Privacy Policy

1. Data Controller

Ocre Flow, represented by Sarah Mugglebee ("449 Chemin des Platanes, 13100 Aix-en-Provence"), is responsible for the processing of your personal data.

2. Data Collected

We collect only the information necessary to provide our bespoke services:

• Identity & Contact: Name, email, phone number (WhatsApp).
• Service Details: Villa address or location for mobile sessions.
• Health & Fitness: Physical limitations, injuries, or pregnancy status (to ensure session safety).
• Payment Data: Processed securely via our third-party provider (Stripe); we do not store full credit card details.

3. Purpose of Processing

Your data is used to:

• Manage bookings and schedule sessions.
• Customise Pilates programmes to your physical needs.
• Communicate operational updates regarding your appointments.

4. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or to comply with legal obligations (typically 3 years after the last contact).

5. Third-Party Sharing

Data is never sold. It is shared only with essential service providers (Hosting: Lovable; Payments: Stripe; Communication: Gandi) for the sole purpose of operating the platform.

6. Your Rights

Under GDPR, you have the right to access, rectify, or delete your data at any time. To exercise these rights, please contact hello@ocreflow.com.