Privacy Policy

Last updated: September 20, 2026
This policy applies to twosisterspilates.ca, our booking system, our mobile app, and the emails and text messages we send.

1. Who we are

Two Sisters Pilates Inc. ("Two Sisters Pilates", "we", "us" or "our") operates a Pilates studio in Oakville, Ontario. We are responsible for the personal information we collect about you.

Two Sisters Pilates Inc.
221 Lakeshore Road E, Unit #201
Oakville, Ontario, L6J 1H7
hello@twosisterspilates.ca
289-206-5889

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for our marketing messages, Canada's Anti-Spam Legislation (CASL).

2. What we collect

Information you give us

• Contact details — your name, email address, phone number and, where you provide it, your mailing address and birthday.
• Booking and account information — the classes and appointments you book, your attendance, your membership or class pack, and your account preferences.
• Health and injury information — any injuries, pregnancy, or physical limitations you choose to tell us about, along with your signed liability waiver. See section 4.
• Enquiries — the content of messages you send us through our contact forms, by email, by text or on social media.
• Marketing preferences — whether you have consented to receive marketing emails or text messages from us.

Information collected automatically

• Device and usage data — your IP address, browser and device type, the pages you view, the links you click, and the site that referred you.
• Cookies and similar technologies — described in section 6.

Information from third parties

• Lead forms on Facebook and Instagram — if you submit one of our instant forms, Meta passes us the name, email address and phone number shown on that form. See section 7.
• Our booking platform — account, purchase and attendance records created when you book or buy through Arketa.

3. How we use your information

We use your personal information to:

• take and manage your bookings, memberships and class packs;
• process payments and issue receipts;
• run classes safely, including adapting exercises to any injury or limitation you have told us about;
• contact you about your bookings — confirmations, reminders, schedule changes and cancellations;
• answer your questions and respond to your enquiries;
• send you marketing about classes, events, promotions and news, where you have consented;
• understand how our website is used so we can improve it;
• measure and improve our advertising; and
• meet our legal, tax and insurance obligations.

We collect, use and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances, and we do not sell your personal information.

4. Health and injury information

Because Pilates is physical exercise, we ask about injuries, pregnancy and physical limitations so our instructors can keep you safe and adapt exercises for you. This is sensitive information and we treat it that way.

• Giving us this information is your choice, but without it we may not be able to let you take part in certain classes.
• We use it only to deliver your sessions safely and to meet our insurance and liability obligations.
• It is visible only to the instructors and studio staff who need it to run your class or session.
• We do not use it for marketing, and we do not share it with advertising platforms.

5. Marketing emails and text messages

We send marketing emails and text messages only to people who have consented to receive them, as CASL requires. You can withdraw that consent at any time and it costs you nothing.

• Email — click the unsubscribe link at the bottom of any marketing email.
• Text messages — reply STOP to any marketing text.
• Either — email us at hello@twosisterspilates.ca and ask to be removed.

We act on opt-out requests promptly and, in any event, within 10 business days. Even after you opt out of marketing, we will still send you messages we need to send about bookings you have made — confirmations, reminders and cancellations.

6. Cookies and website analytics

Our website uses cookies and similar technologies. Some are necessary to make the site and the booking system work. Others help us understand how the site is used, or help us measure our advertising.

The third-party tools on our website are:

• Google Analytics — measures how visitors find and use the site. See Google's privacy policy. You can opt out with the Google Analytics opt-out add-on.
• Meta Pixel — measures the results of our Facebook and Instagram ads. See section 7.
• Ahrefs Analytics — privacy-focused traffic measurement for search performance.
• Arketa — powers the booking and checkout tools embedded on our site.

You can block or delete cookies in your browser settings. If you block cookies that our booking tools rely on, parts of the site may not work properly.

7. Facebook and Instagram advertising

We advertise on Facebook and Instagram, which are operated by Meta Platforms, Inc.

• Lead forms. Some of our ads include a form you can fill in without leaving the app. If you submit one, Meta sends us the name, email address and phone number on that form so we can contact you about the offer you responded to and, where you have consented, send you marketing. Meta's own handling of that information is governed by the Meta Privacy Policy.
• Meta Pixel. The pixel on our website tells us which ads led to visits and bookings, and lets us show ads to people who have already visited the site.
• Custom audiences. We may provide Meta with a securely hashed list of contact details so we can show ads to our existing clients, or avoid showing new-client offers to them. Meta matches the hashed data against its users and, under its terms, is required to delete it after matching.

You can control how ads are targeted to you in your Facebook ad preferences and Instagram settings. To stop receiving our marketing entirely, see section 5.

8. Who we share information with

We do not sell your personal information. We share it only with service providers who help us run the studio, and only as much as they need to do their job:

• Arketa — bookings, memberships, payments and our mobile app.
• HighLevel — our customer relationship system, used to store contact records and send our emails and text messages.
• Meta Platforms — advertising, lead forms and audience matching.
• Google — website analytics.
• Ahrefs — website analytics.
• Netlify — website hosting and the contact forms on this site.

We may also disclose personal information where the law requires it, to establish or defend a legal claim, or to protect the safety of our clients and staff. If our business is sold or reorganised, client information may transfer to the new owner, who would remain bound by this policy.

Information stored outside Canada

Some of these providers store and process information in the United States or other countries. While your information is in another country, it may be accessible to the courts, law enforcement and national security authorities of that country under its laws. We use providers that commit to protecting personal information to a standard comparable to Canadian requirements.

9. Payments

Payments are processed by our booking platform and its payment processor. Two Sisters Pilates does not receive or store your full credit card number. We keep only the record of the transaction — what you bought, when, the amount, and the last digits and card type shown on the receipt.

10. How long we keep it

We keep personal information only as long as we need it for the purposes described in this policy, or as long as the law requires.

• Client and booking records — for as long as you are a client and for a period afterwards, so we can answer questions about past visits and meet our legal, tax and insurance obligations.
• Waivers and injury information — for the period our insurer and applicable limitation periods require.
• Marketing contact records — until you unsubscribe, after which we keep a minimal record of your opt-out so we do not contact you again by mistake.
• Website analytics — according to the retention settings of the analytics tools listed above.

When information is no longer needed, we delete it or make it anonymous.

11. How we protect it

We use safeguards appropriate to the sensitivity of the information, including encrypted connections on our website and booking system, access controls so that staff only see what they need, accounts protected by passwords, and reputable service providers with their own security programs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Your rights and choices

Under Canadian privacy law you may:

• Access the personal information we hold about you and ask how we have used and disclosed it.
• Correct information that is inaccurate or incomplete.
• Withdraw consent to our use of your information, including marketing, subject to legal and contractual limits. Withdrawing consent for health information may mean we can no longer offer you certain classes.
• Ask us to delete information we no longer need to keep.
• Complain if you are unhappy with how we have handled your information.

Email hello@twosisterspilates.ca and we will respond within 30 days. We may need to confirm your identity first. If we cannot give you access to some information, we will explain why.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

13. Children

Our website and services are intended for adults. We do not knowingly collect personal information from children under 13 without the consent of a parent or guardian. Where a young person attends a class, we collect their information from their parent or guardian. If you believe we have collected a child's information in error, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed. If we make a significant change to how we use your personal information, we will tell you by email or by a notice on this website.

15. How to contact us

For any question about this policy, or to exercise any of the rights described above, contact us at:

Privacy — Two Sisters Pilates Inc.
221 Lakeshore Road E, Unit #201
Oakville, Ontario, L6J 1H7
hello@twosisterspilates.ca
289-206-5889