Privacy Policy

Data controller

Libra 3 Frank (sole proprietorship), Alemannenstrasse 19, 4106 Therwil, Switzerland. Studio: Frohburgerstrasse 32, 4132 Muttenz. Contact: info@libra-studio.ch

What data we process

• Account: email address, name, and your password (stored only as a hash by our authentication provider). If you sign in with Google, we receive your name and email address from Google.
• Bookings and credits: the classes you booked with status and time, your credit balance, and every credit movement (purchases, redemptions, refunds).
• Payments: card and subscription payments are handled by our payment provider Stripe. We never see or store card details, only the amount, confirmation, and reference numbers.
• Booking without an account: if you book as a guest by card, we receive your email address from Stripe and send you a confirmation with a personal link to cancel the booking.
• Libra Club: the status and term of your membership.
• Bring a friend: if you invite someone as a member, we record that person’s name and email address and send them the booking email. Please only invite people who agree to this.
• Technical access data: when you visit the site, our hosting provider briefly logs IP address, time, and browser to keep the service running.

Health information

Before your first class we ask for a few details about injuries or conditions, pre-existing illnesses, pregnancy, and anything else your trainer should know. This is sensitive personal data, so:

• It is optional and stored only with your explicit consent.
• Its sole purpose is to look after you safely in training.
• It is stored encrypted (AES-256), visible only to our studio team, and every access is logged.
• You can view, change, and delete it at any time in your account or via your personal link. Deleting your account deletes it too.
• Entries not updated for 24 months are deleted automatically; every update you make restarts that period.

Why we process it

We use this data to make classes bookable, manage your credits and membership, look after you safely, communicate with you (booking confirmations, cancellations, changes, account notices; no newsletter), and operate and improve our website.

Cookies

Required for operation and set without consent: a session cookie that keeps you signed in for 14 days, and your cookie decision, which we keep in your browser. Only with your consent in the cookie banner: Google Analytics, for anonymized statistics on how our website is used. You can change or withdraw your consent at any time via “Cookie settings” in the page footer. Stripe’s own terms apply on its payment pages.

Providers and transfers abroad

To run the service we work with the following providers:

• Google Firebase (hosting, database, sign-in, file storage, analytics) — Google Ireland Ltd. / Google LLC, USA
• Stripe (payment processing, subscription management) — Stripe Payments Europe Ltd., Ireland / Stripe Inc., USA
• Resend (delivery of our emails) — Resend Inc., USA

Data may therefore be transferred to the USA. Transfers rely on standard contractual clauses or the Swiss-U.S. Data Privacy Framework where the provider is certified.

Retention

We keep account data until you delete your account. Bookings and credit movements are business records we must retain for 10 years (Art. 958f Swiss Code of Obligations); after account deletion they no longer contain your name or email address. Health information stays until you delete it or your account. Technical access data is deleted after a short time.

Your rights

You have the right to access, correct, delete, and receive a copy of your data, and to withdraw consent at any time. You can delete your account and your health information directly in your account; for anything else, contact info@libra-studio.ch. The competent supervisory authority is the Swiss Federal Data Protection and Information Commissioner (FDPIC).

Changes to this policy

We update this policy when the law or our offering changes. The current version, with its date, is always available on this page.