Privacy Policy.
Consumer Data Privacy Policy GDPR & Cookie Policy
By this declaration, www.thrivestudio.lu want to show site visitors the importance it attaches to respect for their privacy. We present below how we treat the information collected on visitors to our site.
Effective Date: June 2026
Introduction
THRIVE Studio Luxembourg ("THRIVE", "we", "our", or "us") is committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Luxembourg data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, make bookings, purchase memberships, attend classes, workshops or events, or otherwise interact with our services.
1. Data Controller
CMPW LUXEMBOURG SARL-s
THRIVE STUDIO LUXEMBOURG
Website: https://www.thrivestudio.lu
Email: hello@thrivestudio.lu
Phone: +352 691 888 124
THRIVE Studio Luxembourg is the data controller responsible for the processing of your personal data.
2. What Personal Data We Collect
Depending on your interaction with us, we may collect the following information:
Personal Information
First name and surname
Email address
Telephone number
Postal address (where applicable)
Date of birth (where required)
Booking & Membership Information
Class bookings
Attendance records
Membership details
Purchase history
Account information
Communication preferences
Payment Information
Payments are processed securely through Stripe via our booking platform, Arketa. THRIVE does not store or have access to your full payment card details.
Communication Information
Contact form submissions
Email correspondence
Messages sent through social media platforms
Customer support enquiries
Website & Technical Information
IP address
Browser type
Device information
Website usage data
Cookie information
Referral source
Approximate location data
3. Health Information
To ensure the safety and suitability of our classes, workshops, and services, we may occasionally collect limited health-related information.
This may include information regarding:
Injuries or physical limitations
Pregnancy or postnatal status
Medical conditions relevant to participation
Recovery from surgery or injury
Exercise restrictions advised by a healthcare professional
Under GDPR, this information is classified as special category personal data.
We will only collect and process such information where necessary and, where required, with your explicit consent.
We use this information solely to:
Deliver safe and appropriate services;
Adapt classes and exercises where necessary;
Protect the health, wellbeing, and safety of our clients and instructors;
Meet our legal and duty-of-care obligations.
Health-related information is treated with enhanced confidentiality and is only accessible to authorised personnel who require access for the provision of services.
4. How We Collect Your Data
We collect information when you:
Visit our website
Complete a contact form
Create an account
Book classes or services
Purchase memberships or packages
Subscribe to our newsletter
Contact us via email, telephone, social media, or in person
Complete health, waiver, or onboarding forms
Participate in promotions, surveys, workshops, or events
We do not purchase marketing lists or obtain personal information from third parties for marketing purposes.
5. Why We Process Your Data
We process personal data for the following purposes:
Managing bookings and memberships
Delivering classes, workshops, and services
Processing payments
Providing safe and appropriate instruction
Communicating with you regarding your account, purchases, or bookings
Responding to enquiries and customer support requests
Sending marketing communications where consent has been provided
Improving our services, website, and customer experience
Measuring website and advertising performance
Maintaining business records
Complying with legal and regulatory obligations
6. Legal Basis for Processing
Under GDPR, we process your personal data on one or more of the following legal bases:
Contractual Necessity
To provide services you have requested, including bookings, memberships, purchases, and customer support.
Consent
Where you have explicitly agreed to receive marketing communications, accepted non-essential cookies, or provided health-related information requiring consent.
Legitimate Interests
To operate, improve, and secure our business, website, services, and customer experience.
Legal Obligations
To comply with applicable laws, tax requirements, accounting obligations, health and safety requirements, and regulatory obligations.
7. Marketing Communications
If you subscribe to our newsletter, create an account, purchase services, or otherwise provide consent, we may send you information about classes, workshops, events, offers, studio updates, and other relevant communications.
You may withdraw your consent at any time by:
Clicking the "Unsubscribe" link included in any marketing email; or
Contacting us directly at hello@thrivestudio.lu
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
8. Third-Party Service Providers
We work with trusted third-party providers who help us operate our business and deliver our services.
These providers only receive the information necessary to perform their services and are contractually required to protect your personal data.
Arketa
We use Arketa to manage:
Class bookings
Memberships and subscriptions
Customer accounts
Scheduling and attendance records
Customer communications
Payment integrations
Arketa processes personal data on our behalf in accordance with applicable data protection laws.
For more information:
https://www.arketa.co/privacy-policy
Stripe
Payments made through our website and booking platform are securely processed through Stripe via Arketa.
Stripe may process:
Payment information
Billing details
Transaction records
THRIVE Studio Luxembourg does not store or have access to your full payment card details.
For more information:
https://stripe.com/privacy
Google Analytics
We use Google Analytics to understand how visitors interact with our website and improve website performance and user experience.
Google Analytics may collect information including:
Device information
Browser information
Website usage data
Referral sources
Approximate location data
Google Analytics is only activated after you provide consent through our cookie banner.
For more information:
https://policies.google.com/privacy
Meta Pixel
We use Meta Pixel (Facebook Pixel) to measure the effectiveness of our advertising campaigns and understand how visitors interact with our website after viewing our content on Facebook or Instagram.
Meta Pixel may collect information including:
Website activity
Device information
Browser information
Advertising interactions
Meta Pixel is only activated after you provide consent through our cookie banner.
For more information:
https://www.facebook.com/privacy/policy
9. International Data Transfers
Some of our service providers, including Arketa, Stripe, Google, and Meta, may process or store personal data outside the European Economic Area (EEA).
Where such transfers occur, we ensure that appropriate safeguards are implemented in accordance with GDPR, including:
European Commission adequacy decisions;
Standard Contractual Clauses (SCCs);
Other legally recognised transfer mechanisms.
You may contact us for further information regarding these safeguards.
10. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal obligations. Contact form enquiries are typically retained for up to 12 months. Marketing subscription data is retained until you withdraw your consent or unsubscribe from our communications. Booking and attendance records may be retained for up to 5 years, while health-related information is retained only for as long as necessary to provide services safely and meet our legal and duty-of-care obligations. Customer account information is retained while your account remains active. Accounting and tax records may be retained for up to 10 years in accordance with Luxembourg legal requirements. Website analytics data is retained according to the settings of the relevant analytics provider and your consent preferences. When personal data is no longer required, it is securely deleted or anonymised.
11. Your Rights
Under GDPR, you have the right to:
Access your personal data
Correct inaccurate or incomplete data
Request deletion of your data
Restrict processing
Object to processing
Withdraw consent at any time
Request data portability
Lodge a complaint with a supervisory authority
To exercise your rights, please contact:
12. Supervisory Authority
If you believe your data protection rights have been infringed, you may contact:
Commission Nationale pour la Protection des Données (CNPD)
15 Boulevard du Jazz
L-4370 Belvaux
Luxembourg
Website: https://www.cnpd.lu
13. Data Security
We implement appropriate technical and organisational measures to protect personal data against:
Unauthorised access
Accidental loss
Misuse
Alteration
Disclosure
Destruction
While no online system can guarantee absolute security, we take reasonable measures to safeguard your information.
14. Children's Privacy
We do not knowingly collect personal information from children under the age of 16 without the consent of a parent or legal guardian.
If we become aware that personal data has been collected from a child without appropriate consent, we will take reasonable steps to delete that information.
15. External Links
Our website may contain links to third-party websites.
THRIVE is not responsible for the privacy practices, policies, or content of external websites. We encourage users to review the privacy policies of any third-party sites they visit.
Cookie Policy
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites function correctly, remember preferences, improve user experience, provide analytics, and support website security.
How We Use Cookies
We use cookies to:
Ensure the website functions correctly;
Remember your preferences;
Improve website performance;
Analyse website traffic and usage;
Measure advertising effectiveness;
Enhance website security.
Types of Cookies We Use - Strictly Necessary Cookies
These cookies are essential for the operation, functionality, and security of our website and cannot be disabled.
Functional Cookies
These cookies remember your preferences and settings to improve your experience while using our website.
Analytics Cookies
We use analytics cookies, including Google Analytics, to understand how visitors use our website, monitor website performance, and improve user experience.
Marketing Cookies
We use marketing cookies, including Meta Pixel, to measure the effectiveness of our advertising campaigns and provide more relevant advertising content.
Cookie Consent
When you visit our website, you will be presented with a cookie consent banner that allows you to:
Accept all cookies;
Reject non-essential cookies; or
Manage your cookie preferences.
We do not place analytics or marketing cookies, including Google Analytics and Meta Pixel cookies, on your device unless you have expressly consented to their use through our cookie management tool.
You may change or withdraw your consent at any time through the cookie settings available on our website.
Managing Cookies
Most browsers allow you to manage cookies through browser settings.
You can:
Delete cookies;
Block cookies;
Receive notifications before cookies are stored.
Please note that disabling certain cookies may affect website functionality.
For more information about cookies, please visit:
https://www.allaboutcookies.org
Changes to This Policy
We may update this Privacy Policy and Cookie Policy from time to time to reflect changes in legal requirements, business practices, or services.
Any updates will be posted on this page with an updated effective date.
Contact Us
If you have any questions regarding this Privacy Policy, Cookie Policy, or the way we process personal data, please contact:
THRIVE Studio Luxembourg
Website: https://www.thrivestudio.lu
Email: hello@thrivestudio.lu
Phone: +352 691 888 124