Privacy Policy

Last updated: 9 September 2026

Your privacy matters here. This policy explains what personal data I collect, why, how I protect it, and the rights you have over it. It covers www.breathesculptflow.com.

1. Who is responsible for your data (the controller)

The data controller responsible for the personal data described in this policy is:

Melissa Schuler — Breathe Sculpt Flow

Location: Hamburg, Germany

Contact email: hello@breathesculptflow.com

2. What this policy covers

This policy applies to:

  • My website — breathesculptflow.com

  • The Breathe Sculpt Flow Circle membership community (BSF Circle), hosted on the Circle platform

  • Email communication and newsletters (Flodesk)

  • Bookings, payments, and enquiries related to my offers

Important for community members: When you use BSF Circle, I am the data controller for your activity there, and Circle acts as my data processor. Circle's own privacy policy does not cover what happens inside the BSF community — this policy does. Anything you post, share, or submit inside the community is governed by the terms below.

3. What personal data I collect

From website visitors

  • Contact details you submit through forms (name, email, and anything you write in a message).

  • Booking and enquiry details when you request a clarity call or session.

  • Technical data — IP address, browser type, device information, and how you use the site — collected via cookies and similar technologies (see Section 9).

From email subscribers

  • Your name and email address.

  • Engagement data such as whether you open emails or click links (via Flodesk).

From BSF Circle members & clients

  • Registration and profile information — name, email, profile photo, and anything you add to your profile.

  • Content you create inside the community — posts, comments, replies, reactions, and messages.

  • Participation data — class and event attendance, activity, and login information.

From clients and paying members

  • Booking, session, and programme details.

  • Payment information — processed securely by ThriveCart and Stripe. I do not store your full payment card details; these are handled entirely by my payment processors.

4. How I use your data and my legal basis

Under the GDPR, I must have a lawful basis for using your personal data. Here is how that breaks down:

  • To deliver my services (Legal basis: Contract performance — Art. 6(1)(b) GDPR)Running your membership, coaching, programmes, and bookings; giving you access to BSF Circle; processing payments.

  • To process health and stage information (Legal basis: Explicit Consent — Art. 9(2)(a) GDPR)Processing stage selection data (e.g., pregnant, postpartum) and voluntary community health disclosures to route you to appropriate content and tailor support.

  • To run and improve my business (Legal basis: Legitimate interests — Art. 6(1)(f) GDPR)Responding to enquiries, understanding website and community use to improve services, keeping systems secure. I only rely on legitimate interests where your privacy rights do not override them.

  • To send marketing emails (Legal basis: Consent — Art. 6(1)(a) GDPR)Sending newsletters, offers, and updates by email — only where you have explicitly opted in. You can withdraw consent at any time by clicking "unsubscribe" or emailing hello@breathesculptflow.com.

  • Advertising and retargeting (Legal basis: Consent — Art. 6(1)(a) GDPR)With your consent (given via the cookie banner), Meta and Google place tracking technologies on my site to measure ad performance and display relevant ads. You can decline or withdraw consent at any time via cookie settings.

  • To meet legal obligations (Legal basis: Legal obligation — Art. 6(1)(c) GDPR)Keeping tax, financial, and accounting records as required under German commercial law (HGB/AO).

5. Who I share your data with

I never sell your personal data. I share it only with trusted service providers (processors) who help me run my business, bound by strict Data Processing Agreements (DPAs).

Key service providers

  • Squarespace (Squarespace, Inc., USA) — hosts my website (breathesculptflow.com).

  • Circle (CircleCo, Inc., USA) — hosts the BSF Circle community.

  • ThriveCart & Stripe — process membership and programme payments.

  • Flodesk — sends emails and newsletters.

  • Meta and Google — analytics and consent-based advertising.

  • Reclaim.ai — scheduling and bookings.

  • Zoom and Google Meet — meetings and live classes.

  • ManyChat — Instagram messaging automation.

Hosting & server log files

My website is hosted by Squarespace (Squarespace, Inc.). Each time you visit, technical information is automatically recorded in server log files (IP address, time/date, browser type, operating system, and referring page). This is necessary to display the site stably and securely (Legal basis: Art. 6(1)(f) GDPR).

International transfers

Some of my providers — including Squarespace, Circle, Stripe, Flodesk, Meta, and Google — are based in or transfer data to the United States. Where personal data leaves the EU/EEA, it is protected by:

  1. EU-U.S. Data Privacy Framework (DPF): For certified US vendors (including Squarespace, Stripe, Meta, and Google).

  2. Standard Contractual Clauses (SCCs): As approved by the European Commission pursuant to Article 46 GDPR.

6. How long I keep your data

Personal data is retained only as long as necessary, then deleted or anonymized:

  • Membership & client data: Kept for the duration of our relationship, then deleted within a reasonable period after you cancel.

  • Email subscribers: Retained until you unsubscribe or request removal.

  • Payment & tax records: Retained for up to 10 years as required under German commercial and tax laws (§ 147 AO / § 257 HGB).

  • Community content: Contributions remain in the community unless deleted by you or me. Account deletion removes your profile and access.

7. Your rights

Under the GDPR, you have the right to:

  • Access the personal data held about you.

  • Correct inaccurate or incomplete data.

  • Erasure ("Right to be Forgotten") of your personal data.

  • Restrict or object to data processing.

  • Data portability (receiving your data in a structured format).

  • Withdraw consent at any time where processing relies on consent (without affecting prior lawful processing).

To exercise any of these rights, email: hello@breathesculptflow.com. I will respond within one month.

Supervisory Authority

As a business based in Hamburg, Germany, my lead data protection authority is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Ludwig-Erhard-Str 22, 20459 Hamburg, Germany

Website:datenschutz-hamburg.de

You also have the right to lodge a complaint with your local data protection authority if you reside elsewhere in the EU.

8. International members

While based in Hamburg, Germany, I welcome members globally. Wherever you are located, your data is handled under the EU GDPR.

  • UK residents: Your data is protected under the UK GDPR. You may also raise concerns with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

  • US residents (including California): You have the rights set out in this policy, along with applicable state-specific rights (such as CCPA/CPRA).

  • All other regions: You are covered by the protections in this policy.

For any privacy enquiries, reach out directly to hello@breathesculptflow.com.

9. Cookies and tracking

My website uses cookies and similar technologies. Essential cookies run automatically to keep the site functioning. Analytics and advertising cookies run only if you accept them on the cookie banner. You can modify or withdraw your preferences at any time via the website cookie settings.

The BSF Circle community uses necessary functional cookies to manage account login sessions.

10. Children

Services are intended for adults. I do not knowingly collect data from anyone under 16 (the legal age of digital consent in Germany). If you believe a minor has submitted personal data, contact hello@breathesculptflow.com for immediate deletion.

11. Changes to this policy

When material updates are made, the "Last updated" date at the top will be updated. Significant changes will be communicated directly where appropriate.

Breathe Sculpt Flow™ · breathesculptflow.com