Privacy Policy

This Privacy Policy explains what information Charlton Core LLC, doing business as Studio 26 (“Studio 26,” “we,” “us”), collects when you create an account, book a class, or otherwise use our website and services, how we use it, and the choices you have.

1. Information We Collect

When you create an account or use our Services, we collect:

• Account information: name, email address, phone number, date of birth, mailing address.
• Health information you choose to share: emergency contact, medical conditions or injuries, and other information relevant to your safe participation in class. You control what you share here.
• Payment information: handled directly by our payment processor, Stripe. We receive limited data back from Stripe (such as card brand and last 4 digits) but never your full card number.
• Booking & usage information: classes booked, attendance, membership and pack status, purchase history.
• Communications: emails and text messages we send you, and any replies or support requests you send us.
• Photos & video: only if you separately opt in to our photo/video release, in which case we may capture photos or video of you during class or events. See our Liability Waiver for details.

2. How We Use Information

We use the information above to:

• Create and manage your account, bookings, and payments
• Send transactional communications (booking confirmations, receipts, password resets, billing issues)
• Send you the text messages and emails you’ve opted in to receive (see below)
• Keep our studios and classes safe, including using health information you provide during class
• Improve our Services and comply with legal obligations

3. SMS / Text Messaging Data

Message frequency varies depending on your bookings and account activity. Message and data rates may apply.

You can opt out of text messages at any time by replying STOP to any message, or by updating your preferences in your account. Opting in to SMS is optional and is never a condition of booking a class or purchasing a membership.

4. Third-Party Services We Use

We rely on trusted third-party services to run Studio 26, each of which processes a limited slice of your information solely to provide their service to us:

• Stripe: payment processing and billing
• Supabase: account authentication and database hosting
• Resend: transactional email delivery
• Twilio: SMS text message delivery, for clients who opt in
• Zoom: virtual class hosting, for classes offered online
• Cloudflare Turnstile: invisible bot protection on public forms (contact, sign-in, signup, password reset, gift card checkout). Turnstile may process limited technical data (such as browser characteristics) to distinguish real visitors from bots. No personal data is collected for advertising. See Cloudflare's Turnstile Privacy Policy.
• Sentry: error monitoring and application reliability (see Section 5 below for details)

These providers are contractually restricted from using your information for their own purposes beyond providing their service to us.

5. Error Monitoring and Application Reliability

To keep our website and booking system running reliably, we use a third-party error-monitoring service (Sentry) that automatically alerts us when something goes wrong in the application, such as a page failing to load or a booking not completing. This helps us find and fix problems quickly.

We have configured this service to exclude personal information. Specifically, we do not transmit the contents of your requests (such as form submissions), your account details, your contact information, or any health information you provide to us. Error reports are limited to technical information needed for debugging, such as the type of error, the page or feature involved, general device and browser information, and an anonymous internal identifier that is not your name, email, or any other directly identifying detail.

This service acts as a data processor on our behalf and only receives the limited technical information described above. We do not use it for advertising, tracking, or profiling.

6. Cookies & Site Data

Our website uses essential cookies to keep you signed in and remember basic preferences. We don’t use third-party advertising trackers.

7. Data Security

We use industry-standard safeguards, including encrypted connections and access controls, to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data appropriately for its sensitivity.

8. Your Choices & Rights

• Update or correct your account information at any time from your Profile page.
• Unsubscribe from marketing emails using the link in any email, or from your account settings.
• Opt out of text messages by replying STOP, or from your account settings.
• Request a copy of, or deletion of, your personal information by emailing us (see below). We’ll respond within a reasonable time, subject to records we’re required to keep (e.g., payment history).

9. Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect information from children under 13. Clients between 13 and 17 may only use the Services with a parent or guardian’s account and consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the “Last updated” date above and, where required, notify you.

11. Contact Us

Questions about this policy, or want to exercise one of the rights above? Email us at staff@studio26.studio.