Privacy Policy

Who we are

Heat Lagos is an infrared Pilates, yoga and recovery studio in Lagos, Portugal. In this policy "we", "us" and "Heat Lagos" mean the studio operating heatlagos.com. We are the data controller for the personal data described here. You can reach us any time at hello@heatlagos.com.

The short version

• We collect the minimum we need to answer you, take a booking, and understand how the website is used.
• If you message us on Instagram or Facebook, we receive your message and profile name so we can reply, sometimes with the help of an automated assistant.
• We never sell your personal data.
• You can ask us to show you, correct, or delete your data at any time. See Your rights and data deletion below.

Information we collect

When you visit the website. Like most sites, we use analytics (Google Tag Manager and Google Analytics) to count visits and see which pages are useful. This involves cookies and basic technical data such as your approximate location, device, browser and the pages you view. It is not used to identify you personally.

When you contact us. If you email us, message us, or fill in a form, we receive what you choose to send: typically your name, email or phone number, and your message.

When you message us on Instagram or Facebook. If you send a direct message or comment to the Heat Lagos accounts, Meta passes us the content of your message and your public profile name and picture so we can read and respond. We use this only to answer your question and help you book or visit the studio.

When you book a class.Bookings and payments are handled by our scheduling provider (Bsport). Any details you enter there are governed by that provider's own privacy policy.

How we use your information

• To reply to your questions and messages.
• To take and manage class bookings and memberships.
• To keep the website working and improve it.
• To meet our legal and tax obligations.

Our legal bases under the GDPR are your consent (for example, analytics cookies and replying to a message you sent us), the performance of a contract (managing a booking you make), and our legitimate interest in running and improving the studio.

Messaging and automation on Instagram and Facebook

To answer common questions quickly (opening hours, prices, how to book), we use an automated assistant that can read incoming messages to the Heat Lagos Instagram and Facebook accounts and draft or send replies. A human at the studio can step in at any point.

• We access only the conversations people start with us. We do not read your private messages with anyone else, and we do not post on your behalf.
• Message content is used solely to respond to you. It is not used for advertising and is not sold.
• The assistant is provided by Anthropic (the Claude AI service), which processes the message text to generate a reply and does not use it to train its models.
• This processing relies on the messaging permissions granted by Meta and is governed by Meta's Platform Terms in addition to this policy.

Who we share data with

We use a small number of trusted service providers, who only process data on our behalf:

• Meta (Instagram and Facebook) — for the messages you send us.
• Google — website analytics (Tag Manager, Analytics).
• Bsport — class scheduling, bookings and payments.
• Cloudflare — hosting and delivery of the website.
• Anthropic — the AI assistant that helps draft replies to messages.

We do not sell your personal data. We only disclose it otherwise if the law requires it.

How long we keep it

We keep information only as long as we need it: message threads for as long as needed to help you and for a reasonable period afterwards, booking records for as long as required for accounting and tax, and analytics data for a limited retention window. When data is no longer needed, we delete it.

Your rights and data deletion

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its use, and to withdraw consent at any time. You also have the right to complain to the Portuguese data protection authority (CNPD).

To request deletion of your data — including any message history we hold from Instagram or Facebook — email hello@heatlagos.comwith the subject "Delete my data" and tell us which account or handle you messaged us from. We will confirm and complete the deletion within 30 days. There is no charge.

You can also remove our access to your Instagram or Facebook data at any time from the "Apps and Websites" settings in your Meta account.

International transfers

Some of our providers are based outside the European Economic Area. Where that is the case, they rely on safeguards approved under the GDPR (such as Standard Contractual Clauses) to protect your data.

Children

Our services are intended for adults. We do not knowingly collect data from children under 16. If you believe a child has contacted us, please let us know and we will delete the information.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be highlighted on this page.

Contact

Questions about your privacy or this policy? Email hello@heatlagos.com and we will get back to you.