1. Data Controller (Who We Are)

The entity responsible for processing your personal data under this policy is:

BPM House
Feldhofweg 11, 6038 Gisikon
Switzerland
Contact Email: BPMHouse.ch@gmail.com

2. What Personal Data We Collect and Why

We only process data that is technically necessary to operate our boutique fitness services, manage your account, and handle booking logistics:

• Contact Information: Name, email address, phone number. We use this to manage your class registrations, send automated booking confirmations, and issue vital schedule changes or cancellations.

• Account & Membership Data: Class history, active memberships, and remaining tokens on 10/20 class packages. This allows us to track your active account balance.

• Payment Information: Credit card data, billing addresses, and transaction histories.

3. Service Providers & International Data Transfers

To deliver a high-quality online booking experience, we securely partner with trusted third-party cloud infrastructure tools. Because your data is processed through these global platforms, it is transferred and stored on servers located in the United States:

• Squarespace, Inc.: Hosts our website, photo/video content, and provides our layout infrastructure.

• Acuity Scheduling (Squarespace): Powers our class calendars, intake forms, and membership management databases.

• Stripe / Squarespace Payments: Securely processes all financial transactions. BPM House never stores your full credit card details on our local machines.

Note on Swiss Data Transfers: All chosen providers are bound by strict Standard Contractual Clauses (SCCs) and comply with international data security frame agreements to guarantee a level of data protection equivalent to Swiss legal standards.

4. Cookies and Media

Our website is hosted on Squarespace, which utilizes functional and analytical cookies to ensure our site loads quickly, operates safely, and displays video/photo content correctly. You can restrict or block cookies through your individual web browser settings at any time.

5. Data Retention

We store your personal data only as long as your customer profile remains active, or for as long as legal Swiss commercial retention regulations require us to preserve financial transaction histories (typically 10 years for accounting records under Swiss law).

6. Your Rights

Under the Swiss FADP, you possess the following rights regarding your stored data:

• The right to request access to a copy of your personal data.

• The right to request the correction of inaccurate personal information.

• The right to request the deletion of your data (provided it does not conflict with statutory tax or accounting preservation laws).

To exercise any of these rights, please contact us directly at BPM House.