Privacy Policy

Flourish Space is a wellness and learning center based in Rashayya, Lebanon. This policy applies to information collected through our website (flourishspace.com), our booking and registration flows, and any related services we provide.

We collect only the information we need to run our classes, keep families safe, and communicate with you. We do not sell personal information, and we do not use it for advertising targeting.

We collect information you provide directly to us:

• Account information: full name, email address, phone number, and password when you register.
• Family information: children's names and dates of birth, so we can place them in the right classes and ensure their safety.
• Booking and payment information: classes you book, credit packages you purchase, payment status, and any notes related to your reservations.
• Waiver and consent: electronic signatures and confirmations you provide when joining classes or activities.
• Communications: messages you send us through the contact form, WhatsApp, email, or in person.

We also collect basic technical information needed to keep the site secure and functional, such as your IP address, browser type, and session cookies.

We use your information to:

• Create and manage your account.
• Process class bookings, credit packages, and payments.
• Place children in age-appropriate groups and maintain safety records.
• Send booking confirmations, reminders, and important updates about your classes.
• Respond to your questions and support requests.
• Maintain records required for safety, accounting, and legal purposes.
• Improve our website and services.

We process your data based on the necessity of performing our contract with you (providing classes and services), our legitimate interest in running a safe and efficient center, and your consent where required (for example, when you sign a waiver or add a child to a program).

We do not sell or rent your personal information. We share data only with the service providers we use to operate the website and run our business:

• Lovable Cloud / Supabase: hosts our website, database, authentication, and booking data. This is the platform that stores and processes your account and booking information.
• WhatsApp: messages sent through our contact form are opened in WhatsApp on your device before you choose to send them.
• Google Fonts: loads the fonts you see on this site from Google's font service.

These providers act as subprocessors and are contractually or commercially bound to handle data appropriately. The fact that we use these services is a description of our current setup, not a certification or guarantee of their security practices.

We use only essential cookies and similar technologies needed for the site to function — for example, to keep you signed in, process bookings, and prevent abuse. We do not use advertising cookies, tracking pixels, or third-party analytics tools.

You can control or delete cookies through your browser settings. Disabling essential cookies may prevent parts of the site from working, including login and booking.

We keep your account and booking records until you ask us to delete them, unless we are required by law to keep them longer (for example, for accounting or safety records).

When you request deletion, we will remove or anonymize your personal information within a reasonable time, except where we need to retain certain data for legal, safety, or operational reasons.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your account and personal data.
• Object to or restrict certain uses of your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at info@connect-services.co. We will respond as quickly as we can, typically within 30 days.

Flourish Space offers programs for children. We collect children's names and dates of birth only when a parent or legal guardian provides them through their own account, for the purpose of enrollment, safety, and age-appropriate placement.

We do not knowingly collect information directly from children under 13 without parental involvement. If you believe a child has provided us with personal information without consent, please contact us and we will delete it.

We take reasonable steps to protect your information, including password-protected accounts, encrypted connections (HTTPS), database access controls, and limited staff access to personal data.

This website is built and hosted on the Lovable platform, which provides managed infrastructure, HTTPS by default, and row-level access controls in the database. These are platform capabilities, not a certification or guarantee of absolute security. No online system can be completely secure, and we cannot guarantee that unauthorized access will never occur.

If you have questions about this policy, want to exercise your rights, or need to report a privacy concern, please reach out:

We may update this policy from time to time. When we do, we will revise the effective date at the top of the page. Continued use of the site after changes means you accept the updated policy.