Effective Date: May 18, 2025 Last Updated: May 18, 2026

At Aura Studio NYC, your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your personal information — including through our website, our booking platform, and our SMS and email communications. By using our services, you agree to the terms outlined below.

If you have questions, contact us at [email protected] or 239 W 72nd St, New York, NY 10023.

Who We Are

Aura Studio NYC is a boutique yoga and Pilates studio located on the Upper West Side of Manhattan. We operate aurastudionyc.com (the “Site”) and serve clients in studio, in home, and in office. We are the data controller for personal information collected through the Site and our services.

Information We Collect

We may collect personal information that you voluntarily provide, including:

• Contact information — name, email address, phone number, mailing address, emergency contact
• Account and booking information — login credentials for our booking platform, class history, membership tier, package details, attendance, preferences, instructor notes
• Health and wellness information — injuries, physical limitations, pregnancy status, or other information you choose to share so we can support your practice safely
• Payment information — billing address and the last four digits of your payment card. Full payment details are processed directly by our payment processors and are not stored on our servers.
• Communications — messages you send us by email, text, voicemail, social media, or in person
• Marketing inputs — survey responses, intro-offer signups, referral information, gift card recipient details

Information collected automatically

When you visit the Site, we and our service providers may collect:

• Device and browser information (IP address, browser type, operating system, device identifiers)
• Usage data (pages viewed, links clicked, time spent on the Site)
• Approximate location derived from your IP address
• Cookies and similar tracking technologies (see “Cookies and Tracking” below)

Information from third parties

We may receive information about you from:

• Booking and partner platforms — Momence (our primary booking system), ClassPass, and Wellhub
• Social media platforms — when you interact with @aurastudio.nyc on Instagram or other accounts
• Advertising and analytics partners — Meta and Google

How We Use Your Information

We use your information to:

• Provide our services — schedule and confirm classes, manage memberships, process payments, and deliver private and signature experiences
• Communicate with you about classes, bookings, schedule changes, billing, and studio updates
• Send promotional emails and, only if you have explicitly opted in, promotional SMS messages
• Personalize your experience — recommend classes, instructors, or offerings based on your preferences
• Operate and improve our business — analytics, site performance, fraud prevention, and quality
• Comply with legal obligations — tax, accounting, employment, and health and safety
• Protect our rights and the safety of our community

SMS Communications

Opt-In Required: You must provide clear consent to receive SMS messages from us. This consent is obtained via a checkbox on our forms stating:

“By checking this box, you agree to receive text messages from Aura Studio NYC. Please refer to our privacy policy.”

No Sharing of Phone Numbers: We do not share, sell, or pass your phone number to any third parties for marketing or any other purpose. Your consent is used exclusively by Aura Studio NYC and will not be transferred or disclosed to affiliates or external partners.

Opt-Out: You may unsubscribe from SMS communications at any time by replying STOP to any message.

Cookies and Tracking Technologies

A cookie is a small text file placed on your device that helps us recognize you and remember your preferences. We and our partners use cookies, pixels, and similar technologies for several purposes:

• Strictly necessary — required for the Site to function (security, page navigation, session)
• Functional — remember preferences and improve usability
• Analytics — understand how visitors use the Site so we can improve it (e.g., Google Analytics)
• Advertising / Targeting — show relevant ads on Meta and Google, and measure ad performance (e.g., Meta Pixel)

You can manage your cookie preferences at any time using the “Your Privacy Choices” link in our Site footer, or through your browser settings.

We honor Global Privacy Control (GPC) signals. When your browser sends a GPC signal, we treat it as an opt-out of the sharing of personal information for cross-context behavioral advertising on that browser.

For more details about the specific cookies we use, see our Cookie Policy.

How We Share Your Information

We do not sell your personal information for money. However, some of our data sharing — particularly with advertising partners — may qualify as a “sale” or “share” under certain state privacy laws, including California’s CCPA/CPRA. You have the right to opt out (see “Your Rights” below).

We share personal information with:

Advertising and analytics partners

• Meta — via the Meta Pixel and Conversions API, for ad targeting and measurement on Facebook and Instagram
• Google — Google Analytics for site usage analytics, and Google Ads for advertising measurement

Other recipients

• Professional advisors — attorneys, accountants, insurance providers
• Government authorities — when required by law, subpoena, or court order
• In a business transaction — if we sell, merge, or restructure, personal information may transfer to the new owner under this Policy
• With your consent — when you direct us to share information (for example, with a personal trainer or physical therapist)

Health and Wellness Information

Information you share about injuries, medical conditions, pregnancy, or other health-related matters is treated with extra care. We use it only to:

• Help instructors keep you safe and provide appropriate modifications
• Coordinate care with a physical therapist or physician, only with your consent
• Maintain accurate emergency contact and incident records

We do not use health information for advertising or share it with third-party advertising partners. We are not a HIPAA-covered entity, but we still treat this information as sensitive and protect it accordingly.

Your Rights and Choices

Everyone

You can:

• Update your account information in Momence or by contacting us
• Unsubscribe from marketing emails using the link in any email
• Stop SMS messages by replying STOP
• Manage cookies via the “Your Privacy Choices” link in our footer
• Ask us to access, correct, delete, or stop processing your data — contact us at the email above

California residents

Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, you have the right to:

• Know what personal information we collect, use, share, or sell
• Access a copy of the personal information we hold about you
• Delete your personal information, subject to certain exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising — use the “Your Privacy Choices” link in our footer
• Limit use of sensitive personal information
• Non-discrimination — we won’t deny service or charge different prices for exercising your rights

Residents of other states with privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, Iowa, Tennessee, Minnesota, Nebraska, New Jersey, Indiana, Kentucky, Rhode Island, Maryland, and other states with comparable laws generally have similar rights. Contact us using the information below to exercise them.

Submitting a request

Email us at [email protected] with “Privacy Request” in the subject line. We will verify your identity (typically by matching the email or phone on your account) and respond within 45 days, or sooner if required by law.

Data Security

We take reasonable administrative, technical, and physical measures to protect your information, including encryption in transit, access controls, and vetted service providers. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately.

Data Retention

We keep personal information only as long as needed for the purposes described in this Policy, including:

• Active client and member records — for the duration of your relationship plus a reasonable period afterward
• Financial and transaction records — at least 7 years for tax and accounting compliance
• Marketing data — until you unsubscribe
• Health and wellness intake — for the duration of your relationship plus a period sufficient to address any liability or incident claims

When we no longer need information, we delete or anonymize it.

Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal information from children under 16 without verifiable parental consent. If you believe a child has provided us information, please contact us and we will delete it.

Third-Party Links

Our Site may link to third-party websites such as Momence, Instagram, and partner brands. We are not responsible for the privacy practices of those sites. Please review their privacy policies before sharing information.

Updates to This Policy

This Privacy Policy may be updated periodically. All changes will be posted on this page with a new “Last Updated” date. Where appropriate, we will notify you by email or through the Site. Your continued use of the Site or our services after changes take effect means you accept the updated Policy.

Contact Us

Aura Studio NYC 239 W 72nd St New York, NY 10023 Email: [email protected] Instagram: @aurastudio.nyc

For privacy-related requests, please use “Privacy Request” in the subject line.

This Privacy Policy reflects our understanding of applicable U.S. state privacy laws as of the Last Updated date. It is not legal advice. We recommend periodic review with a qualified privacy attorney.