Privacy Policy

This policy explains what personal data this website (synergyptpilates.com) collects, how it's used, and the choices you have. It's written to reflect exactly what the site does — not a generic template.

Who we are

Synergy+ Physical Therapy & Pilates operates two studios under two separate legal entities. Which one is responsible for your data depends on which studio you contact:

• Ascona, Switzerland — and all visitors from Europe. The data controller is Synergy di Zeina Asfour-Grifoni, a Swiss sole proprietorship (ditta individuale) trading as Synergy+, Via Buonamano 12, 6612 Ascona, Switzerland, UID CHE-440.665.082. This is the entity responsible under the GDPR and the Swiss FADP.
• San Rafael, California. Handled by our United States entity at 704 Mission Ave, San Rafael, CA.

For any privacy question, or to exercise the rights below, contact us at tiziano@synergyptpilates.com and say which studio you dealt with.

What data we collect

• The contact form. If you send us a message, we collect your name, email address, the studio and enquiry type you select, your message, and your phone number if you choose to give it. This is sent to the studio you selected as an email. We do not store it in a database, and the website keeps no copy — it lives in our inbox, like any other email.
• Health information you choose to share. People often mention an injury or a condition when they write to us, and that counts as health data, which has stronger protection under GDPR. We only use it to answer you and to work out which kind of session suits you. Please share no more than you need to at this stage — a detailed medical history is better discussed in person or by phone than through a web form.
• Analytics, only if you agree. We use Google Analytics to understand which pages people find useful. It loads only after you press “Accept” on the cookie banner. If you decline, or before you choose, no analytics script is loaded and no request is made to Google at all. You can change your mind at any time using the Cookie settings link in the footer.
• Language & region preference. To suggest the right language and studio, the site reads your browser’s timezone and language settings and stores your choice in your browser’s local storage. This never leaves your device and isn’t linked to your identity. See our Cookie Policy for detail.
• Standard server logs. Like virtually any website, our hosting provider logs basic technical information (IP address, browser type, pages requested) for security and reliability. These rotate daily and are kept for 30 days, then deleted. We don’t access them for marketing or profiling.
• Spam protection on the contact form. So that the form can’t be used for automated abuse, we count how many messages arrive from one internet connection — at most five an hour and fifteen a day. Your IP address is never stored to do this. It is combined with a random secret held only on our own server and turned into a SHA-256 hash, which cannot be turned back into an address. The counters sit on our server and are deleted after a day. Our legal basis is our legitimate interest in keeping the form usable.

We do not sell personal data, and we do not use it for advertising or profiling.

Third-party services

These are the companies that process data on our behalf when you use this site:

• SiteGround — hosts the website. Every page you read and every message you send passes through their servers.
• Google — two separate things. Google Analytics, only with your consent, as described above. And Google Workspace, which runs our email: every enquiry sent through the contact form is delivered to, and then kept in, a Gmail mailbox we control. The typefaces this site uses are served from our own servers, so your browser makes no request to Google for them and your IP address is not exposed to Google simply by reading a page.
• Corebility — our Ascona booking system. The class timetable shown on this site is fetched by our own server, so your browser never contacts Corebility while you are just reading the page. If you follow a booking link, you leave this site and their privacy policy applies.
• Kartra — handles purchases and access for our online courses and the Happy Body membership. If you follow a signup or checkout link you leave this site, and their privacy policy applies to anything you enter there.

How long we keep it

Contact-form messages. We keep your enquiry for as long as it is useful — to answer you, and to pick the conversation back up if you come back to us later — and we clear out what we no longer need. You can ask us to delete yours at any time, for any reason or none; see “Your rights” below. If you do become a client, your details move into our client records, which are kept for the period our profession and local law require for health records, separate from this website.

Analytics: 2 months. Analytics data tied to cookies and identifiers is kept for two months, the shortest period Google Analytics offers, and a return visit does not restart that clock. Google’s aggregated reporting — visitor counts and page popularity, with nothing tied back to an individual — is not subject to that period. Your cookie and language preferences stay in your browser until you clear them or press “Cookie settings” below.

Your rights

If you’re in the EU, UK, or Switzerland, you have rights under GDPR and the Swiss FADP including access, correction, deletion, restriction, portability, and objection to processing. If you’re a California resident, you have rights under the CCPA, including the right to know what personal information is collected and to request its deletion. You can also withdraw your analytics consent at any time without giving a reason. Write to tiziano@synergyptpilates.com and we’ll respond promptly.

Children's privacy

This site is not directed at children, and we do not knowingly collect data from children.

Changes to this policy

If what we collect or how we use it changes — particularly once online booking is introduced — we'll update this page and the "last updated" date above.