Last updated: 3 August 2026
Boutique Lagree Studios S.L. (“Boutique Lagree”, “we”, “our” or “us”) is committed to protecting your privacy and processing your personal data transparently and securely. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book classes, purchase memberships, subscribe to our newsletter or otherwise interact with us.
By using our website or services, you acknowledge that you have read this Privacy Policy.
1. Data Controller
Boutique Lagree Studios S.L.
NIF: B24917551
Sardenya 277, 3º 2ª
08013 Barcelona
Spain
Email: hello@boutiquelagree.com
Website: https://boutiquelagree.com
2. Applicable legislation
This Privacy Policy has been prepared in accordance with:
- Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
- Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD)
- Applicable Spanish consumer and e-commerce legislation
- The EU ePrivacy framework regarding cookies and electronic communications
3. Personal data we collect
Depending on how you interact with Boutique Lagree, we may collect the following categories of personal data.
Identity information
- First name
- Last name
- Date of birth (where required)
- Gender (only where voluntarily provided)
Contact details
- Email address
- Telephone number
- Billing address
- Emergency contact (where provided)
Booking information
When booking classes through Mariana Tek, we collect information necessary to manage your reservations, memberships and attendance.
This may include:
- Booked classes
- Membership type
- Credits
- Attendance history
- Waitlist status
- Purchase history
Member identification photo
To help protect the integrity of memberships and ensure that classes are attended only by the registered member, we collect and store a profile photograph of each member within our booking platform.
This photograph is used solely for internal operational purposes, including:
- verifying member identity at check-in;
- preventing fraudulent use of memberships or class credits;
- assisting our staff in recognising members and providing a personalised studio experience.
The photograph is not used for marketing purposes, facial recognition, automated decision-making or shared publicly without your separate consent. Boutique Lagree may request that members update their profile photograph from time to time where necessary to ensure accurate identification.
Payment information
Payments are securely processed through Stripe via the Mariana Tek platform.
Boutique Lagree does not store complete credit card numbers or payment card security codes.
Website information
When visiting our website we may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Language preferences
- Pages visited
- Session duration
- Referring website
Marketing preferences
Where you have given consent, we collect information relating to:
- Newsletter subscriptions
- Marketing preferences
- Email engagement
- Promotional communications
4. Special categories of personal data
Boutique Lagree does not intentionally collect special categories of personal data.
However, you may voluntarily disclose information relating to injuries, pregnancy, mobility limitations or other health conditions so that instructors can provide appropriate guidance during classes.
Such information is processed only:
- with your explicit consent;
- to protect your vital interests; or
- where necessary for health and safety during participation.
Providing this information is entirely voluntary.
5. How we collect your data
We collect personal data when you:
- visit our website;
- contact us by email or contact form;
- create an account;
- book classes;
- purchase memberships;
- subscribe to newsletters;
- join waiting lists;
- communicate with us via social media;
- participate in promotions or events.
We may also receive information from trusted third-party providers including Mariana Tek and Stripe when processing bookings and payments.
6. Legal basis for processing
Depending on the circumstances, we process personal data under one or more of the following lawful bases.
Performance of a contract
We process your data in order to:
- manage bookings;
- administer memberships;
- process payments;
- provide customer support;
- manage cancellations and waiting lists;
- verify member identity and prevent unauthorised use of memberships through profile photographs.
Consent
We rely on consent for:
- newsletters;
- marketing emails;
- promotional offers;
- non-essential cookies;
- Meta Pixel;
- Google Analytics (where required under applicable law).
Consent may be withdrawn at any time.
Legal obligation
We process certain information to comply with:
- Spanish accounting legislation;
- tax obligations;
- fraud prevention;
- consumer protection requirements.
Legitimate interests
Where appropriate, we process data to:
- improve our services;
- maintain website security;
- prevent fraud;
- analyse website performance;
- respond to customer enquiries;
- protect our legal rights;
- protect against membership fraud and account sharing by maintaining member identification photographs.
7. How we use your information
Your personal data may be used to:
- process bookings;
- manage memberships;
- process payments;
- confirm reservations;
- send booking reminders;
- manage waiting lists;
- provide customer support;
- respond to enquiries;
- improve our website;
- analyse visitor behaviour;
- detect fraudulent activity;
- comply with legal obligations;
- send newsletters where consent has been provided;
- verify the identity of members during studio check-in through member profile photographs.
We do not sell your personal information.
8. Third-party service providers
We work with carefully selected third parties that process personal data on our behalf.
These include:
Mariana Tek
Used for:
- class bookings;
- memberships;
- customer accounts;
- newsletters;
- scheduling.
Stripe
Used to securely process payments.
Boutique Lagree never receives or stores complete payment card details.
Google Analytics 4
Used to understand how visitors use our website and improve user experience.
Analytics cookies are only placed where legally required after obtaining consent.
Meta Pixel
Used to measure advertising performance and improve marketing campaigns.
Marketing cookies are only activated after consent.
Boutique Lagree ensures that all service providers processing personal data on its behalf are subject to appropriate data processing agreements where required by applicable law.
9. International data transfers
Some of our service providers may process information outside the European Economic Area.
Where international transfers occur, Boutique Lagree ensures appropriate safeguards are implemented, including:
- Standard Contractual Clauses approved by the European Commission;
- adequacy decisions where applicable;
- additional technical and organisational safeguards where appropriate.
10. Data retention
We only retain personal information for as long as necessary.
Typical retention periods include:
- Customer enquiries: up to 24 months
- Marketing consent records: until consent is withdrawn
- Membership records: during the membership plus applicable legal retention periods
- Financial records: as required under Spanish tax legislation
- Website analytics: according to the configuration of Google Analytics
Where legal obligations require longer retention periods, we will retain information accordingly.
Member profile photographs are retained while your account remains active and for any period reasonably necessary to resolve disputes, prevent fraud or comply with legal obligations. They are deleted when no longer required.
11. Security
Boutique Lagree implements appropriate technical and organisational measures designed to protect personal information against:
- unauthorised access;
- accidental loss;
- alteration;
- disclosure;
- destruction.
Although no online system can guarantee absolute security, we continually review and improve our security measures.
12. CCTV
To help ensure the safety and security of our members, staff and premises, Boutique Lagree may operate closed-circuit television (CCTV) in certain areas of the studio.
Where CCTV is in use:
- recordings are used solely for security, safety and incident investigation purposes;
- CCTV is operated on the basis of our legitimate interests in protecting individuals and property;
- recordings are accessible only to authorised personnel and, where legally required, competent authorities;
- recordings are retained only for as long as necessary and in accordance with applicable Spanish law, unless they are required for the investigation of a specific incident or to comply with a legal obligation.
Clear signage will be displayed wherever CCTV is in operation.
13. Your rights
Exercising your rights is free of charge unless requests are manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or refuse the request where permitted by applicable law. Under the GDPR you have the right to:
- access your personal data;
- rectify inaccurate information;
- request deletion (“right to be forgotten”);
- restrict processing;
- object to processing;
- withdraw consent;
- data portability;
- lodge a complaint with a supervisory authority.
To exercise any of these rights please contact:
hello@boutiquelagree.com
We aim to respond within one month.
14. Children’s privacy
Our website is not intended for children under the age of 16 without the involvement or consent of a parent or legal guardian.
If we become aware that personal information has been collected from a child without appropriate consent, we will delete it as soon as reasonably possible.
15. Cookies
Our website uses cookies and similar technologies.
These help us:
- operate the website;
- analyse website traffic;
- improve user experience;
- measure marketing effectiveness.
Further information is available in our Cookie Policy.
16. Third-party websites
Our website may contain links to third-party websites.
Boutique Lagree is not responsible for the privacy practices of external websites.
We encourage you to review the privacy policies of every website you visit.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical or operational changes.
The latest version will always be published on our website together with the revision date.
18. SMS Communications
Where you have expressly opted in, Boutique Lagree may send SMS messages relating to your account and studio services.
These messages may include:
- booking confirmations;
- class reminders;
- waitlist notifications;
- membership updates;
- promotional offers and events (where you have separately consented to marketing communications).
Your consent to receive SMS messages is voluntary and is not a condition of purchasing any membership or service.
Message frequency
The number of messages you receive will depend on your bookings, memberships and interactions with Boutique Lagree.
Charges
Message and data rates may apply according to your mobile service provider’s pricing plan. Boutique Lagree is not responsible for any charges imposed by your mobile carrier.
Opting out
You may opt out of receiving SMS communications at any time by replying STOP to any SMS message we send you (where supported). After you reply STOP, you will receive a one-time confirmation message and will no longer receive SMS communications from Boutique Lagree unless you opt in again.
If you wish to resume receiving SMS messages, you may opt in again using the original sign-up method or, where supported, by replying START.
For assistance, reply HELP (where supported) or contact us at hello@boutiquelagree.com.
Carrier responsibility
Mobile network operators are not responsible for delayed or undelivered messages.
19. Contact us
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Email: hello@boutiquelagree.com
Website: https://boutiquelagree.com
If you believe your personal data has been processed unlawfully, you also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or your local supervisory authority within the European Union.