Privacy policy.
This is the studio's plain-language statement on what we collect, why, and how long we hold onto it.
Who we are.
"Kelvio", "the studio", "we", and "us" all refer to Kelvio Wellness Sdn. Bhd. (Reg. No. 1342156-V), operating at Lot 12-G, Plaza Damai, Jalan Kiara 5, Mont Kiara, 50480 Kuala Lumpur, Malaysia. We're the controller of any personal data you share with us through the website, the booking system, or in person at the studio.
What we collect.
- Identity & contact details — your name, email address, phone number, and (for paid passes) your billing address.
- Health basics for class safety — when you book a class, we ask whether you have any existing injuries or medical conditions a teacher should know about. This is voluntary, kept on a member-only record, and shared only with the teacher of any class you attend.
- Booking history — which classes you've attended, when, and any cancellations.
- Payment metadata — confirmation that a payment cleared, the last four digits of the card, and the transaction reference. We do not store full card numbers; those live with our payment processor.
- Website cookies — see our separate cookie policy for the full breakdown.
Why we collect it.
Two reasons, both narrow:
- To run a yoga studio — that means booking your classes, taking payment, and giving teachers the safety information they need to teach you well.
- To answer your questions when you write in. The contact form data is used solely to reply to the message you've sent.
We do not sell, rent, or trade your data. We do not use it to build advertising profiles. We do not pass it to insurance, lifestyle or wellness brands.
How long we hold it.
- Active member records: as long as the membership is active, plus 24 months for tax purposes.
- Contact form messages: 6 months from the date of the message.
- Payment metadata: 7 years (Malaysian tax law minimum).
- Cookies: see the cookie policy for individual lifetimes.
Where it lives.
Active member records sit on our booking system (a regional service hosted in Singapore). Backups are encrypted and held for 30 days. Email correspondence sits with our email provider. Payment processing happens via a PCI-DSS compliant gateway; we never see the card details.
Your rights.
Under the Personal Data Protection Act 2010 (Malaysia), you can:
- Request a copy of the data we hold about you
- Ask us to correct anything that's wrong
- Ask us to delete your record (subject to the tax-law minimum above)
- Withdraw consent for non-essential cookies at any time
Email hello@kelvio.pro with your request and we'll respond within 14 working days, usually faster.
Children.
The studio doesn't accept members under 16. We do not knowingly collect data from anyone under 16.
Changes to this policy.
If we update this policy, we'll change the "last updated" date at the top and email active members about any material change at least 30 days in advance.