it or use it for its own advertising. You can read Xplor's privacy notice at https://www.xplortechnologies.com/privacy-notice.
2. Information We Collect
a. Information you give us
Account information: first and last name, email address, phone number, date of birth, home address, emergency contact name and phone number, and password.
Payment information: billing name, billing address, and payment card details. Card numbers are handled by Mariana Tek's PCI-compliant payment processor. We do not store full card numbers.
Booking and membership information: classes and private sessions you book, attend, cancel, or are waitlisted for; spot/reformer selections; memberships, class packs, credits, gift cards, and purchase history.
Waivers and agreements: your electronic signature and the date you accepted our liability waiver and studio policies.
Health information: described in Section 3.
Communications: emails, texts, in-app messages, and feedback you send us.
b. Information collected automatically
Device and usage information: device type, operating system, App version, browser type, IP address, time zone, language, crash and performance logs, pages and screens viewed, referring websites or search terms, and how you interact with the Services.
Push notification tokens: if you allow notifications in the App.
Cookies and similar technologies: our Site uses cookies, log files, web beacons, and pixels. See Section 6.
3. Health Information
This section explains exactly how we access, collect, use, store, share, retain, and delete health information ("Health Data").
a. What Health Data we collect
Pilates is physical exercise. To teach you safely, our new-client intake form, waiver, client profile, and instructor notes may collect:
Current or past injuries, pain, or physical limitations (for example, back, neck, knee, shoulder, or hip issues)
Medical conditions relevant to exercise (for example, high blood pressure, osteoporosis, heart conditions, recent surgery)
Pregnancy or postpartum status
Whether a physician has cleared you for exercise
Fitness level and goals you choose to share
Notes our instructors make about modifications recommended for you.
b. Data from Health Connect or Apple Health
If the App offers a feature to connect to Android Health Connect or Apple Health, it is off by default and only works after you turn it on and approve permissions on your device. When enabled, the App only writes your completed Coastal Core class to your device's health app (activity type, start and end time, and duration) so you can track your workouts. The App does not read other health data from Health Connect or Apple Health, such as heart rate, sleep, weight, medical records, or data from other apps. You can revoke this permission at any time in your device settings (Android: Settings → Health Connect → App permissions; iOS: Settings → Health → Data Access & Devices).
c. How we use Health Data
We use Health Data only to:
1. Let instructors provide safe exercise modifications and choose suitable classes or equipment for you;
2. Respond to an injury or emergency at the studio; and
3. Record your completed classes in Health Connect or Apple Health, if you turn on that feature.
d. What we never do with Health Data
We never sell Health Data.
We never use Health Data for advertising, marketing, ad targeting, or profiling.
We never share Health Data with advertisers, analytics companies, data brokers, or social media platforms.
We never use Health Data to determine credit, insurance, employment, or housing eligibility.
We never transfer data received from Health Connect or Apple Health to any third party. That data stays on your device.
e. Who can see Health Data
Health Data is stored in your client profile in Mariana Tek and is visible only to Coastal Core owners, managers, and instructors who need it to teach you. Mariana Tek processes it only as our service provider. We disclose Health Data to anyone else only (i) with your explicit consent, (ii) to emergency medical personnel in an emergency, or (iii) when required by law.
f. Health Connect Limited Use
Our use of information received from Health Connect complies with the Health Connect Permissions policy, including the Limited Use requirements. Our use and transfer of information received from Apple HealthKit complies with Apple's HealthKit guidelines.
To delete your Health Data without deleting your account, email info@coastalcore-pilates.com with the subject "Delete My Health Information." Coastal Core Pilates is a fitness studio, not a healthcare provider. We are not a "covered entity" under HIPAA, but we protect Health Data as sensitive personal information under this policy and applicable state law, including California law.
4. How We Use Your Information
Create and manage your account and memberships
Process bookings, waitlists, check-ins, purchases, and payments, and send confirmations and receipts
Teach safely and respond to emergencies (see Section 3)
Send service messages such as class reminders, schedule changes, and cancellations
Send marketing emails, texts, or push notifications, only if you opt in; you can unsubscribe at any time
Prevent fraud, secure the Services, and enforce our terms and studio policies
Understand how the Site and App are used and improve them
Comply with legal, tax, accounting, and insurance obligations
5. How We Share Your Information
We do not sell your personal information. We share it only with:
Mariana Tek / Xplor Technologies: App, booking, client account management, and payment processing
Payment processors: to complete transactions
Email and SMS providers: to send messages you've requested or opted into
Google Analytics: Site usage analytics (no Health Data)
Advertising platforms (Meta/Facebook, Instagram, Google): to measure and show ads based on Site visits (no Health Data); see Section 6 to opt out
Professional advisors and insurers: such as accountants, lawyers, and our insurance carrier, when necessary
Legal and safety: when required by law or subpoena, or to protect the rights and safety of our clients, staff, or others
Business transfers: if our studio is sold or merged, information may transfer to the new owner under this policy
6. Cookies, Analytics, and Advertising
Our Site uses cookies and pixels from Google Analytics and advertising partners. You can:
Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout
Manage Google ad settings: https://adssettings.google.com
Manage Facebook/Instagram ad settings: https://www.facebook.com/adpreferences
Use the Digital Advertising Alliance opt-out portal: https://optout.aboutads.info
Block or delete cookies in your browser settings
We honor the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information. We do not otherwise respond to browser "Do Not Track” signals.
7. Retention of Personal Information
We retain personal information only for as long as reasonably necessary for the disclosed purposes, including active memberships and client accounts, legal and tax recordkeeping, transaction and billing history, fraud prevention, dispute resolution, and operational analytics.
8. How to Delete Your Account and Data
You can request deletion of your account and all associated data, including Health Data, at any time:
1. In the App: Profile → Account Settings → Delete Account, or
2. By email: send a request to info@coastalcore-pilates.com with the subject "Delete My Account" from the email address on your account.
10. Your Privacy Rights
Everyone: You may request access to, correction of, or deletion of your personal information, and you may unsubscribe from marketing at any time. California residents (CCPA/CPRA): You have the right to:
Know what personal information we collect, use, and disclose, and to receive a copy
Delete your personal information
Correct inaccurate personal information
Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information. Site cookies used for advertising may be considered "sharing," and you can opt out by emailing us or using GPC.
Limit the use of sensitive personal information. We use Health Data only for the purposes in Section 3, which are permitted without a separate limit request.
Non-discrimination for exercising these rights
California residents may request to know, access, delete, correct, or opt out of sharing personal information, and will not be discriminated against for exercising these rights. To exercise your rights, contact: info@coastalcore-pilates.com
11. Children's Privacy
Our website and services are not intended for children under 13 without parental involvement. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy. We will post the new version here with a new "Last Updated" date. For material changes, especially changes to how we use Health Data, we will notify you by email or in the App before the change takes effect.
13. Contact Us
Coastal Core Pilates
1931 S Coast Hwy C101 Oceanside, CA 92054
