Privacy Policy

Effective date: August 9, 2026 Last updated: August 9, 2026

This Privacy Policy explains how Hartcore LLC ("x2o Studio," "we," "us") collects, uses, and shares information when you visit www.x2ostudio.com, use our mobile app, or interact with us at one of our studios.

1. Information we collect

Information you give us directly

• Name, email address, phone number, and password when you create an account
• Payment card information, which is processed by our payment processor — we do not store full card numbers on our systems
• Emergency contact information
• Health and fitness information you choose to share with us, including injuries, medical conditions, pregnancy, and physical limitations you disclose so our instructors can keep you safe in class
• Class preferences, booking history, and attendance records
• Messages you send us by email, text, or through our website

Information collected automatically when you use our website or app

• IP address, browser type, device type, operating system, and screen size
• Pages you visit on our site, links you click, and the time and duration of your visit
• The website or advertisement that referred you to us
• Cookies and similar technologies, including advertising and analytics identifiers
• Approximate location derived from your IP address; precise location only from our mobile app, and only if you grant permission in your device settings

Information from third parties

• Booking, membership, and payment records from Mariana Tek, our class booking and membership platform
• Aggregated advertising performance data from advertising platforms we use

2. How we use information

• To create and manage your account and process your bookings and payments
• To let instructors know about injuries or conditions you have told us about, so they can adapt instruction safely
• To send you booking confirmations, schedule changes, and account notices
• To send marketing communications, which you can opt out of at any time
• To measure how our website performs and improve it
• To advertise our studios, including showing you ads on other platforms
• To detect fraud, enforce our Terms of Service, and comply with legal obligations

3. Cookies, tracking, and advertising

Our website uses cookies and similar tracking technologies, some of which are operated by third parties. These technologies may collect your IP address, device identifiers, browsing activity on our site, and advertising identifiers, and may transmit that information to the companies that operate them.

We use a tag management system to deploy these technologies. Some of our tags are served from a subdomain of our own website (load.gtm.x2ostudio.com). We want to be clear that although this address belongs to us, tags served from it may transmit information to third-party companies.

We currently work with the following categories of third parties:

For a complete and automatically updated list of the specific cookies used on this site — including their names, providers, purposes, and how long they last — see our Cookie Declaration.

Your choices. When you first visit our site you will see a consent banner. Non-essential cookies — analytics and advertising — will not be set unless you accept them. You can change your choice at any time using the cookie icon in the bottom-left corner of any page. You can also configure your browser to refuse cookies, though some features of the site may not work.

Do Not Track. Some browsers send a "Do Not Track" signal. There is no industry-standard response to this signal. We do not currently respond to Do Not Track signals. We do honor choices you make through our consent banner.

Third-party tracking across sites. Third parties, including advertising and analytics providers, may collect information about your online activities over time and across different websites when you use our site. We do not control their practices. Please review their privacy policies.

Health information and advertising. We do not knowingly transmit health information you share with us — injuries, medical conditions, or pregnancy — to advertising or analytics providers.

4. How we share information

We share personal information only as described here:

• Service providers who perform functions on our behalf — hosting, booking, payment processing, email delivery, consent management, analytics, and advertising. They are contractually limited to using the information to provide services to us.
• Advertising and social media platforms, as described in Section 3, where you have consented to advertising cookies.
• Legal and safety purposes — to comply with law, respond to lawful requests, enforce our agreements, or protect the rights and safety of any person.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction.

We do not sell your personal information for money.

California "Shine the Light." We do not share your personal information with third parties for those third parties' own direct marketing purposes.

5. Your choices and rights

You may at any time:

• Access the information we hold about you
• Correct information that is inaccurate
• Delete your information, subject to records we must keep for legal, tax, or safety reasons
• Opt out of marketing — use the unsubscribe link in any marketing email, reply STOP to any text, or contact us
• Change cookie preferences — use the cookie icon in the bottom-left corner of any page

To make a request, email hi@x2ostudio.com or write to us at Hartcore LLC, PO Box 427, Saratoga, CA 95070. We will respond within 45 days. We may need to verify your identity before acting on a request, which usually means confirming information already associated with your account.

6. How long we keep information

We keep account and booking records for as long as your account is active and for seven years afterward, to handle billing questions, safety and liability matters, and legal obligations. Marketing contact information is kept until you opt out. Analytics and advertising data is retained according to each provider's retention settings.

7. Security

We use technical and organizational measures to protect your information, including encryption in transit for information submitted through our website. Access to personal information is limited to employees who need it for their role. No system is completely secure, and we cannot guarantee absolute security.

8. Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

9. Changes to this policy

If we make material changes we will post the updated policy here with a new effective date, and — for significant changes affecting how we use your information — notify account holders by email at least 30 days before the changes take effect.

10. Contact us

Email: hi@x2ostudio.com Mail: Hartcore LLC, PO Box 427, Saratoga, CA 95070

If you have difficulty accessing this policy in its current format, contact us and we will provide it in an alternative format.