Privacy policy.

Last updated: 07. Nov 2025

We at Studio Suparman & Breton are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR).

By using our website, booking a retreat, joining a coaching session, or contacting us, you agree to the practices described in this policy.

1. Data Controller

Studio Suparman & Breton
Represented by: Selena Suparman & Susanne Breton
Email: connect@studiosuparmanbreton.com

If you have questions about this Privacy Policy or how we handle your personal data, please contact us at the email above.

2. Data We Collect

We collect and process personal data when you:

  • Contact us through our contact form

  • Email us directly

  • Book retreats, coaching sessions, or events

  • Visit our website

  • Interact with embedded Instagram content

Depending on your interaction, we may collect:

  • First and last name

  • Email address

  • Phone number (optional)

  • Message or inquiry content

  • Booking details (date, time, event type, preferences)

  • Payment information (via Acuity/Squarespace if enabled)

  • Technical data: IP address, browser type, device information, date/time of access

We only collect the information necessary to provide our services and communicate with you.

3. Purposes of Processing

We process your personal data for the following purposes:

  • Responding to inquiries

  • Managing retreat bookings and coaching sessions

  • Providing pre-contractual and contractual services

  • Sending booking confirmations and reminders

  • Organizing events, workshops, and programs

  • Ensuring proper website functionality and security

  • Displaying embedded Instagram content

  • Improving our services and user experience

Legal bases under GDPR:

  • Art. 6(1)(b) – Contract or pre-contractual measures

  • Art. 6(1)(f) – Legitimate interest (website operation, security, communication)

  • Art. 6(1)(a) – Consent (cookies, analytics, Instagram embeds if applicable)

4. Contact Form & Email Communication

If you contact us through our website or via email, we process your data solely to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication)

We delete this data when it is no longer needed, unless legal retention obligations apply.

5. Bookings & Scheduling (Acuity Scheduling)

For retreat registrations and scheduling, we use Acuity Scheduling, a service provided by:

Squarespace Ireland Ltd.
Le Pole House, Ship Street Great
Dublin 8, Ireland

Acuity processes:

  • Name

  • Email address

  • Phone number (optional)

  • Selected retreat/program/session

  • Responses to custom questions (e.g., preferences, dietary needs)

  • Payment data (if enabled)

  • Technical data (IP address, browser, device)

Purpose: Managing bookings, confirmations, reminders, and event administration.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

Squarespace may transfer data to the USA using Standard Contractual Clauses (SCC) according to Art. 46 GDPR.

Privacy Policy: https://www.squarespace.com/privacy

6. Instagram Embeds

Our website may include embedded content from Instagram, operated by:

Meta Platforms Ireland Ltd.
4 Grand Canal Square
Dublin 2, Ireland

When you load a page containing an Instagram embed, Instagram may collect:

  • IP address

  • Browser and device information

  • Cookies (if logged in to Instagram)

  • Interaction data

Purposes: Visual content display and enhancing our online presence.
Legal basis:

  • Art. 6(1)(f) GDPR (legitimate interest)

  • Art. 6(1)(a) GDPR (consent for cookies, if applicable)

Instagram Privacy Policy: https://privacycenter.instagram.com/

7. Cookies

Our website uses cookies to ensure proper functionality.

Types:

  • Essential cookies (no consent required)

  • Optional cookies (analytics/marketing — consent required)

If we enable analytics tools in the future, we will update this policy accordingly.

8. Data Sharing

We only share personal data with:

  • Service providers essential to website operation (e.g., Squarespace)

  • Acuity Scheduling

  • Payment providers (if activated)

  • Legal authorities when required

We do not sell or rent personal data.

9. Storage Period

We store personal data only for as long as necessary for the purposes stated or as required by law.

10. Your Rights Under GDPR

You have the right to:

  • Access your data (Art. 15 GDPR)

  • Rectify inaccurate data (Art. 16 GDPR)

  • Request deletion (Art. 17 GDPR)

  • Restrict processing (Art. 18 GDPR)

  • Object to processing (Art. 21 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent at any time

  • File a complaint with your supervisory authority

11. International Transfers

International data transfers (e.g., via Squarespace) are protected by:

  • Standard Contractual Clauses (SCC)

  • Adequacy decisions

  • Other GDPR-compliant safeguards

12. Security

We take appropriate technical and organizational measures to safeguard your data from unauthorized access, misuse, or loss.

13. Updates to This Policy

We may update this Privacy Policy occasionally to reflect legal changes or improvements to our services. The latest version will always be available on this page.