Privacy & Cookie Policy

This policy explains what information Glow Walk Club uses, why it is used, which services receive it, and how you can control optional tracking.

Last updated: 29 September 2026

1. Who is responsible for your data?

The data controller and legal seller is Luminita Miller Florea, a Swiss self-employed business operating Glow Walk Club from Switzerland.

Email: luminita@glowwalkclub.com

2. Information we process

Account and service data

Name, email address, login details, membership status, workout progress, challenge participation, preferences, and support messages.

Payment data

Stripe processes card and payment details. Glow Walk Club receives transaction, subscription, currency, and payment-status information, not your full card number.

Email data

Email subscriptions, groups, campaign delivery, opens, and link clicks when permitted by applicable law and your email settings.

Device and usage data

Browser, device, pages viewed, referral information, and interactions. Optional analytics and advertising data is used only after the matching consent choice.

3. Why we use information

  • To create and secure accounts, provide workouts, record progress, and deliver purchases.
  • To process payments, prevent fraud, maintain financial records, and meet legal obligations.
  • To answer support requests and send service messages connected to your account or purchase.
  • To send marketing emails where you have consented or where another lawful basis applies, with an unsubscribe option in every marketing email.
  • With your consent, to understand site use through PostHog analytics.
  • With your separate consent, to measure Meta advertising and support personalised advertising.

Depending on the activity, the legal basis is performance of a contract, compliance with a legal obligation, legitimate interests such as security and service improvement, or your consent. You may withdraw consent at any time without affecting processing that occurred before withdrawal.

4. Services that process information

ProviderPurposeWhen used
Base44Website hosting, authentication, and app databaseEssential for the service
StripeCheckout, subscriptions, payments, and fraud preventionWhen you use a paid service
MailerLiteNewsletters, automations, and service email deliveryWhen you subscribe, purchase, or receive service email
PostHogProduct analytics and site-use measurementOnly with Analytics consent
Meta PixelAdvertising measurement and personalised advertisingOnly with Marketing consent
YouTubeVideo deliveryWhen you open or play YouTube content

Some providers process data outside Switzerland or the EEA. Where required, transfers are protected using recognised safeguards such as adequacy decisions, approved contractual clauses, or applicable data-transfer frameworks.

5. Cookies and browser storage

Optional categories are off by default. Essential storage cannot be disabled through the banner because it is needed to provide requested functions and remember your privacy choice.

CategoryExamplesPurposeTypical duration
Essentialgwc_cookie_consent, authentication storageRemember choices, maintain login, securitySession or up to 180 days for the consent choice
AnalyticsPostHog ph_* storageMeasure pages, features, and performanceUp to 12 months, subject to provider configuration
MarketingMeta _fbp and _fbcMeasure ads and support ad personalisationUp to 90 days

Use the Cookie settings button at the bottom left of the site to accept, reject, or change Analytics and Marketing choices. Withdrawing consent stops the relevant tracking and clears the related site storage where technically available. Your choices expire after 180 days so they can be reviewed again.

6. Retention and security

We keep personal data only as long as needed for the purposes described above, including providing an active account, resolving support issues, preventing fraud, and meeting tax, accounting, and legal obligations. Retention periods vary by record and provider. Data is deleted or anonymised when it is no longer required.

Reasonable technical and organisational safeguards are used to protect information. No internet service can guarantee absolute security.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to withdraw consent. You may also complain to the competent data-protection authority. In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner.

To make a request, email luminita@glowwalkclub.com. Identity verification may be required before account data is disclosed or deleted.

8. Changes to this policy

This policy may be updated when services, providers, or legal requirements change. Material changes will be highlighted on the site or communicated through an appropriate channel. The date at the top shows the latest revision.