top of page

Privacy Policy

Last Updated: 25/5/2026
 

This Privacy Policy explains how SNIP STUDIOS ("we," "us," or "our"), the data controller, collects, uses, and protects your personal data when you use the website theglowroutine.be, the online workout platform (the "Platform"), and when you purchase the physical workout tools (the "Kit").

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian law. By using our services, you acknowledge the practices described in this Policy.

Data Controller: SNIP STUDIOS

Contact: support@theglowroutine.online

1. Personal Data We Collect

Information you provide directly

  • Account data: name, email address, password, subscription plan details (sign-up, renewal, and expiry dates), promotional or referral codes.

  • Payment data: name on the payment method, transaction date and amount, items purchased. Card details are processed directly by our payment provider, Stripe; we do not store or have access to your full card number.

  • Delivery data (Kit orders): name and delivery address.

  • Communications: any information you share when contacting us, leaving a comment, or responding to a survey.

Information we collect automatically

  • Technical data: IP address, device type, operating system, browser type.

  • Usage data: pages visited, links clicked, videos viewed, workout progress, and login/logout activity.

We collect this through cookies and similar technologies (see Section 6)

2. Why We Process Your Data and Legal Basis

We process your personal data for the following purposes, each based on a legal ground under the GDPR:

  • Creating and managing your account, providing the Platform, and delivering the Kit Legal basis: performance of a contract (Art. 6(1)(b))

  • Processing payments and handling orders Legal basis: performance of a contract (Art. 6(1)(b))

  • Sending service-related notices Legal basis: performance of a contract (Art. 6(1)(b))

  • Sending marketing emails and newsletters Legal basis: consent (Art. 6(1)(a)) — withdrawable at any time

  • Improving and personalising the Platform, and analytics Legal basis: consent / legitimate interest (Art. 6(1)(a)/(f))

  • Fraud prevention and security Legal basis: legitimate interest (Art. 6(1)(f))

  • Complying with legal, tax, and accounting obligations Legal basis: legal obligation (Art. 6(1)(c))

You can withdraw consent for marketing at any time via the unsubscribe link in any email or by contacting us.
Withdrawal does not affect the lawfulness of processing before withdrawal.

3. How We Share Your Data

We share your data only with the following categories of recipients, under appropriate data processing agreements:

  • Instill — our Platform technology provider, acting as processor on our behalf.

  • Stripe — for secure payment processing.

  • Mailerlite — for sending communications you have consented to.

  • Google Analytics and Meta — for usage measurement and marketing analytics (set only with your consent).

  • Logistics/shipping partners — for Kit delivery.

  • Authorities or advisors — where required by law, or in connection with a merger or acquisition.

We do not sell your personal data.

4. International Data Transfers

Some of our providers — including Stripe, Google, and Meta — may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses, to protect your data in line with GDPR.

5. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten")

  • Restrict processing

  • Data portability — receive your data in a structured, machine-readable format

  • Object to processing based on legitimate interest

  • Withdraw consent at any time

To exercise any of these rights, contact us at [email address]. We will respond within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority

6. Cookies

We use cookies and similar technologies to operate the Site, remember your preferences, and analyse usage.

  • Essential cookies — required for the Site and Platform to function. These do not require consent.

  • Analytics and marketing cookies — including Google Analytics and the Meta pixel, set only with your consent, which you give via our cookie banner.

You can manage or withdraw your cookie preferences at any time through the cookie settings on our Site. 

7. How Long We Keep Your Data

We retain your data only as long as necessary for the purposes described:

  • Account and subscription data: for the duration of your account, then deleted or anonymised within [12 months] of account closure.

  • Payment and transaction records: [7 years], as required by Belgian accounting and tax law.

  • Marketing data: until you withdraw consent or after [X months] of inactivity.

8. How We Protect Your Data

We apply appropriate technical and organisational measures — including encryption and access controls — to protect your data against unauthorised access, loss, or misuse. Only personnel who need access for their role can access your data.

No system is completely secure. If we become aware of a data breach affecting your rights, we will notify you and the Data Protection Authority as required by law.

9. Children

The Platform is not directed at children under 16. We do not knowingly collect data from anyone under 16 without parental consent. If you believe we have collected such data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes by email or via a notice on the Site, and update the "Last Updated" date above.

11. Contact

For any questions or to exercise your rights: support@theglowroutine.online

bottom of page