Privacy policy

1. Who is responsible for your data

Data controller: Align Studio, Uus Veereni, Tallinn, Estonia. The studio's contact details are on the Contact page. For any question about personal data, write to us through the form on that page.

2. What data we receive and why

• Booking form (home page, schedule, contact): name, email, phone (if you provide it), the class or interest you picked, a comment. We use it to reply to your request, book you into a class and get in touch with you. Legal basis: steps taken at your request before booking a class (GDPR Art. 6(1)(b)) and our legitimate interest in answering enquiries (Art. 6(1)(f)).
• Confirmation email. Right after you submit a request, an automatic email confirming that we received it is sent to the address you gave. At the same time the studio administrator is notified about the request.
• Visit statistics (Google Analytics): only if you click “Accept” in the cookie banner. This is data about pages viewed, device type and approximate region, without names or contact details.

We do not sell data, do not use it for advertising and do not make automated decisions.

3. Cookies and local storage

• align-consent (browser local storage): remembers your choice in the cookie banner. It is needed for the banner to work and stays until you clear the site's data.
• _ga, _ga_* (Google Analytics): tell visitors and visits apart, up to 2 years. Loaded only after you consent.

The site has no advertising cookies. You can change your choice at any time with the “Cookie settings” link at the bottom of the site.

4. External services

• Vercel: website hosting (technical request logs).
• Resend: sending emails related to requests.
• Google Fonts: the site's fonts; when a page loads, your IP address is passed to Google.
• Google Maps: the map on the page; loaded from Google's servers.
• Google Analytics: statistics, only with consent.

Some of these services may process data outside the EU and EEA on the basis of mechanisms provided for by the GDPR (for example the EU standard contractual clauses).

5. How long we keep data

We keep request data while we are in contact with you and for up to 12 months after the last contact, unless the law requires otherwise. Google Analytics statistics are kept according to the service's settings.

6. Your rights

You can ask for access to your data, correction, deletion, restriction of processing or portability, object to processing and withdraw your consent at any time. To do so, write to us. If you believe your rights have been violated, you can file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

7. Changes

We may update this policy. The current version is always on this page, and the update date is shown at the top.