Privacy Policy

Zen Studios operates this website at https://www.zenstudios.my (Malaysia). This privacy policy explains how we handle your information when you use our website, book with us, or manage the studio. Questions? Email hello@zenstudios.my.

We use encrypted connections, access controls, and secure server storage to protect personal information. Where you connect optional services such as Google Calendar, those credentials are stored securely on our servers and are not exposed in the browser.

We use essential cookies to keep you signed in, remember preferences, and protect the service. You can control non-essential cookies in your browser settings, but some features may not work if essential cookies are disabled.

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Continued use of the service after an update means you accept the revised policy.

For privacy questions or data requests, email hello@zenstudios.my. We may ask you to verify your identity before responding.

When you sign up or book with us, we may collect your name, email address, phone number, profile details, class and session bookings, purchase history, waiver information, and messages you send to us. We also collect basic technical data (such as IP address and browser type) in server logs for security.

We use your information to manage your account, process bookings and payments, send schedule updates, provide support, and run Zen Studios's services. We do not sell your personal information.

If you choose to sign in with Google, Zen Studios receives your Google account name and email address from Google only to authenticate you and create or access your account. We do not use Google sign-in data for advertising, and we do not access other Google account data unless you separately connect an integration such as Google Calendar in the admin area.

We keep your information while your account is active and as needed to provide services, handle disputes, and meet legal requirements. If you ask us to delete your data, we will do so unless we must retain it for legal or security reasons.

You can update your profile in the member area. Depending on where you live, you may also have rights to access, correct, or delete your information. To make a request, email hello@zenstudios.my.

Our services are not directed to children under 13. If you believe a child has given us personal information, contact us and we will take steps to delete it.

If you manage the studio, you can connect third-party services in Admin → Settings → Integrations. This section explains what those integrations access and how you control them. Members and clients do not need to read this section.

When you connect Google Calendar, we access your Google account only for the purposes you approve on Google's consent screen. We read your calendar list so you can choose which calendar receives events. We create, update, and delete events on that calendar when schedule sync is enabled. Sync is one-way: Zen Studios's schedule is written to Google Calendar — we do not change your schedule based on edits you make in Google Calendar. OAuth tokens are stored securely on our servers and are not shared with third parties. You can stop sync or disconnect at any time in Integrations; disconnecting revokes our access and may remove synced events from Google Calendar.

You may also connect services such as Stripe (payments), Zoom (livestream), and similar tools. Each integration only receives the information needed to work. You can review and disconnect integrations from Admin → Settings → Integrations.

You can disconnect any integration at any time from admin settings. For questions about how we store integration credentials or handle management account data, email hello@zenstudios.my.