PRIVACY POLICY

Daily Flows, LLC

3091 SW 22nd St, Coral Gables, FL 33145, USA

hello@dailyflowstudio.com

Last updated: November 13, 2026

This policy explains how Daily Flows, LLC collects, uses, and shares information about you when you visit our website, book a class, buy a class pack, or otherwise interact with us. We wrote it to be read. If anything here is unclear, email us and we will explain it in plain language.

We built this policy around a simple idea: your information is yours. We ask for what we need to run the studio, we keep it as long as we genuinely need it, and we do not sell your personal information.

1. WHO WE ARE

Daily Flows, LLC is a Florida limited liability company that operates Daily Flows Movement Studio, a movement studio in Coral Gables, Florida. We offer yoga, pilates, sculpt, stretching and related classes, along with private events and teacher training.

When we talk about "we," "us," or "our," we mean Daily Flows, LLC. When we talk about "you," we mean the person reading this policy, whether you are a visitor to our website, a first-time guest, a class member, a private-event client, or a teacher training student.

We are a physical studio serving the Coral Gables and greater Miami area. We do not sell products or services outside the United States.

2. WHERE YOUR INFORMATION LIVES

Almost everything you give us ends up in one place: Mindbody, the booking system we use to run the studio.

Mindbody holds your account, your class reservations, the class packs you buy, your payment records, your visit history, and your contact details. It also runs our checkout, which is why paying for a class pack takes you to a Mindbody-hosted page rather than staying on our website.

That matters for this policy in two ways. First, it is the system we rely on to keep your records accurate. Second, it means Mindbody handles your information both on our behalf and, in some respects, as its own independent business. Mindbody's own privacy policy also applies to that handling, and we link to it below.

We also collect some information directly through our website, through analytics tools, and through our advertising. Sections 3 and 4 explain which.

3. INFORMATION WE COLLECT

Information you give us directly

Contact details. Your full name, email address, and mobile phone number. We need these to hold a spot for you, to send confirmations and reminders, and to reach you if a class changes.

Account and booking information. The classes you reserve, the sessions you attend, your booking and purchase history, the class packs or blocks of classes you have bought, and any remaining balance or credit on your account. This lives in Mindbody.

Payment information. When you pay, the payment is processed inside Mindbody's checkout. We receive confirmation of the transaction, meaning the amount, the date, and a transaction reference. We do not see or store your full card number. Your card details go directly to Mindbody's payment partners, described in Section 6.

Preferences and class activity. The classes you attend, the styles you favor, your experience level, and any preferences you tell us about.

Messages you send us. The content of emails, form submissions, and messages you send through social channels, together with our replies.

Private events and teacher training. When you enquire about a private event, a workshop, or our pilates teacher training, we collect the details you share so we can plan the session and follow up with you.

What we do not ask for

We do not ask you for health information, and our instructors do not record medical conditions, injuries, pregnancies, or diagnoses in your client record. If you choose to tell an instructor about a limitation so they can help you move safely, we do not write it down or store it as part of your profile. We ask that you do not submit health or medical details through our website forms or by email.

Information we collect automatically

How you use the site. The pages you visit, the buttons and links you click, the events we record on a page, the time you spend on a page, and the path you take through the site.

Your device and browser. Device type, browser and version, operating system, screen resolution, language, and an approximate location derived from your IP address.

Where you came from. The website, social network, or search result that referred you to us, and campaign parameters such as UTM tags and the Facebook click identifier, so we know which of our efforts brought you in.

Your advertising interactions. Which advertisements you have seen or clicked, which campaigns you engaged with, and whether you are part of a group of people we advertise to.

Your activity in our booking system. When you open our booking widget, the classes you look at and the bookings you begin. This is collected by Mindbody, whose widget is embedded on our site.

Information we receive from third parties

Mindbody sends us purchase and enquiry events so we can measure our advertising and keep our records in order. Our advertising and analytics providers send us aggregated reports about how our campaigns perform. We do not buy lists of contact details from data brokers.

4. COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small files that a site places in your browser. We and the companies we work with use them to keep the site working, to remember you between visits, and to understand how people use our site and respond to our advertising.

The categories we use

Strictly necessary. These make the site work and cannot be switched off. They include the security token that protects our forms, the cookies that keep you signed in to our booking system, and the cookies that remember the page you came from.

Analytics. These tell us how many people visit, which pages they read, and how they navigate.

Advertising and measurement. These let us measure whether our campaigns are working, whether an advertisement led to a visit or a booking, and whether you have already seen our advertising, so we can limit repetition and build relevant audiences.

The main cookies we set

crumb: strictly necessary, security token for form submissions on our site, set by Squarespace, expires when you close your browser.

ss_cvr: strictly necessary, keeps you signed in and remembers your visit across pages, set by Squarespace, up to about 400 days in most browsers.

ss_cvt: strictly necessary, remembers the page you came from, set by Squarespace, about 30 minutes.

_ga: analytics, distinguishes one visitor from another, set by Google Analytics 4 through Google Tag Manager, up to about 400 days in most browsers.

ga<property identifier>: analytics, holds session state for our Google Analytics property, set by Google Analytics 4, up to about 400 days in most browsers.

_fbp: advertising, identifies your browser so Meta can measure our campaigns and limit repetitive advertising, set by the Meta Pixel, 90 days.

_fbc: advertising, records that you arrived from a Facebook or Instagram advertisement so the resulting visit or booking can be measured against that ad, set by the Meta Pixel, 90 days.

mp_brandedweb: strictly necessary, remembers your session and preferences inside our booking system, set by Mindbody, about 12 months.

_GRECAPTCHA: strictly necessary, protects our contact form from automated spam, set by Google reCAPTCHA, up to about 6 months.

When you open our booking widget, Mindbody and Meta also set cookies on Mindbody's own domain rather than ours, including their analytics and advertising identifiers. Those cookies are governed by Mindbody's and Meta's policies.

Google Tag Manager itself does not set cookies. It is a container that decides which measurement tools load on a given page.

How to manage cookies. Every browser lets you review and delete cookies, and most let you block them. Blocking strictly necessary cookies can stop our booking widget and contact form from working.

Advertising opt-out. You can opt out of advertising cookies and of our use of your information for advertising at any time. Email us at hello@dailyflowstudio.com with the subject line "Advertising Opt-Out," or use the opt-out links on any advertisement we run. We will confirm your request and honor it.

5. HOW WE USE YOUR INFORMATION

We use the information described above to:

- Operate the studio and process bookings, including reserving your place, confirming your reservation, sending reminders, and managing class packs, blocks, and balances.

- Process payments and keep the accounting records we are required to keep.

- Communicate with you about your bookings, class schedules, changes, and cancellations, and respond to your questions.

- Send you information about classes, workshops, and events, by email or text message, where you have agreed to receive it.

- Plan and measure our marketing and advertising, including attributing results to campaigns, showing you more relevant advertising, and building audiences for that advertising.

- Measure and analyze how the site and the booking journey are used, so we can improve them.

- Improve the website, our booking experience, and the way classes are described and scheduled.

- Keep our site and our systems secure, and detect and prevent fraud, abuse, and unauthorized access.

- Meet our legal, tax, and bookkeeping obligations, including responding to lawful requests from authorities.

- Honor your choices about cookies and about marketing messages.

6. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information.

Our booking and payment system: Mindbody

Mindbody, Inc. provides our booking system. It holds your account, reservations, class packs, checkout, and the records of what you have booked and purchased. Mindbody handles your information as a service provider to us and, for some purposes connected to your Mindbody account, as an independent business under its own privacy policy. You can read it at https://www.mindbodyonline.com/company/legal/privacy-policy

Mindbody's own sub-processors

Mindbody uses third-party vendors to deliver its services. When your information is processed through Mindbody, these vendors may handle it as Mindbody's sub-processors. Mindbody publishes the current list in its privacy policy; at the date of this policy they are:

SendGrid, for email delivery. Privacy policy: https://sendgrid.com/policies/privacy/

Stripe, for payment processing. Privacy policy: https://stripe.com/us/privacy

Twilio, for messaging and communications. Privacy policy: https://www.twilio.com/legal/privacy

Mailchimp, for email marketing. Privacy policy: https://mailchimp.com/legal/privacy

Card payments may also be handled by Mindbody's registered payment processing arm. Mindbody Processing is a registered ISO of PNC Bank, N.A., Pittsburgh, PA, and a registered ISO/Agent of Elavon, Inc. Card details are captured by these payment providers directly; we do not receive or store them.

Mindbody may change its sub-processor list from time to time. The current list always governs, and it is published in the Sub-Processors section of Mindbody's privacy policy linked above.

Our email and text message marketing: Attentive

We use Attentive, which is connected to our Mindbody account, to send the emails and text messages that make up our client communications. Attentive receives your name, email address, mobile phone number and purchase activity from Mindbody so we can send you the messages you have agreed to receive, and so we can see how those messages perform. Attentive acts on our instructions and under contract. Its privacy policy is at https://www.attentive.com/privacy

We send marketing text messages only to people who have given us their prior express written consent to receive them, as Florida law requires. You can opt out at any time by replying STOP to any message. Opting out of text messages does not affect messages we need to send you about a booking you have made.

Our website

Squarespace hosts and publishes our website and provides the forms and store functionality on it. It receives the content of the pages you view and the data submitted through its forms.

Analytics and advertising

Google provides Google Analytics 4, Google Tag Manager, and reCAPTCHA. Google receives information about your browsing on our site and, where you submit our contact form, information about that submission for spam protection.

Meta (Facebook and Instagram) provides the Meta Pixel and the Conversions API. Meta receives information about your visit and your interactions with our advertising, and uses it to attribute results, to show you advertising, and to build audiences for that advertising.

Meta and Google operate as our advertising partners. They may use information about your activity on our site and our advertising, along with information they already hold about you, to select and serve advertising. You can opt out as described in Section 4.

Our marketing operations

We work with Lemon Digital, a marketing agency, to operate the technical connections that send purchase and enquiry events from Mindbody to our advertising platforms. In that process, identifying details such as your email address, phone number, and name are converted into a one-way SHA-256 hash before they leave our systems, so the receiving platform never sees the original values. Lemon Digital acts on our instructions and under contract.

Messages sent through Meta

If you send us a message through Messenger or Instagram, that conversation is handled on Meta's platforms. Meta processes the content of those messages under its own policies.

Professionals and teachers

Information you share with an instructor during a class, and information about a private event or a teacher training you take part in, is visible to the studio professionals and teachers involved in delivering that session.

Legal authorities

We disclose information when we believe in good faith that it is required by law, necessary to comply with a legal obligation, needed to protect the safety of our clients or our staff, or necessary to establish, exercise, or defend legal claims. We review requests to narrow them where we are able to do so.

Service providers outside the United States

Our service providers, including Mindbody and its sub-processors, may operate systems located outside the United States. When information is transferred internationally, the receiving provider is bound by contractual data-protection obligations that provide a level of protection comparable to the protections described here.

7. YOUR RIGHTS AND CHOICES

You may ask us at any time to:

- Tell you what personal information we hold about you.

- Give you a copy of that information.

- Correct information that is inaccurate or out of date.

- Delete your information, where we do not have a legal or accounting reason to keep it.

- Stop sending you marketing email or text messages.

To make a request, email hello@dailyflowstudio.com with the subject line "Privacy Request." Tell us what you would like, and we will verify your identity before we respond, so that we do not release your information to someone else. We will respond within 45 days, or tell you if we need more time and why.

Some of the information we hold is maintained by Mindbody on our behalf, and some by Attentive. When your request covers information those providers hold for us, we will ask them to act on it and will confirm the outcome to you.

Email marketing. Every marketing email we send includes an unsubscribe link.

Text message marketing. Reply STOP to any message to stop receiving marketing texts. Reply HELP for help. Message and data rates may apply. Message frequency varies.

We will not treat you differently for exercising any of these choices.

Our obligations under Florida law

We are based in Florida and we handle your information in line with Florida law. If a data breach affects your personal information, we will notify you and the relevant authorities as required by the Florida Information Protection Act.

8. CHILDREN'S PRIVACY

Our classes are for adults. We do not knowingly collect personal information from children under 13, and we do not knowingly target advertising to them. If you are between 13 and 16 and you want to book a class, please have a parent or guardian contact us first so that we can record their permission.

If you believe a child has given us personal information, email hello@dailyflowstudio.com and we will delete it.

9. HOW WE PROTECT YOUR INFORMATION

Information you share with us is transmitted over encrypted connections, and access to the systems that hold your booking, payment, and contact records is limited to the people who need it for their work. Our service providers, including Mindbody and Attentive, are contractually required to protect the information they hold on our behalf.

No method of transmission or storage is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities as Florida law requires.

10. HOW LONG WE KEEP YOUR INFORMATION

We keep information for as long as we need it, and no longer than that. Most of your records are held in Mindbody, which applies its own retention periods in addition to ours.

Booking and purchase records, and balances owed to us: [CONFIRM with the studio's accountant: the period required for Florida tax and accounting purposes, generally seven years]

Contact details and communication history: for as long as you remain an active client, and for a reasonable period afterwards so we can answer questions about past classes

Class attendance records: for as long as you remain an active client and for a reasonable period afterwards

Analytics and advertising data: for the retention periods set by our providers, after which it is deleted or aggregated

Records needed to demonstrate that you exercised a privacy right: for the period required to show we complied

Records of marketing consent, including text message consent: for as long as you receive marketing from us, and for a reasonable period after you opt out, so we can prove we had your permission

11. CHANGES TO THIS POLICY

We may update this policy as the studio, our website, or the law changes. The date at the top tells you when we last revised it. If we make a change that affects your rights materially, we will tell you by email or by a notice on our website before the change takes effect.

12. HOW TO CONTACT US

Daily Flows, LLC

3091 SW 22nd St, Coral Gables, FL 33145, USA

Email: hello@dailyflowstudio.com

Website: https://www.dailyflowstudio.com

Instagram: https://www.instagram.com/dailyflowstudio/

If you have a question about this policy, or about our handling of your information, we would like to hear from you. Write to us and a member of the team will get back to you.

For information Mindbody holds about you, you can also contact Mindbody directly at privacy@mindbodyonline.com, or write to MINDBODY, Inc., 689 Tank Farm Road, Suite 230, San Luis Obispo, CA 93401.