Privacy policy

1. Data controller

WheelyLove ("we", "us") is the controller of the personal data we process through this website. For questions about the processing of personal data you can reach us at [email protected] or by phone at +359 886 573 880.

[The exact legal name, EIK and registered address of the trader will be added here once provided.]

2. What data we collect

• Name, email address and password (on sign-up/sign-in; the password is stored only hashed)
• Phone number (at the first booking, so the studio can reach you; it is saved in your profile so you don't type it every time, and you can change it from “My bookings”)
• Booking history — the chosen class, time and status
• Photos and videos in the gallery — uploaded by the studio and stored on our server

3. What we use the data for

• Creating and managing class bookings
• Sending confirmations and reminders by email
• Communication on cancellation or change of a booking
• Meeting accounting and tax obligations

The legal basis for the processing is the performance of a contract (the booking you make) and our legitimate interest in running the studio.

4. Who we share data with

We use the following service providers (processors of personal data):

• Resend — Resend — sending confirmation and reminder emails
• Cloudflare — Cloudflare — protection and delivery of the website (CDN)

Resend may process data on servers outside the European Union (USA). In those cases we rely on the standard contractual clauses and the guarantees provided by the respective provider to ensure an adequate level of protection. Profiles and bookings are stored on our own server.

5. Retention period

We keep booking data for as long as necessary to perform the contract and to meet legal obligations (e.g. accounting requirements), but no longer than 5 years from the account's last activity, unless the law requires otherwise.

6. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• access your personal data;
• have inaccurate data corrected;
• have the data erased (the “right to be forgotten”);
• restrict the processing;
• data portability;
• object to the processing;
• lodge a complaint with the Commission for Personal Data Protection (CPDP) if you believe your rights have been violated.

To exercise these rights, write to us at [email protected].

7. Cookies

The website uses only technically necessary cookies — to keep you signed in and for the security of the site. We do not use cookies for advertising or third-party analytics.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including an encrypted connection (HTTPS) and access to the admin panel only for authorised people.