Privacy Policy

1. Data Controller

The controller of your personal data is:

ACE Studio sp. z o.o.
Address: sw Barbary 1, 00-686, Warsaw, Poland
NIP: 5273187069
Email: contact@ace-strength.com

2. What Data We Collect

We may collect and process the following personal data:

  • Full name

  • Email address

  • Phone number

  • Instagram handle

  • Booking and attendance data

  • Payment-related information (processed via third parties)

  • Technical data (IP address, browser type, cookies)

3. How We Collect Data

Your data is collected when you:

  • Fill out forms on our website

  • Join our waitlist or newsletter

  • Make a booking

  • Contact us directly

  • Interact with our ads or social media

4. Purpose and Legal Basis

We process your personal data for the following purposes and on the following legal bases:

  • To manage bookings and provide our services
    We process your data to allow you to book and attend classes, manage your account, and deliver our services.
    Legal basis: performance of a contract.

  • To communicate with you
    We may use your contact details to send confirmations, updates, reminders, and respond to your inquiries.
    Legal basis: legitimate interest.

  • For marketing and promotional purposes
    We may send you information about our offers, updates, and events, including via email or social media, where you have given your consent.
    Legal basis: consent.

  • To process payments and comply with legal obligations
    We process payment-related data and maintain records required for accounting and tax purposes.
    Legal basis: legal obligation and performance of a contract.

  • To improve our services and analyze usage
    We may use data (including technical data and usage patterns) to improve our website, services, and customer experience.
    Legal basis: legitimate interest.

5. Data Storage and Processors

Your data may be stored and processed using:

  • Squarespace (website & forms)

  • Google (Sheets, Gmail)

  • Momence (booking system)

  • Stripe (payments)

  • Meta (Facebook/Instagram Ads)

Some of these providers may process data outside the EU.

We ensure that appropriate safeguards are in place (e.g. Standard Contractual Clauses).

6. Data Retention

We retain data for:

  • Waitlist / marketing: up to 24 months

  • Customer accounts: up to 5 years after last activity

• • Financial records: as required by law (typically 5–10 years)

7. Your Rights

Under GDPR, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Data portability

To exercise your rights, contact: contact@ace-strength.com

8. Cookies and Tracking

We use cookies and tracking technologies for:

  • Website functionality

  • Analytics

  • Marketing (including Meta Ads)

You can manage cookies via your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your data. However, no system is fully secure.

10. Changes

We may update this policy from time to time. The latest version will always be available on our website.