Privacy Policy & Cookie Policy
Last updated: February 24, 2026
Introduction
Flow Factory Brussels ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Belgian data protection laws.
By using our website and services, you agree to the collection and use of information in accordance with this policy.
Data Controller
Flow Factory Brussels
Rue Vanderlinden 24
1030 Schaerbeek, Brussels
Belgium
Personal Data We Collect
We collect the following types of personal data:
- Contact Information: Name and email address when you submit our contact form
- Initiation Registration Data: When you register for a free initiation session (pole or yoga), we collect your first name, last name, email, phone number, and a photo of you. The photo is required solely to prevent fake registrations; it is stored securely and is not displayed publicly.
- Website Usage Data: IP address (anonymized), browser type, device information, pages visited, time spent on pages, and click patterns (only with your consent via cookies)
- Communication Data: Messages you send us through our contact form
How We Use Your Personal Data
We use your personal data for the following purposes:
- To respond to inquiries: When you contact us via our contact form, we use your name and email to respond to your questions or requests
- To manage initiation registrations: When you register for a free initiation session, we use your name, email, phone and photo to process and validate your registration. Your photo is used only to prevent fake registrations; it is stored securely and not displayed publicly.
- To improve our website: With your consent, we use analytics data to understand how visitors use our website and improve user experience
- Legal compliance: To comply with legal obligations and protect our legitimate interests
Legal Basis: We process your personal data based on:
- Your consent (for analytics cookies; and for initiation registration, including the processing of your data and photo when you register)
- Legitimate interest (to respond to your inquiries)
- Legal obligation (to comply with applicable laws)
Data Sharing and Third Parties
We do not sell, trade, or rent your personal data to third parties. We may share your data only in the following circumstances:
- Google Analytics: With your consent, we use Google Analytics to analyze website traffic. Google processes data according to their Privacy Policy. IP addresses are anonymized.
- Service Providers: We may use third-party services (e.g., email services) that process data on our behalf under strict confidentiality agreements
- Legal Requirements: We may disclose data if required by law or to protect our rights and safety
Data Retention
We retain your personal data only for as long as necessary:
- Contact form data: Retained until your inquiry is resolved and for up to 2 years for record-keeping purposes
- Initiation registration data (including photo): Retained for the duration of the initiation session and for a limited period thereafter for administration and record-keeping; we do not display your photo publicly.
- Analytics data: Retained according to Google Analytics retention settings (typically 26 months)
- Consent records: Retained for 1 year or until you withdraw consent
Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request a copy of your personal data we hold
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw consent for analytics cookies at any time
To exercise these rights, please contact us at flowfactorybrussels@gmail.com. We will respond within 30 days.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Flow Factory Brussels
Rue Vanderlinden 24
1030 Schaerbeek, Brussels
Belgium
Supervisory Authority
If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit):
Autorité de protection des données
Rue de la Presse 35
1000 Brussels
Belgium
Website: www.autoriteprotectiondonnees.be