Privacy Policy
Effective Date: January 11, 2025Sutra Fitness, Inc., doing business as Arketa ("Arketa," "we," "us," or "our"), provides an online platform that enables fitness instructors to host classes, offer on-demand content, and engage with customers. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, retain, and protect your personal data when you interact with our services, including our website (www.arketa.com), branded website widgets (app.arketa.co), Arketa mobile app ("App"), branded mobile apps ("Branded App"), and other interactions with us (collectively, our "Services").This policy applies to personal data collected through our Services but does not cover information about employees or contractors. If you book a fitness class through a third-party platform using our technology, this policy applies only to data we directly collect.1. Personal Data We CollectWe collect personal data in the following ways:A. Data You Provide to UsRegistration: When you create an account, we collect your name, email address, physical address, username, password, and billing information (e.g., payment card details, processed via third-party payment processors like Stripe).Communications: If you contact us via email, forms, or other methods, we collect your name, email address, phone number, or other data you provide. If you subscribe to newsletters, we collect your email address.Fitness Partner Interactions: When you book classes or engage with fitness partners through our Services, we may collect data about your bookings, attendance, or preferences.Job Applications: If you apply for a job, we collect your name, contact details, demographic information, education, work history, and other data you submit. We may also collect background check data via third-party providers.B. Data Collected AutomaticallyDevice and Usage Data: We collect data about your device, including IP address, browser type, operating system, referring/exit pages, date/time stamps, and clickstream data, using web logs and analytics tools.Geolocation Data: With your consent, our App may collect precise geolocation data to enhance Services (e.g., finding nearby classes). You can disable this in your device settings, but some features may be limited.Cookies and Similar Technologies: We use cookies, scripts, and similar tools to recognize you, personalize your experience, analyze usage, and deliver ads. We use Google Analytics to track website activity. For details, see our Cookie Policy below.Advertising Data: Our advertising partners may collect data about your browsing activity across websites to deliver interest-based ads.C. Data from Third PartiesReferrals: Other users may provide your name and contact details to refer you to our Services.Fitness Partners: Partners may share data about your class attendance, communications, or transaction history.Payment Processors: We receive transaction confirmations (not payment card details) from processors like Stripe.Background Checks: For job applicants, we may receive data from references or background check providers.2. How We Use Your Personal DataWe use your personal data for the following purposes:Provide and Improve Services: To manage accounts, process transactions, deliver classes, personalize experiences, and enhance our Services.Communicate: To respond to inquiries, provide support, send service-related notices (e.g., account updates), or send promotional emails (with your consent or opt-out options).Analytics and Research: To analyze usage patterns, improve functionality, and develop new features.Marketing: To send you updates about our Services or promotions, subject to your preferences.Hiring: To evaluate job applications and communicate with candidates.Legal and Security: To prevent fraud, enforce our Terms of Service, comply with legal obligations, resolve disputes, and protect the safety of users.Other Lawful Purposes: For legitimate business purposes, such as recordkeeping or organizational growth.3. How We Share Your Personal DataWe share personal data as follows:A. Service ProvidersWe share data with third-party service providers who perform functions on our behalf, including:Technology providers (e.g., hosting, email, analytics, data storage).Payment processors (e.g., Stripe, which processes payment data directly; see Stripe’s Privacy Policy).Background check providers for job applicants.These providers are contractually obligated to protect your data and use it only for the services they provide to us.B. Fitness PartnersWe share data with fitness instructors or businesses you interact with through our Services (e.g., class bookings, attendance) to facilitate their operations. These partners are responsible for their own privacy practices.C. Advertising PartnersWe work with advertising networks and analytics providers (e.g., Google Analytics) that use cookies or similar technologies to deliver interest-based ads. These partners may collect or receive data about your browsing activity. You can opt out via the Digital Advertising Alliance (DAA Opt-Out).D. Legal and Regulatory RequirementsWe may share data to comply with legal obligations (e.g., tax or accounting requirements), respond to government requests, or assist in investigations. We may also share data to protect user safety, prevent fraud, or enforce our rights in disputes or litigation.E. Business TransfersIn the event of a merger, acquisition, or sale of assets, we may transfer personal data to the relevant third party, subject to confidentiality obligations.F. Public SharingIf you post comments or content on our Services, that data may be publicly visible.G. With Your ConsentWe may share data for other purposes with your explicit consent.Note: Under CCPA/CPRA, sharing data with advertising partners may constitute a “sale” or “sharing” of personal data. You can opt out of this; see Your Privacy Rights.4. Data RetentionWe retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:Account data is retained while your account is active and for a reasonable period after closure for recordkeeping or legal compliance.Transaction data is kept for financial reporting and tax purposes, typically 7 years.Communications data is retained until you unsubscribe or as needed to resolve inquiries.Job application data is retained for the hiring process and, if required, for legal compliance (e.g., 1-3 years in some jurisdictions).When data is no longer needed, we securely delete or anonymize it.5. Your Privacy RightsDepending on your location, you may have the following rights under GDPR, CCPA/CPRA, or other applicable laws:A. GDPR Rights (EU/EEA Residents)Access: Request a copy of your personal data.Rectification: Correct inaccurate or incomplete data.Erasure: Request deletion of your data, subject to legal exceptions.Restriction: Limit how we process your data in certain cases.Objection: Object to processing for direct marketing or legitimate interests (e.g., analytics).Data Portability: Receive your data in a machine-readable format or have it transferred to another provider.Withdraw Consent: Revoke consent for data processing (e.g., geolocation, marketing) at any time.B. CCPA/CPRA Rights (California Residents)Right to Know: Request details about the categories, sources, purposes, and recipients of your personal data collected, sold, or shared in the past 12 months.Right to Delete: Request deletion of your personal data, subject to exceptions (e.g., legal obligations).Right to Correct: Request correction of inaccurate personal data.Right to Opt-Out of Sale/Sharing: Opt out of the sale or sharing of your personal data for advertising purposes.Right to Limit Use of Sensitive Personal Information: Limit use of sensitive data (e.g., precise geolocation) to what is necessary for providing Services.Non-Discrimination: We will not discriminate against you for exercising these rights.C. How to Exercise Your RightsTo exercise your rights, contact us at privacy@arketa.com or use the form on our website (www.arketa.com/privacy-requests). We will verify your identity (e.g., via email confirmation) and respond within the legally required timeframe (e.g., 30 days for GDPR, 45 days for CCPA/CPRA). If we cannot fulfill your request, we will explain why.D. Opting Out of MarketingEmails: Unsubscribe using the link in promotional emails or update preferences in your account settings.Text Messages: Reply “STOP” to texts from fitness partners or contact them directly.Cookies/Ads: Opt out of interest-based ads via the DAA (optout.aboutads.info) or adjust cookie settings in your browser (see Cookie Policy).E. Device PermissionsYou can revoke access to geolocation or other device data via your mobile device settings, but this may limit some Service features.6. International Data TransfersArketa is based in the United States, and your personal data may be processed in the US or other countries where our service providers operate. For EU/EEA or UK residents, we use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for data transferred outside the EEA/UK. We also implement technical and organizational safeguards, such as encryption and access controls, to protect your data.If you have questions about international data transfers, contact us at privacy@arketa.com.7. Do Not Track SignalsUnder CalOPPA, we are required to disclose how we handle “Do Not Track” (DNT) signals. Our Services do not currently respond to DNT signals from browsers. However, you can manage tracking preferences by:Opting out of interest-based ads via the DAA (optout.aboutads.info).Disabling cookies in your browser settings (see Cookie Policy).Opting out of data sharing for advertising (California residents; see Your Privacy Rights).8. Children’s PrivacyOur Services are not directed to children under 13 (or 16 in some jurisdictions, per GDPR). We do not knowingly collect personal data from children under these ages. If we learn that we have collected such data, we will delete it promptly. If you believe we have data from a child, contact us at privacy@arketa.com.9. Third-Party Websites and ServicesOur Services may link to or integrate with third-party websites or services (e.g., fitness partners, payment processors, social media). We are not responsible for their privacy practices. Review their privacy policies to understand how they handle your data.10. How to Contact UsFor questions, concerns, or to exercise your privacy rights, contact us at:Email: privacy@arketa.comMail: Sutra Fitness, Inc., Attn: Privacy Team, 2 E 28th St, PMB 141, New York City, NY 10016EU/EEA residents may also contact our Data Protection Officer at dpo@arketa.com or lodge a complaint with their local data protection authority.11. Changes to This Privacy PolicyWe may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the updated policy on our website and App with a new effective date. Check this page periodically to stay informed. For significant changes, we may notify you via email or in-app notices.Cookie PolicyWe use cookies and similar technologies (e.g., web beacons, scripts) to enhance your experience, analyze usage, and deliver ads. Types of cookies include:Essential Cookies: Necessary for the operation of our Services (e.g., account login).Analytics Cookies: Track usage patterns (e.g., Google Analytics).Advertising Cookies: Enable interest-based ads by third-party partners.Manage Cookies:Adjust settings in your browser (see www.aboutcookies.org).Opt out of Google Analytics (Google Analytics Opt-Out).Opt out of interest-based ads via the DAA (optout.aboutads.info).Disabling cookies may limit some Service features.