Privacy Policy

1. Who is responsible

2. Data we collect

Depending on your interaction with Glow, we may collect:

• Identification and contact details: name, email address, phone number, postal address, date of birth, and emergency contact details if provided.
• Booking and attendance data: booking history, cancellations and class participation.
• Purchase data: products and memberships purchased, invoices and payment status.
• Communications: correspondence history with Glow.
• Health information: information you voluntarily share regarding injuries, pregnancy, physical limitations, or class preferences where relevant to safe participation.
• Website usage data: information about how you interact with our website, where applicable.

3. Why we process your data

We process personal data in order to:

• Manage bookings, memberships, class packs, private sessions, workshops and events.
• Process payments and issue invoices.
• Communicate about bookings, reminders, schedule changes and important studio information.
• Support safe participation in classes.
• Improve our services, website and customer experience.
• Comply with legal, accounting, tax and administrative obligations.
• Organise retreat stays, including coordinating with venue and hotel partners for accommodation, dietary needs, and guest safety.

4. Platforms and service providers

Glow uses third-party service providers to operate its business:

• Bsport: class bookings, scheduling, class packs, and client management. Bsport also handles its own payment processing for class-related purchases.
• Stripe: direct payment processing for retreat bookings and other purchases made through the Glow website. Glow does not store payment card details.
• Cloudflare: website hosting (Workers), content delivery, bot protection (Turnstile), and cookieless web analytics.
• Resend: transactional email delivery for booking confirmations, retreat communications, and notifications.
• Sanity: content management system for website content.
• OpenStreetMap: displays the studio location map on the homepage. The map loads only after user action (clicking "Load map"). When the map loads, your browser contacts OpenStreetMap servers, which receive your IP address, browser/device type, and the page URL. Personal data is stored in the United Kingdom and the Netherlands; map tiles are served through a global caching network. OSM Privacy Policy.

These providers process personal data on Glow's behalf or as independent providers where relevant to delivering the service.

5. International data transfers

Certain service providers may process data outside Switzerland and the EU/EEA:

• Cloudflare: United States (EU-US Data Privacy Framework certified)
• Bsport: France / EU
• Resend: United States
• Stripe: United States / EU
• Sanity: Norway / EU
• OpenStreetMap Foundation: United Kingdom / Netherlands (personal data); global caching network (map tiles)

All transfers are protected by appropriate mechanisms under Swiss and EU data protection law.

6. Payments

Glow does not store full payment card details on its own systems. Two payment paths are used:

• Class bookings and packs: payments are processed by Bsport through its own checkout system. Glow does not handle or store payment card data for class purchases.
• Retreat bookings: payments are processed directly by Stripe.

7. Health information

Please do not enter health information or other sensitive personal data in booking comments or platform profile fields. If you need to discuss physical limitations or class modifications, contact us directly by email or in person at the studio.

Retreat registration forms may collect health-related information (dietary requirements, mobility needs, medical conditions) where relevant to your safety and comfort. This data is collected only with your explicit consent. Your consent and its timestamp are recorded.

Health data collected for retreats may be shared with the retreat venue or hotel partner solely for accommodation and coordination purposes.

8. Retreat registrations

When you register for a Glow retreat, we collect additional information necessary for organising your stay, which may include:

• Dietary requirements and food allergies
• Mobility needs or physical limitations
• Emergency contact details
• Accommodation preferences

This information is collected with your explicit consent at the time of registration. Your consent and its timestamp are recorded.

We share relevant registration details with the retreat venue or hotel partner solely for the purpose of coordinating your accommodation and ensuring your safety and comfort. We do not share your data with any other third parties for this purpose.

9. Cookies and similar technologies

Glow's website uses minimal cookies and similar technologies, limited to what is necessary for the site to function:

• Essential cookies: a staff authentication cookie (staff_token) is used solely for administrative access to the studio dashboard. It is not set for public visitors. (HttpOnly, Secure, 24-hour expiry)
• Security: Cloudflare Turnstile is used for bot detection on forms. It does not set persistent cookies.
• Local storage: a banner dismissal preference is stored locally in your browser to avoid showing the same notification repeatedly (7-day duration, non-tracking).
• Third-party widgets: the Bsport booking widget embedded on the schedule page may set its own functional cookies for session management. These are governed by Bsport's own privacy policy.

Glow does not use analytics cookies, advertising cookies, or tracking pixels.

You can manage cookies through your browser settings at any time.

10. How long we keep data

Glow keeps personal data only for as long as reasonably necessary for the relevant purpose, and as required for legal, tax, accounting, or record-keeping obligations. Data related to a membership or purchase is kept for the duration of the contractual relationship, then for the period required by Swiss legal obligations (including the 10-year accounting retention period under the Swiss Code of Obligations).

11. Your rights

Under the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data, where the legal conditions are met.
• Object to or restrict certain processing activities.
• Request data portability.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at the address above. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

12. Updates

Glow may update this Privacy Policy from time to time. The latest version will be published on the website and/or made available through the booking flow.

Contact

If you have any questions about this policy or how we handle your data: