top of page
Privacy Policy

Covering breathesculptflow.com, yogawithmelissa.de, and the BSF Circle community

​

Your privacy matters here — especially in a space built around something as personal as pregnancy, postpartum, and motherhood. This policy explains what personal data I collect, why, how I protect it, and the rights you have over it. It covers my websites and the BSF Circle membership community.

​

1. Who is responsible for your data (the controller)

The data controller responsible for the personal data described in this policy is:

Melissa Schuler — Yoga with Melissa | Breathe Sculpt Flow 

For any questions about this policy or your data, contact: info@yogawithmelissa.de

​

2. What this policy covers

This policy applies to:

  • My websites — breathesculptflow.com and yogawithmelissa.de

  • The Breathe Sculpt Flow Circle membership community, hosted on the Circle platform

  • Email communication and newsletters (Flodesk)

  • Bookings, payments, and enquiries related to my offers

Important for community members: When you use BSF Circle, I am the data controller for your activity there, and Circle acts as my data processor. Circle's own privacy policy does not cover what happens inside the BSF community — this policy does. Anything you post, share, or submit inside the community is governed by the terms below.

​

3. What personal data I collect

From website visitors

  • Contact details you submit through forms (name, email, and anything you write in a message)

  • Booking and enquiry details when you request a clarity call or session

  • Technical data — IP address, browser type, device information, and how you use the site — collected via cookies and similar technologies (see Section 8)

From email subscribers

  • Your name and email address

  • Engagement data such as whether you open emails or click links (via Flodesk)

From BSF Circle members

  • Registration and profile information — name, email, profile photo, and anything you add to your profile

  • Your stage selection — the answer to the intake question (pregnant, postpartum, motherhood, or trying to conceive) used to route you to the right spaces

  • Content you create inside the community — posts, comments, replies, reactions, and messages

  • Participation data — class and event attendance, activity, and login information

  • Any information you choose to share in the community, including about your pregnancy, birth, recovery, or wellbeing

 

A note on sensitive information: Your stage selection is a routing preference you choose yourself, not a health record I request or verify. Please share only what you're comfortable sharing in community spaces. I ask all members to treat what's shared inside BSF as private (see the Community Guidelines).

​

From clients and paying members

  • Booking, session, and programme details

  • Payment information — processed securely by ThriveCart and Stripe. I do not store your full card details; these are handled by my payment processors.

 

4. How I use your data and my legal basis

Under the GDPR, I must have a lawful basis for using your personal data. Here's how that breaks down:

​

To deliver my services (legal basis: contract)

  • Running your membership, coaching, programmes, and bookings

  • Giving you access to BSF Circle and routing you to the right spaces

  • Processing your payments

To run and improve my business (legal basis: legitimate interests)

  • Responding to your enquiries

  • Understanding how my website and community are used, so I can improve them

  • Keeping records and protecting the security of my services

I only rely on legitimate interests where your rights and freedoms don't override them.

To send you marketing (legal basis: consent)

  • Sending newsletters, offers, and updates by email — only where you've opted in

  • You can withdraw consent at any time by clicking unsubscribe or emailing me

Advertising and retargeting (legal basis: consent)

I run paid ads on Meta (Instagram/Facebook) and Google. With your consent (given via the cookie banner), these platforms may place tracking technologies on my website to measure ad performance and show you relevant ads. You can decline or withdraw this at any time through the cookie settings. See Section 8.

To meet legal obligations (legal basis: legal obligation)

  • Keeping tax and accounting records as required under German law

 

5. Who I share your data with

I never sell your personal data. I share it only with trusted service providers (processors) who help me run my business, and only as far as needed. Each is bound by a data processing agreement.

 

My key service providers

  • Circle (CircleCo, Inc., USA) — hosts the BSF Circle community and processes member data on my behalf

  • ThriveCart & Stripe — process membership and programme payments

  • Flodesk — sends my emails and newsletters

  • Wix (Wix.com Ltd., Israel) — hosts my websites (see Hosting & server log files below)

  • Meta and Google — advertising and website analytics (with your consent)

  • Reclaim.ai — scheduling and bookings

  • Zoom and Google Meet - Meetings and livestream classes

  • ManyChat - Instagram automatic messaging

 

Hosting & server log files

My websites are hosted by Wix (Wix.com Ltd.), who processes data on my behalf as a processor. The BSF Circle community is hosted by Circle (CircleCo, Inc.).

Each time you visit, my host automatically records technical information in server log files, including your IP address, the date and time of your visit, the page or file requested, your browser type and operating system, and the website you came from. This happens for every website and is necessary to display the site to you and to keep it stable and secure. The legal basis is my legitimate interest in a safe, functioning website (Article 6(1)(f) GDPR).

 

International transfers

Some of my providers — including Circle, ThriveCart, Stripe, Meta, and Google — are based in or transfer data to the United States. Where personal data leaves the EU/EEA, it is protected by appropriate safeguards, primarily the European Commission's Standard Contractual Clauses (SCCs), as required under Article 46 GDPR. Wix is based in Israel, which the European Commission recognises as providing an adequate level of data protection. You can ask me for more detail on these safeguards at any time.

 

6. How long I keep your data

I keep personal data only as long as I need it for the purposes above, then delete or anonymise it.

  • Membership & client data: for the duration of our relationship, then deleted within a reasonable period after you leave

  • Email subscribers: until you unsubscribe or ask to be removed

  • Payment & tax records: retained as long as German tax law requires (generally up to 10 years)

  • Community content: posts and contributions remain in the community unless you or I remove them; deleting your account removes your profile and access

 

7. Your rights

Under the GDPR, you have the right to:

  • Access the personal data I hold about you

  • Correct data that's inaccurate or incomplete

  • Ask me to delete your data (right to erasure)

  • Restrict or object to how I use your data

  • Receive your data in a portable format

  • Withdraw consent at any time, where I rely on consent

To exercise any of these, email me at info@yogawithmelissa.de. I'll respond within one month.

You also have the right to lodge a complaint with a supervisory authority. As a Germany-based business, my lead authority is the German data protection authority (Landesdatenschutzbehörde) for my state. If you live elsewhere, you may also be able to complain to your own local authority (see International members below).

 

8. International members

I'm a Germany-based business, and I welcome members from all over the world — many of the mothers I work with are English-speaking women living outside their home country. Wherever you are, I handle your data under the EU GDPR, so the protections in this policy apply to you the same way.

A few region-specific notes:

  • UK residents: Your data is also protected under the UK GDPR. You have the same rights described above, and you can lodge a complaint with the UK's Information Commissioner's Office (ICO) at ico.org.uk.

  • US residents (including California): You have the rights set out in this policy. Depending on where you live, you may have additional rights under your state's privacy laws (for example, California's CCPA/CPRA). To exercise any of them, just email me.

  • Everywhere else: You're covered by this policy and the GDPR. If your country has its own data protection authority, you may also be able to raise a concern with them.

Whatever your location, the simplest route is always to email me directly at info@yogawithmelissa.de — I'd rather sort something out with you directly first.

 

9. Cookies and tracking

My website uses cookies and similar technologies to function, to understand how the site is used, and — with your consent — for advertising and retargeting via Meta and Google.

When you first visit, you'll see a cookie banner. Essential cookies (needed for the site to work) are always active. Analytics and advertising cookies only run if you accept them. You can change your choices at any time through the cookie settings on the site.

The Circle community also uses cookies to keep you logged in and deliver the platform. These are necessary for the community to function.

 

10. Children

My services are intended for adults. I don't knowingly collect data from anyone under 16. Under German law, 16 is the age at which a person can consent to online services on their own. If you believe a child has provided me with personal data, please contact me and I'll delete it.

 

11. Changes to this policy

I may update this policy as my business grows or the law changes. When I make a material change, I'll update the date at the top and, where appropriate, let you know directly. Please check back from time to time.

 

Breathe Sculpt Flow™  ·  breathesculptflow.com

bottom of page