Barressential Privacy Policy
Who We Are
Barressential (Private) Limited operates Reformer, Barre & Mat Pilates Studios in Colombo and Weligama, Sri Lanka. This Privacy Policy explains how we collect, use, and protect personal information stored in our Customer Relationship Management (CRM) system, which is used across all Barressential locations.
Information We Collect in the CRM
We collect and store the following categories of data:
- Client Data Name, email, phone number, payment details, attendance records, health notes, and personal preferences.
- Membership & Booking Data Class schedules, package purchases, cancellations, renewals, and related service usage.
- Communication Data Messages, notifications, and preferences for receiving updates.
- Analytics Data Information used for reporting, such as retention rates, sales trends, and service usage patterns.
How We Use CRM Data
We use CRM data for the following purposes:
- To manage bookings, memberships, and attendance.
- To process payments and provide customer support.
- To communicate with clients about services, schedules, and promotions.
- To conduct analytics and reporting to improve operations and client retention.
Processing is carried out in accordance with any contracts, compliance obligations, legitimate business interests, or explicit consent, as relevant.
Sharing of CRM Data
We may share CRM data with trusted third parties who provide:
- Payment processing services.
- Email marketing and communication tools.
- Cloud hosting and CRM infrastructure.
These third parties are only permitted to use your data to provide services to us. We do not sell your information or share anonymized data for marketing purposes.
We may also share information with regulators or public authorities, where legally required to do so, with our professional advisers, such as lawyers and auditors, and with prospective buyers or investors in connection with a business transaction.
Security & Retention
We protect CRM data through:
- Encryption of sensitive information.
- Restricted staff access based on role.
- Regular backups and secure storage.
Client records are retained only as long as necessary to achieve the purposes described in this Policy or as required by law, i.e., to meet legal, accounting, or regulatory obligations. Once data is no longer needed, it will be securely deleted or anonymized.
International Transfers
Because we work with global service providers, your personal data may be transferred outside Sri Lanka. When we transfer personal data internationally, we implement adequate safeguards, such as contractual agreements and technical protections [aj1] designed to ensure your information remains secure. By using our services, you acknowledge that while we implement technical and contractual protections, your data may be subject to the laws of the jurisdictions where it is stored.
Legal Framework
This Policy is governed by the laws of Sri Lanka, including the Personal Data Protection Act, No. 9 of 2022 as amended (“PDPA”). We are committed to upholding best practices in data protection. Nothing in this Policy limits your rights under applicable mandatory data protection laws.
Your Rights
Under the PDPA you have the right to:
- Request a copy of the personal data we hold about you.
- Request correction, deletion, or export of your CRM data.
- Object to certain forms of processing.
- Withdraw consent as applicable
- File complaints to the relevant Authority.
Requests can be made via our business email at hello@barressential.com. We may need to verify your identity before acting on your request, and we will respond within the time limits required by the applicable law.
Changes to the policy
This Policy may be amended from time to time to reflect changes in law, technology, and our practices. When material changes are made, an updated version of the Privacy Policy will be posted on this page. Where legally required, such updates may also be communicated through additional means. Continued engagement with our services shall be deemed to be an acknowledgment of this Privacy Policy, and users are encouraged to review it periodically to remain informed of our data processing and protection practices.
Last updated: 15th January 2026
Contact
FAO: Data Controller: hello@barressential.com
Barressential (Private) Limited
514/3, Thimbirigasyaya Road,
Colombo 5
Sri Lanka
.png){kind=logo}
Have questions? Give us a call! 
Back to Log In