Privacy Policy

Identification & contact

Name, email, phone number, address.

Account & booking

Class reservations, membership details, payment history.

Payment

Billing details are processed securely by our booking and payment provider, Momence, which stores your payment details to process recurring payments. HOM does not store card details directly.

Health & safety

Relevant information you voluntarily provide about your physical condition, to ensure safe participation in training and recovery sessions.

Marketing preferences

Subscription to newsletters, event updates, or promotions.

Website & device

IP address, browser type, cookies, and analytics data. See our Cookies Policy for details.

We process your personal data for the following purposes:

• •To provide and manage our services, including class bookings, memberships, and payments.
• •To communicate important updates regarding your membership, schedule, or studio policies.
• •To personalise your training and recovery experience.
• •To send you marketing communications, only if you have opted in.
• •To comply with legal and regulatory requirements.

Contractual necessity

When processing your data is required to provide our services, including membership, bookings, and payments.

Consent

When you voluntarily opt in for marketing communications.

Legitimate interest

To improve our services, ensure security, and prevent fraud.

Legal obligation

When processing is required to comply with tax, accounting, or regulatory laws.

We may share your personal data with service providers who act as data processors, including booking and payment platforms such as Momence, Stripe, Google, and Meta. We may also share data with professional advisors such as lawyers and accountants where required, and with authorities when required by law. We also use FormSubmit to deliver our careers and events forms by email, Google Workspace to store plan-finder answers, and Momence's web chat when you choose to contact us.

We do not sell your personal data. If data is transferred outside the European Economic Area, we ensure adequate safeguards are in place, including EU Standard Contractual Clauses where applicable.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law.

Booking & membership data

Up to 6 years, as required by legal obligation.

Marketing data

Until you withdraw consent.

Job applications

Up to 12 months.

Under GDPR, you have the right to access your personal data, request correction of inaccurate or incomplete data, request deletion, restrict or object to processing, request data portability, and withdraw consent for marketing at any time.

To exercise these rights, contact us at hello@highonmovement.com.

You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.

We may update this Privacy Policy from time to time. Any updates will be posted on our website with a revised effective date.