Lithe
Sign inJoin
Lithe Studio

Privacy Policy

Last updated: July 2026

Welcome to Lithe Studio.

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard your information when you use our website, mobile application, studio facilities, or book our services.

1. Information We Collect

We collect personal information necessary to deliver our studio services, process payments, and ensure your safety during classes:

  • Account & Identity Data: Full name, phone number, email address, physical address, date of birth, and emergency contact details provided during registration.
  • Health & Fitness Data: Medical history disclosures, injury/pregnancy notes, and signed liability waivers required before participating in classes.
  • Transaction & Financial Data: Purchase history, active memberships, class pack balances, booking logs, and account balances.
  • Technical & Usage Data: IP address, device identifiers, app activity, and login details collected when using our website or mobile application.

2. How We Use Your Information

Your data is processed exclusively for legitimate business and operational purposes:

  • Managing your account, class bookings, room access, and shop orders.
  • Communicating schedule updates, booking confirmations, or account notifications.
  • Tailoring studio instruction safely based on your disclosed health conditions.
  • Complying with statutory accounting rules, Central Bank of Jordan regulations, and anti-money laundering (AML) requirements.

3. Payment Security & PCI-DSS Compliance

  • Payment Processing: All online payments are handled securely through our authorized payment service provider, MEPS (powered by PayTabs).
  • PCI-DSS Standards: Card processing adheres strictly to international Payment Card Industry Data Security Standards (PCI-DSS).
  • No Storage of Sensitive Card Data: Lithe Studio does not store, handle, or record full credit/debit card numbers, CVV codes, or card passwords on its servers.

4. Data Confidentiality & Sharing

We treat all customer information and account activity with strict confidentiality. We do not sell, rent, or trade your personal data to third parties. Data is shared only under the following conditions:

  • Service Providers: Authorized technical partners (e.g., payment gateways, booking platforms) who process data on our behalf under strict confidentiality obligations.
  • Legal & Regulatory Authorities: Official bodies, law enforcement, or courts in the Hashemite Kingdom of Jordan when required by law, court order, or Central Bank directives.

5. Security & Data Retention

  • Security Controls: We maintain technical and administrative safeguards to protect your personal details against unauthorized access, loss, alteration, or fraudulent misuse.
  • Data Retention: Personal data and transaction records are retained for as long as your account remains active or as required to comply with statutory legal and card network record-keeping rules (e.g., minimum retention of 13 months for transaction evidence).
  • Signed Waivers: Your signed health questionnaire and liability waiver, including the name you typed as your signature, are retained after account closure. A waiver exists to record who accepted the risks of physical activity, so we keep it for the establishment or defence of legal claims.

6. Your Data Rights & Choices

In accordance with applicable privacy standards and payment gateway agreements, you hold the following rights regarding your personal data:

  • Right to Access & Review: You may request access to or a copy of the personal details we hold about you.
  • Right to Correction: You have the right to request the update or correction of any inaccurate or incomplete information.
  • Right to Deletion: You may request the deletion of your personal data or a portion thereof if it is no longer necessary for the purposes for which it was collected or exceeds statutory requirements.
  • Right to Withdraw Consent / Object: You may revoke previously granted consent for personal data processing or sharing at any time in writing, electronically, or orally (where recorded).

You can delete your account yourself at any time from your account settings. Doing so removes your profile, contact details, health notes, notifications and message history, cancels any active membership, and releases your upcoming bookings. Your payment records and any signed waiver are kept for the reasons set out above, separated from your personal details.

To exercise any of these rights, please contact us using the details below.

7. Cookies & Tracking

Our website and mobile app use essential cookies and functional tracking tools to manage user sessions, maintain secure account logins, and analyze app performance. You can adjust your browser settings to block cookies, though some app features may not function properly as a result.

Our sign-up and contact forms are protected by Cloudflare Turnstile, which helps us tell real visitors from automated abuse. Turnstile processes limited technical data for that purpose under the Cloudflare Privacy Policy.

8. Updates to This Policy

We may revise this Privacy Policy periodically to reflect operational, legal, or regulatory updates. Any updates will be published on this page with a revised “Last updated” date. Continued use of our website, app, or studio after updates take effect signifies your acceptance of the revised terms.

9. Contact Information

If you have questions, concerns, or wish to exercise your data privacy rights, please reach out to us: