Subscription and service terms for Class Booking

Last updated: 15 April 2026

These terms govern the relationship between Class Booking (operated by Nahbo ApS) and your studio as a customer. The document covers both your ongoing subscription to the platform and any consultancy or professional services you purchase from us. Please pay particular attention to section 5 (Professional services) and section 10 (Data Processing Agreement / GDPR).

1. Introduction and parties

These terms (the "Terms") form a binding agreement between you, acting on behalf of your yoga, fitness or wellness studio (the "Customer", "you" or "your studio"), and Class Booking ("we", "us" or "the platform").

Class Booking is a Software-as-a-Service platform operated from Denmark that provides booking and administration software for yoga, fitness and wellness studios worldwide. Class Booking is the English-language version of Holdstyring, our Danish-language sister product. By creating an account you accept these Terms in their entirety.

In the event of a conflict between these Terms and a specific written order confirmation signed by both parties, the order confirmation prevails.

2. Definitions

• Provider: Nahbo ApS, Danish company registration number (CVR) 45880583, the legal entity operating Class Booking.
• Customer: The legal entity or individual entering into an agreement with the Provider for use of the Platform and/or Professional Services.
• Platform: The web-based software at class-booking.com, including associated apps, integrations and subdomains.
• Subscription: The Customer's ongoing right of access to the Platform against payment of the agreed subscription fee.
• Professional Services: Consultancy and service work over and above what is included in the Subscription, including implementation, data migration, customisation, training and ongoing support.
• End Customer: The natural person (e.g. student, member, client) who books or purchases services from the Customer through the Platform.

3. Scope and functionality of the service

Class Booking is a cloud-based SaaS solution that provides your studio with access to the following core capabilities:

3.1 Booking and class management

• Online booking calendar with real-time updates
• Class templates and recurring schedules
• Waiting lists with automatic promotion when seats free up
• Instructor management and substitute handling
• Room and capacity management

3.2 Payment products

• Card payments processed via Stripe
• Class passes (punch cards) with automatic deduction per booking
• Monthly and annual memberships
• Gift cards with personalised messages
• Corporate agreements with discounts

3.3 Communication and marketing

• Automated booking confirmations and reminders
• Newsletter module
• Blog functionality
• Contact forms

3.4 Branding and customisation

• Your own subdomain ([studio-name].class-booking.com)
• Option to use your own custom domain with SSL certificate
• Full branding with logo, colours and templates
• Customisation of landing pages and content

The Provider reserves the right to develop and change functionality over time. Material changes that reduce functionality compared to what was agreed will be communicated with at least 30 days' notice.

4. Subscriptions and pricing

4.1 Subscription tiers

We offer the following subscription tiers (prices exclude VAT):

• Basic (€15 / £12 / $19/month): 1 instructor, up to 6 classes per week, custom domain and branding.
• Pro (€55 / £45 / $59/month): Up to 5 instructors, up to 25 classes per week, memberships and gift cards.
• Studio (€110 / £89 / $119/month): Unlimited instructors and classes, multiple locations, dedicated support.

VAT may be added on top depending on your jurisdiction and VAT registration status. Reverse-charge rules are applied where applicable for EU B2B customers outside Denmark. Current pricing and features are always available at class-booking.com/pricing.

4.2 Free trial

New customers are offered a 14-day free trial with full access to all features. No payment details are required to start the trial. After the trial ends, an active paid subscription is required to continue using the Platform.

4.3 Payment

Subscription fees are charged in advance for the agreed billing period (monthly or annually) via Stripe. If payment fails, access is suspended after a 7-day grace period. Customer data is then retained for a further 30 days, after which the account and all associated data are permanently deleted, see section 8.

4.4 Price changes

We reserve the right to change prices with 60 days' written notice, taking effect at the end of a billing period. Existing customers are informed by email and may terminate before the price change takes effect.

4.5 Free onboarding hours

All new customers receive up to 2 hours of free onboarding assistance within the first 90 days after the Subscription starts. Onboarding may include:

• Data migration from your existing system
• Set-up of classes, locations and instructors
• Basic training in the Platform's features

Unused onboarding hours cannot be carried forward to later periods or converted into a discount. Any work beyond the 2 free hours is billed as Professional Services, see section 5.

5. Professional services

5.1 Scope and ordering

Professional Services are delivered under separate engagement. Each engagement is confirmed in writing (email is sufficient) and specifies:

• A description of the work
• An estimated time spend or a fixed price
• Expected delivery date
• Any prerequisites that the Customer must provide

5.2 Pricing and invoicing

Professional Services are invoiced either at a fixed price or on a time-and-materials basis. Hourly work is rounded up in 15-minute increments, with a minimum charge of 15 minutes per request. The applicable hourly rate is stated in the order confirmation. All prices exclude VAT.

Invoices are issued upon delivery with a 14-day payment term, unless agreed otherwise. Late payments accrue interest at the statutory rate under Danish law.

5.3 Support retainers

The Customer may purchase an ongoing support retainer with a fixed monthly allocation of hours. Unused hours do not roll over to the following month. Retainers may be cancelled by either party with 30 days' notice to the end of a calendar month.

5.4 Out-of-scope work

Work that falls outside the agreed scope will only commence after the Customer's written approval. The Provider will inform the Customer as soon as it becomes clear that a task will require materially more time than originally estimated.

6. Customer obligations

For the Provider to deliver the Platform and Professional Services as agreed, the Customer must:

• Provide necessary information, data and access in a timely manner
• Designate a contact person with decision-making authority
• Ensure that its own systems and data comply with applicable law, including GDPR
• Keep login credentials secure and not share administrator access with unauthorised persons
• Use the Platform for lawful purposes and respect third-party rights
• Ensure that End Customers are informed about the processing of their personal data through the Customer's own privacy policy

Delays or errors caused by the Customer's failure to meet the above are not the Provider's responsibility and may result in additional cost, billed as Professional Services.

7. Payment processing and allocation of responsibility

7.1 Payment methods

Class Booking uses Stripe as the payment processor for transactions between your studio and your End Customers, as well as for billing your studio for its own Subscription. Stripe handles all card and payment data in accordance with applicable security standards (PCI DSS Level 1). Class Booking itself does not store full card details. EU Strong Customer Authentication (SCA) and 3D Secure are handled by Stripe in accordance with PSD2.

Payouts to your studio's bank account are made by Stripe according to the payout schedule configured in your Stripe account.

7.2 Allocation of responsibility

• Your studio is the seller of record vis-à-vis your End Customers and is responsible for delivery of services, VAT/sales tax handling and customer service.
• Class Booking provides the technical platform and the payment integration but is not a party to the transaction between you and your End Customers.
• Stripe is the regulated payment processor and operates under its own terms with you and with us.

7.3 VAT and other taxes

Your studio is responsible for correctly handling VAT, sales tax and any other transaction taxes on sales to End Customers. Class Booking can be configured to calculate VAT automatically, but you bear full responsibility for compliance with the tax rules applicable in your jurisdiction, including any special rules for educational or wellness services.

8. Termination

8.1 Termination by the Customer

You may terminate your Subscription at any time from the admin panel or by contacting us. Termination takes effect at the end of the current billing period. There is no minimum commitment, and you do not pay for periods after termination.

8.2 Termination by Class Booking

We may terminate the agreement on 30 days' notice. In the event of material breach (including unlawful use, persistent non-payment or breach of these Terms), we may terminate with immediate effect.

8.3 Effects of termination

• You retain the right to export your data for up to 30 days after termination.
• All Customer data is deleted after 30 days, unless statutory law requires longer retention.
• Existing bookings, memberships and class passes held by your End Customers must be honoured or refunded by you.
• Ongoing Professional Services are either completed or invoiced on a time-and-materials basis up to the termination date.

9. Confidentiality

Each party undertakes to treat confidential information received from the other party with the same degree of care as its own confidential information, and not to disclose it or use it for any purpose other than performing this agreement. The obligation applies for the term of the agreement and for 2 years thereafter.

The confidentiality obligation does not cover information that: (a) is in the public domain without breach of this agreement, (b) the receiving party already lawfully possesses, or (c) must be disclosed pursuant to a court order or other binding requirement of a competent authority.

10. Data Processing Agreement (DPA)

This section constitutes a Data Processing Agreement pursuant to Article 28 of the EU General Data Protection Regulation (GDPR) and forms an integral part of these Terms.

10.1 Roles and definitions

With respect to personal data about your End Customers, your studio is the data controller and Class Booking acts as data processor on your behalf.

• Data controller (you): Determines the purposes and means of processing customer data.
• Data processor (Class Booking): Processes data only on your documented instructions.

10.2 Subject matter and duration of processing

10.3 Obligations of the data processor

Class Booking undertakes to:

• Process personal data only on your documented instructions, including with regard to transfers to third countries.
• Ensure that persons authorised to process the data are bound by an appropriate duty of confidentiality.
• Implement all necessary security measures pursuant to GDPR Article 32.
• Comply with the conditions for engaging sub-processors (see section 10.5).
• Assist you in responding to requests from data subjects exercising their rights under the GDPR.
• Assist you with compliance with Articles 32 to 36 (security, breaches, impact assessments, prior consultation).
• At your choice, delete or return all personal data at the end of the services.
• Make available all information necessary to demonstrate compliance, and allow for reasonable audits.

10.4 Security measures

Class Booking implements the following technical and organisational measures:

Encryption:

• In transit: TLS 1.3 for all connections.
• Passwords: bcrypt with cost factor 12.
• Payment data: handled exclusively by Stripe; we never store full card numbers.
• Backups: AES-256 encryption of all backup files.

Access control:

• Role-based access control (RBAC) with roles: Admin, Instructor, Customer.
• Automatic session timeout after 30 days of inactivity.
• Audit logging of administrative actions.

Application security:

• SQL injection protection via the Prisma ORM (parameterised queries).
• XSS protection via React's automatic output escaping.
• CSRF protection via NextAuth tokens.
• Rate limiting to mitigate brute-force attacks.

Backup and recovery:

• Daily automated backups.
• 30-day retention.
• Encrypted storage in the EU (Hetzner, Germany).
• Recovery Time Objective (RTO): 4 hours.
• Recovery Point Objective (RPO): 24 hours.

Physical and infrastructure security:

• ISO 27001-certified data centre (Hetzner, Germany).
• DDoS protection via Hetzner.
• Firewalls and network segmentation.
• Regular security patching and updates.

10.5 Sub-processors

You hereby grant general authorisation for the use of sub-processors. Class Booking will inform you of any intended addition or replacement of sub-processors and give you a reasonable opportunity to object.

Current sub-processors:

10.6 Transfers to third countries

Customer data is primarily stored in the EU (Germany). Any transfer to a third country outside the EU/EEA is made only on the basis of an appropriate transfer mechanism: an adequacy decision by the European Commission, the EU-US Data Privacy Framework (where applicable), or the European Commission's Standard Contractual Clauses (SCCs), supplemented by additional technical and organisational measures where required.

10.7 Personal data breaches

In the event of a personal data breach, Class Booking will notify you without undue delay and in any event within 72 hours after becoming aware of the breach, in accordance with GDPR Article 33. The notification will describe the nature of the breach, the contact point for further information, the likely consequences and the measures taken or proposed to address it and mitigate harm.

10.8 Audits

You have the right to audit Class Booking's compliance with this DPA, either yourself or through an independent third-party auditor bound by appropriate confidentiality obligations. Audits are arranged with at least 14 days' written notice and conducted in a way that minimises disruption to operations. Where available, Class Booking may satisfy audit obligations by providing recent third-party certifications or audit reports.

10.9 Your responsibilities as data controller

As data controller, you are responsible for:

• Having a valid legal basis for the processing (consent, contract, legitimate interest etc.).
• Informing your End Customers about the processing through your own privacy policy.
• Handling requests from data subjects (access, deletion, rectification, portability etc.).
• Assessing whether a Data Protection Impact Assessment (DPIA) is required.

11. Availability and support

11.1 Uptime

We aim for high availability and monitor the Platform around the clock. Planned maintenance is announced at least 24 hours in advance and, wherever practical, performed outside normal business hours.

In the event of a critical incident, affected customers are notified by email and/or via the admin panel. Current operational status can also be obtained on request to support.

11.2 Support

Standard support is provided by email on business days as part of the Subscription. Studio-tier customers receive priority support with shorter response times. Consultancy work, larger customisations and dedicated advisory work are billed as Professional Services, see section 5.

12. Liability

12.1 The Provider's liability

The Provider strives for high availability and strong data security but does not warrant uninterrupted operation. The Provider is not liable for losses caused by:

• The Customer's own acts or omissions, including incorrect use of the Platform.
• Force majeure, including power failures, internet outages, natural disasters and cyber attacks.
• Loss of data that the Customer has not separately backed up where required.
• Losses caused by third-party providers (Stripe, hosting, etc.).

12.2 Cap on liability

The Provider's total aggregate liability under or in connection with these Terms is, in all cases, limited to the amount the Customer has paid to the Provider in the 12 months preceding the event giving rise to the claim. The Provider is not liable for indirect or consequential losses, loss of business, loss of data beyond restoration from the most recent backup, or loss of profits.

The cap on liability does not apply in cases of intent or gross negligence, or where liability cannot be limited under mandatory law.

12.3 The Customer's liability

You are responsible for lawful use of the Platform, including compliance with marketing, consumer-protection and data-protection law in relation to your End Customers.

13. Intellectual property

All rights to the Platform, including source code, design, documentation and trademarks, belong to the Provider. The Customer is granted a non-exclusive, non-transferable right to use the Platform for the duration of the Subscription.

For Professional Services the following applies: generic components, tools and methods developed by the Provider remain the property of the Provider, regardless of whether they are used in deliverables to the Customer. Customer-specific configuration and content (logo, copy, images, data etc.) belongs to the Customer.

14. Changes to these terms

The Provider may amend these Terms with 30 days' written notice. Material changes are announced with 60 days' notice. Notice is given by email to the Customer's registered contact address and/or via a notice in the admin panel.

Continued use of the Platform after the notice period is treated as acceptance of the updated Terms. If you do not agree to the changes, you may terminate the Subscription before they take effect.

15. Governing law and venue

These Terms are governed by the laws of Denmark, without regard to its conflict-of-laws rules. The parties will seek to resolve any dispute amicably. If no resolution is reached, the dispute shall be settled by the Danish ordinary courts, with the City Court of Copenhagen (Københavns Byret) as the court of first instance.

Where applicable, mandatory consumer-protection law in the Customer's country of establishment may grant additional rights that cannot be waived by contract; this clause does not affect those rights.

16. Contact