Privacy Policy – Luminous Retreats

Responsible for data processing
Leonie Schwertmann
Zur Zauntwiese 7
35108 Allendorf, Germany
Email: hi@luminous-space.com

1. General Information

Your privacy is important to me. This Privacy Policy explains how I collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

By using this website or registering for a retreat, you consent to the processing of your data as described below.

2. Data Collection

I collect and process personal data that you provide voluntarily, such as:

  • Your name, email address, and contact information when you inquire or register for a retreat
  • Billing and payment details (processed securely via Stripe)
  • Optional data you share through forms, email, or messages (e.g. dietary preferences or accommodation wishes)

Additionally, technical data (e.g. IP address, browser type, time of access, pages visited) may be automatically collected by my website host for security, analytics, and performance purposes.

3. Purpose of Data Processing

Your data is processed for the following purposes:

  • To manage retreat registrations and communication
  • To process payments via Stripe
  • To send relevant retreat information before and after your stay
  • To fulfill legal and tax obligations (e.g. invoicing)
  • To ensure the functionality and security of this website

Your personal data will not be used for unrelated purposes without your consent.

4. Website Hosting (WordPress)

This website is hosted via WordPress on servers provided by an EU-based hosting provider.
In the course of operation, log files (e.g. IP address, browser information, date/time of access) may be stored temporarily to ensure the stability and security of the site.
The hosting provider processes this data on my behalf in accordance with GDPR Article 28 (Data Processing Agreement).

5. Payment Processing via Stripe

Payments for retreat bookings are processed through Stripe Payments Europe, Ltd.
Stripe acts as a data controller for certain processing activities related to payments.
More information about Stripe’s data protection practices can be found here:
https://stripe.com/privacy

6. Cookies and Analytics

My website may use cookies or similar technologies to improve usability and performance.
You can control cookie settings in your browser or disable cookies entirely.
If you use third-party integrations (e.g. embedded videos, social media links, or contact forms), these may also set cookies in accordance with their own privacy policies.

7. Newsletter Subscription (via ConvertKit)

You have the option to subscribe to my newsletter to receive updates about retreats, coaching offers, and related content.
When you sign up, I collect your name and email address, which are stored and processed by my email service provider ConvertKit, operated by ConvertKit LLC, 750 W Bannock St, Suite 761, Boise, ID 83702, USA.

ConvertKit processes personal data on my behalf in accordance with GDPR Article 28.
A Data Processing Agreement (DPA) and Standard Contractual Clauses are in place to ensure adequate data protection for transfers to the United States.
Further information can be found here: https://convertkit.com/privacy

Your consent to receive the newsletter can be withdrawn at any time by clicking the “unsubscribe” link in the footer of each email or by contacting me directly at hi@luminous-space.com.
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

I use the collected data exclusively for sending the requested emails and performance statistics (e.g. open rates) in order to improve content relevance.
No data is shared with third parties for advertising purposes.

8. Legal Basis

Data processing is based on Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in maintaining communication and improving the website).
Where consent is required (e.g. newsletter subscription), processing is based on Article 6(1)(a) GDPR.

9. Data Storage and Retention

Your data is stored only as long as necessary for the stated purposes or as required by legal retention periods.
Once this period ends, your data will be securely deleted or anonymized.

10. Sharing of Data

Your personal data is treated confidentially and may only be shared with:

  • Stripe, for payment processing
  • Website hosting provider (WordPress), for technical operation
    All partners are carefully selected and comply with GDPR requirements.

11. Your Rights

Under GDPR, you have the right to:

  • Access your stored personal data
  • Request correction or deletion of your data
  • Restrict or object to data processing
  • Data portability
  • Withdraw consent at any time (with future effect)

To exercise these rights, please contact me at hi@luminous-space.com.
If you believe your data is being processed unlawfully, you also have the right to lodge a complaint with a data protection authority.

12. Data Security

I take appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or loss.

13. Updates to This Policy

This Privacy Policy may be updated occasionally to reflect changes in law or my practices. The latest version will always be available on this website.