Privacy Policy
Bodytree Studio Sole Proprietorship L.L.C. (a mainland Abu Dhabi limited liability company, trade licence No. CN-1143608, registered address: Al Karama – West 1-14, Villa No. A420, Khaldoun Khalifa Al Sheikh Ahmed Abdul Aziz Al Mubarak Building, Abu Dhabi, United Arab Emirates) (“Bodytree Mainland”) and BT Pilates Studio GM Ltd (a company registered in the Abu Dhabi Global Market, registration No. 28139, registered address: SU203C & SU208A, Level 01, The Galleria, Al Maryah Island, Abu Dhabi Global Market Square, Abu Dhabi, United Arab Emirates) (“Bodytree ADGM”) are separate legal entities and separate data controllers. Each is responsible for the personal data it collects in connection with the studio, service or channel it operates: Bodytree Mainland in respect of the studio at Al Manhal, and Bodytree ADGM in respect of the studio at The Galleria, Al Maryah Island — and both, jointly, in respect of bodytree.com and shared digital channels (such as the mobile app and WhatsApp), unless stated otherwise. References to “Bodytree,” “we,” “us” or “our” mean the relevant controller responsible for the data in question, as described above.
Bodytree Mainland processes personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “UAE PDPL”). Bodytree ADGM processes personal data in accordance with the ADGM Data Protection Regulations 2021 (the “ADGM DPR”), a separate regime administered by the ADGM Office of Data Protection. This Policy explains what personal data we collect, why, who we share it with, and your rights, and indicates where the position differs between the two regimes.
If you have questions, contact us at hello@bodytree.com, or the relevant entity using the details in Section 12 (Contact Us).
1. When We Collect Your Data
We collect personal data when you: create an account or book a class, package, workshop, retreat or wellness therapy; make a purchase or redeem a gift voucher; visit a studio (including via CCTV); use our mobile app or contact us via WhatsApp; contact us with a query, complaint, job application or item of feedback; enter a competition; or interact with us on social media.
2. What We Collect and Why
Identity & contact
Name, date of birth, email, phone, encrypted login password
Fulfil booking/purchase contract
Account & booking activity
Services booked, packages, check-in times, receipts
Fulfil contract; planning & forecasting (legitimate interest)
Payment
Card details and billing address processed by Stripe on our behalf. For memberships, your card is stored on file with Stripe (tokenised) for automatic renewal billing; Bodytree does not store or have access to your full card number.
Health & emergency contact
Health conditions, injuries, emergency contact
Explicit consent (special category / sensitive personal data under the UAE PDPL and ADGM DPR, as applicable) — used to assess class suitability and safeguard your health and safety
Photos & video
Images/footage from classes, events or marketing shoots
Consent — we'll ask before publicly using a recognisable image of you
Preferences
Gender, how you heard about us, preferred location
Personalise your experience (legitimate interest)
Communications
Notes from conversations, complaints, class feedback
Customer service records (legitimate interest)
Marketing
Email address
Consent — marketing email is on by default when you create an account; turn it off anytime in account settings or via the unsubscribe link in any email
Site & app usage
IP address, browser/device type, pages visited
Improve the website and app (legitimate interest)
CCTV
Video footage in studio spaces
Safety and security of clients and staff (legitimate interest)
We collect health information only where you provide it at the time of booking, and only to the extent necessary to assess class suitability and run classes safely. We will always seek your consent before publishing any photo or video in which you are recognisable.
3. Who We Share It With
We share your personal data with the following third-party processors, each of which receives only the data necessary to perform its function and is subject to contractual confidentiality and data-protection obligations:
- MarianaTek (operated by Xplor Technologies, USA) — class scheduling, booking, membership and account management. Xplor's data centres are located in the EU, UK, US, Canada, Australia and New Zealand.
- Stripe — payment processing for studio bookings and packages (via MarianaTek) and for events (via Luma). For memberships, Stripe securely stores your card on file (tokenised) to process automatic renewal payments. Bodytree never receives or stores your full card number.
- Luma (luma.com) — ticketing for workshops, pop-ups and events booked through that platform.
- Google Analytics — anonymised website traffic and usage statistics.
- Brandbot (Xplor Growth) — our CRM and marketing automation platform, used to send marketing emails/SMS and feedback requests.
- Wati (WhatsApp Business API platform) — powers our WhatsApp chat/support. Wati processes your WhatsApp number and message content on our behalf; messages are automatically deleted from Wati's systems after a limited retention period (30 days, per Wati's public documentation at the time of writing).
We may also disclose personal data where required by law (for example, in response to a court order, a request from law enforcement, or a regulator) or in connection with the sale, merger or restructuring of our business.
We do not sell your personal data, and we do not share it with third parties for their own independent marketing purposes without your consent. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
4. International Transfers
Because MarianaTek, Stripe and Luma are international providers, some personal data is processed outside the UAE, including in the United States, United Kingdom and European Union. Bodytree Mainland only transfers personal data outside the UAE where the recipient maintains an adequate level of protection or appropriate safeguards are in place, consistent with the cross-border transfer requirements of the UAE PDPL. Bodytree ADGM only transfers personal data outside the ADGM where the transfer satisfies the cross-border transfer conditions under the ADGM DPR, which may include an adequacy finding by the ADGM Office of Data Protection, appropriate standard contractual clauses, or another permitted transfer mechanism.
5. Security
We maintain appropriate administrative, technical and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration or loss, and we require our third-party processors to maintain comparable safeguards under contract. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. How Long We Keep it
We retain personal data only for as long as necessary for the purpose for which it was collected, and in any event no longer than seven (7) years after our relationship with you ends, in order to meet bookkeeping and legal-claim retention obligations, unless a longer or shorter period is required by law, or you have an open dispute, unresolved debt or ongoing legal matter with us.
7. Your Rights
Depending on which Bodytree entity holds your data, you may exercise the following rights under the UAE PDPL and/or the ADGM DPR. You may ask us to:
- give you access to the personal data we hold about you;
- correct inaccurate data (or edit it yourself via your account);
- delete your data (subject to the retention exceptions in Section 6);
- restrict or object to processing carried out on the basis of legitimate interest;
- provide your data to you in a portable format; and
- withdraw your consent at any time, where processing relies on consent.
To exercise these rights, email hello@bodytree.com, specifying which studio or service your request relates to. If you are not satisfied with our response: in respect of Bodytree Mainland, you may complain to the UAE Data Office or, for consumer matters, the Ministry of Economy’s Consumer Protection Department (600-522-225); in respect of Bodytree ADGM, you may complain to the ADGM Office of Data Protection.
8. If Something Goes Wrong
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, the relevant Bodytree entity will notify the applicable regulator, the UAE Data Office, in the case of Bodytree Mainland, or the ADGM Office of Data Protection, in the case of Bodytree ADGM ,as required by the applicable law, and will notify you directly where the law requires it or where we consider you should be informed so that you can take appropriate protective measures.
9. Cookies
We use essential cookies (necessary for the Site to function), analytics cookies (Google Analytics, to understand traffic patterns) and, where applicable, advertising cookies. Where required by law, we will request your consent to non-essential cookies via a cookie banner on the Site. You may also block cookies through your browser settings, though parts of the Site may not function properly as a result. For general guidance on cookies, see aboutcookies.org.
10. Who This Policy Is For
Our Services and website accounts are intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take steps to delete it.
11. Changes to this policy
We may update this Policy from time to time to reflect changes in our practices or legal requirements. The “last updated” date above will change accordingly and, where changes are material, we will take reasonable steps to notify you. Your continued use of our Services after an update takes effect constitutes your acceptance of the revised Policy.
12. Contact us
Bodytree Studio Sole Proprietorship L.L.C. — Al Karama – West 1-14, Villa No. A420, Khaldoun Khalifa Al Sheikh Ahmed Abdul Aziz Al Mubarak Building, Abu Dhabi, UAE (trade license CN-1143608)
BT Pilates Studio GM Ltd — SU203C & SU208A, Level 01, The Galleria, Al Maryah Island, Abu Dhabi Global Market Square, Abu Dhabi, UAE (ADGM registration No. 28139)
Email: hello@bodytree.com
