XO PILATES CO. PRIVACY POLICY

Last updated: January 13, 2026

XO Pilates Co. (“us”, “we”, “our”, the “Company” or “XO Pilates”) has created this privacy policy (“Privacy Policy”) to give you confidence as you visit and use our services online and offline, and to demonstrate our commitment to fair information practices and the protection of privacy.

This Privacy Policy is only applicable to information we obtain in the course of our business, including through our website, our mobile app (if applicable), XO Pilates studios (“Studios”), our social media accounts, communications with us, and other online and offline offerings (collectively, the “Services”). Further, our studio operators and partners may maintain individual websites and provide services and communicate with you in a manner that may process and use your personal information in the country or territory where they operate. This Privacy Policy does not apply to any third-party products, services, or websites that you may be able to access via the Services, including those of third parties, which may have data collection, storage, and use practices and policies that differ materially from this Privacy Policy.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Types of Information Collected

1.1 Personal Information

“Personal Information” is information that personally identifies you. When you register for an XO Pilates membership, visit Studios, use our Services, contact us directly, apply for employment, or interact with us on social media, you may provide us or our studio partners with certain Personal Information including your name, date of birth, gender, email address, social media handles, phone number, physical address, and fitness-related information provided during the membership process, such as height, weight, general fitness goals, or other information helpful to achieving your wellness goals.

If you are a prospective studio owner or business partner, we may collect additional information such as your name, email address, phone number, address, and general financial information (e.g., liquidity and assets) to evaluate your qualifications.

1.2 Account Information

“Account Information” is information we or our partners collect in connection with your XO Pilates membership account, including membership type, billing method, effective dates, username and password (“Membership Information”), records of services or products purchased, class preferences, and notes related to customer service communications.

1.3 Financial Information

“Financial Information” is information collected to process payments, such as credit card numbers or related payment details. XO Pilates does not store full payment card information, except for the last four digits of your credit card. For more information, see Section 3.3 (“Payment Processors”).

1.4 Traffic Data

“Traffic Data” includes information automatically sent by your browser or device when accessing our Services, such as IP address, browser type, device type, operating system, pages visited, time and date of access, and cookie-generated data (see Section 4).

2. Legal Basis, Use and Retention of Information

2.1 Use of Information Collected

XO Pilates may process your Personal Information based on:
(1) your consent,
(2) compliance with legal obligations,
(3) performance of a contract,
(4) protection of vital interests, or
(5) our legitimate business interests, provided those interests are not overridden by your rights.

We use Personal Information to:

• Provide and improve our Services
• Manage memberships and accounts
• Process employment or studio partnership applications
• Personalize member experiences
• Respond to inquiries and provide customer support
• Communicate important service-related notices
• Conduct analytics and business planning (with consent where required)
• Prevent fraud, security threats, or misuse

You may not opt out of essential service communications related to your membership or account.

2.2 Retention Policy

We retain Personal Information only as long as necessary to fulfill business and legal purposes. Information associated with an active membership is retained while your account remains active. Upon verified request to delete your data, we will remove your information subject to a 30-day backup retention period and applicable legal requirements.

3. Third-Party Data Processors and Service Providers

XO Pilates does not sell personal data except as permitted under applicable law.

3.1 Business Affiliates

We may share information with affiliated entities or partners for operational purposes. If XO Pilates is involved in a merger or asset sale, Personal Information may be transferred as part of the transaction.

3.2 Business Partners

We may share information with studio partners or service collaborators to provide Services or marketing communications, subject to applicable consent requirements.

3.3 Payment Processors

Payments may be processed by third-party payment processors. Their use of Financial Information is governed by their own privacy policies.

3.4 Vendors and Service Providers

XO Pilates engages vendors for analytics, communications, marketing, hosting, and operational support. These vendors are contractually limited to using data only to perform services on our behalf.

4. Cookies

XO Pilates uses cookies and similar technologies to improve website functionality and user experience.

Types of cookies used:

• Essential Cookies (required for functionality)
• Functional Cookies (enhanced personalization)
• Analytics Cookies (site performance measurement)
• Advertising Cookies (interest-based advertising, where permitted)

You may adjust cookie settings through your browser.

5. Opting Out of Promotional Communications

You may opt out of marketing emails by using the unsubscribe link in communications or contacting us directly.

6. Compliance with Laws

We may disclose Personal Information when required by law or to protect the security and integrity of our Services.

7. Your California Privacy Rights (CCPA)

California residents have rights to access, delete, and opt out of the sale of Personal Information, subject to legal limitations. XO Pilates does not knowingly sell personal data.

8. Children’s Privacy

Our Services are not intended for individuals under thirteen (13), and we do not knowingly collect Personal Information from children under this age.

9. Data Transfer

XO Pilates may process and store information in the United States and other jurisdictions where service providers operate. By using our Services, you consent to these transfers.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect Personal Information, though no system can be guaranteed 100% secure.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Continued use of our Services after changes are posted constitutes acceptance of those changes.

12. Contact Us

If you have questions about this Privacy Policy or wish to submit a data privacy request, please contact us at:

hello@xopilatesco.com
Corporate Address: 20 Liberty Lane STE 103, Greenville, SC 29607
Phone: 8312242970

13. Nevada Privacy Rights

Nevada residents may submit opt-out requests regarding the sale of personal data by contacting us at the email above.

14. Virginia Privacy Rights (VCDPA)

Virginia residents have rights to access, correct, delete, and opt out of certain data processing activities as outlined in this Privacy Policy.