Privacy Policy

This privacy notice provides you with details of how we collect and process your personal data through your use of this website and our services.

1. Data Controller

Iryna Sagaidak, trading as MindfulBody Sarl-S Business
Registration: RCS Luxembourg B280703 VAT number: LU35253001
Email: iryna@mindfulbody.lu
Website: mindfulbody.lu

2. Cookies

This website uses cookies — small text files stored on your device to improve website functionality and understand how visitors use the site.

2.1 Essential Cookies

These cookies are necessary for the website to function properly.

2.2 Analytics Cookies (Optional)

We use Google Analytics to understand how visitors find and use this website — for example, which pages are visited and for how long. You can accept or decline these cookies through the cookie consent banner shown on your first visit, and manage your preferences at any time through your browser settings.

Declining analytics cookies will not limit your ability to browse the website, book a session, or access our services.

3. Personal Data Protection

3.1 What Personal Data We Collect

We collect and process the following personal data:

Contact information: name, email address, phone number
Appointment data: session dates, times, booking information
Communication records: emails, messages, contact form submissions
Payment information: processed via Stripe, or by bank transfer
Session notes: details relevant to your sessions (with your explicit consent), including health-related information where relevant
Technical data: IP address, browser type, pages visited

We do not collect sensitive data such as racial or ethnic origin, political opinions, or religious beliefs, except health-related information directly relevant to your sessions, which we only collect and process with your explicit consent. You are not required to share more than you feel comfortable with, and you may withdraw this consent at any time by contacting us, though this may affect our ability to continue providing the Service.

3.2 Purposes of Data Processing

We use your personal data to:

Provide services: schedule appointments, deliver sessions, workshops, and programs, and maintain records
Process payments: handle transactions and issue invoices
Communicate: respond to inquiries, send appointment reminders
Send marketing emails: updates about our services, workshops, and articles, where you have subscribed
Analyse website usage: improve our website and services
Legal compliance: meet our tax and professional obligations under Luxembourg law

We rely on the following legal bases: contract necessity (to deliver services you've booked), consent (for marketing emails and health-related information you share with us), and legal obligation (for tax and invoicing records).

3.3 Data Retention

We retain your personal data as follows:

Session notes and client records: 10 years from your last session (professional obligation)
Invoices and financial records: 10 years (Luxembourg legal requirement)
Newsletter subscriber information: until you unsubscribe, then deleted

After these periods expire, your data will be permanently deleted or anonymised.

3.4 Third-Party Service Providers

We use the following categories of trusted service providers to run our website and deliver our services:

Website hosting platform
Appointment booking platform
Payment processor, for card payments
Email and communications
Internal notetaking tools, for our own record-keeping
Google Analytics, for website usage statistics

Some of these providers may process personal data outside the EU/EEA, including in the United States. Where this happens, we require appropriate safeguards to be in place, such as standard contractual clauses approved by the European Commission, or reliance on a recognised adequacy framework such as the EU-U.S. Data Privacy Framework where applicable.

4. Your rights

Under the GDPR, you have the right to:

Access your personal data
Correct inaccurate or incomplete data
Delete your personal data ("right to be forgotten"), where applicable
Restrict how we process your data
Data portability (receive your data in a transferable format)
Object to processing based on legitimate interests
Object to direct marketing at any time, with no need to give a reason
Withdraw consent at any time (this does not affect processing carried out before withdrawal)

To exercise any of these rights, or if you have any concerns about how we handle your personal data, please contact us first at iryna@mindfulbody.lu - we're always happy to resolve things directly. You also have the right to lodge a complaint with the Commission Nationale pour la Protection des Données (CNPD), Luxembourg's data protection authority, at any time.

5. Marketing Communications

5.1 When We Send Marketing Emails

We may send you emails about our services, workshops, articles, and updates if:

You have given explicit consent, or
You have booked a session or program with us, or inquired about our services

You will always be given the option to opt out when we collect your email address, and you can unsubscribe at any time.

5.2 How to Unsubscribe

Every marketing email includes an "unsubscribe" link. You can also opt out by emailing iryna@mindfulbody.lu. We will process your opt-out promptly.

Opting out of marketing does not affect service-related communications, such as appointment reminders or invoices.

6. Third-party links

This website may contain links to third-party websites. We are not responsible for the privacy practices of external sites. We encourage you to read the privacy policy of every website you visit.

7. Changes To This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For significant changes, we will notify you by email where we have your contact details.

8. Contact Us

For questions about this Privacy Policy or your personal data:

Iryna Sagaidak, MindfulBody Sarl-S
Email: iryna@mindfulbody.lu
Website: mindfulbody.lu

Last Updated: 12.08.2026