Privacy Policy
At BAY STUDIOS, your privacy matters to us. This page explains what personal data we collect, why we use it, and what control you have over it.
Who we are
Bay Studios Oy (business ID 2843231-5) is the controller of your personal data. Our address is Kanavaranta 7 C 12, 00160 Helsinki, Finland. For any privacy question, you can contact us at hey@bay-studios.com.
What we collect and why
We collect only the data we need to provide our services: your contact and account details, your bookings and attendance, your payments, the messages you send us, and how you use our websites, online programs and online services. If you take part in one of our online communities, your profile and the content you post there may be visible to other members.
If you choose to share an injury, a pregnancy or another health matter, we rely on your explicit consent and use the information only for the reason you shared it, such as keeping your classes safe or supporting a request you have made (for example adjusting a package or membership). To assess a request like that, we will normally need the relevant details. For your own safety, we also recommend telling your instructor about anything that could affect you in class. If it relates to a complaint, claim or dispute, we may also use the information to establish or defend a legal claim.
Our studios have cameras in shared areas such as entrances, reception and hallways, never in changing rooms. They are used to keep people and property safe.
We use this data to manage your account and bookings, run your classes and online programs, handle payments and memberships, keep our studios safe, improve our services, meet our legal obligations, and, where you have opted in, send you marketing.
Legal bases
We use your personal data on the following legal bases: our contract with you (for bookings, memberships and payments); your consent (for marketing and non-essential cookies); your explicit consent (for any health details you share); our legitimate interests (to support you, keep everyone safe, prevent misuse, operate our cameras and improve our services); and our legal obligations (such as accounting and tax). Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect any processing we carried out before you withdrew it. Some data is necessary to provide our services, and without it we may not be able to serve you.
Where your data comes from
Most of your data comes directly from you. We may also receive booking or payment details from a partner you booked or paid through, such as ClassPass or a benefit provider like ePassi, Smartum or Edenred.
Cookies and messages
Necessary cookies keep the site working and are always on. Other cookies, such as analytics and advertising, load only after you consent, and you can change your choice at any time in our cookie settings. We send marketing only if you have opted in, and you can opt out at any time. Booking confirmations, payment messages and safety updates are not marketing, and we may still send them when needed.
Who we share it with
We share your personal data only with people and providers who help us run BAY STUDIOS, and only as far as they need it for their role.
This includes the people who work with us, such as our instructors, community managers and other contractors or staff, who use your information only to provide and support our services. It also includes the service providers we rely on: our booking system (MindBody), our payment providers (Stripe and benefit partners), the platforms that run our online courses and videos, and the services we use for support, hosting, analytics and marketing. We also share with our professional advisers, and with authorities when the law requires it.
Some of these providers are located outside the EU/EEA, including in the United States. For those transfers we use the safeguards required by European law, such as an adequacy decision (for example the EU-US Data Privacy Framework) or Standard Contractual Clauses.
We do not make automated decisions that significantly affect you. We never sell your personal data.
How long we keep it
We keep personal data only as long as we need it. We keep your account and booking history while you are a customer and for a reasonable period afterwards, in case you return. We keep accounting records for as long as Finnish law requires, which is six to ten years. We keep marketing permissions until you withdraw them. Camera footage is kept only for a limited period and then automatically overwritten. Where data is held in a provider’s system, we action your deletion request through that provider’s process.
Your rights
Under data protection law you have rights over your personal data. You can ask to access it, correct it, delete it, restrict or object to how we use it, receive a copy to transfer elsewhere, or withdraw a consent you have given. To exercise any of these rights, contact us at hey@bay-studios.com. Some rights have limits. We may need to verify your identity, or keep certain information where the law requires it, for example for accounting, safety or a legal claim. You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Children and changes
Our services are primarily intended for adults and may be suitable for young people aged 16 or older. We do not direct our online services at children under 13. Where a minor takes part in our services, we expect a parent or guardian to be involved and to give any consent that is needed.
We may update this policy from time to time. The current version is always available here, with the date shown here below.
Last updated on June 25, 2026