We at Patricia Poor Fitness (“we”, “us”, “our”) respect your concern about privacy. 

This privacy policy will explain how we use the personal data we collect from you when you use our website. "Personal data" means any information that identifies you as an individual or is capable of identifying you as an individual. 

For the purpose of applicable data protection laws, including the General Data Protection Regulation (the “GDPR”), the data controller is Patricia Poor, a company registered in Hungary. Our email address is patricia.fitnesscoach@gmail.com.

Topics:

• What data do we collect?

• The use of consent for processing of your health data

• How do we collect your data?

• How will we use your data?

• How do we store your data?

• What are your data protection rights?

• What are cookies?

• How do we use cookies?

• How to manage your cookies

• Privacy policies of other websites

• Changes to our privacy policy

• How to contact us

What data do we collect?

We collect the following data:

Name, email address, phone number, address, credit card number, details of the preferences you express to us: your comments and questions, and technical information from the devices you use to access our website. We also collect information on your body and wellbeing, including height, weight (including information on obesity), body statistics, workouts, mood, meals, nutrition and general health and wellbeing, that you decide to disclose to us on this website or through the use of our app or that is generated by the app or us in any other form (e.g. Google Forms, Typeform), as well as any pictures that you choose to share with us.

The use of consent for processing of your health data 

 In order for us to be able to deliver customised meal- and workout plans to you, we may process certain health data provided by you, including information on allergens, information that might reveal obesity or specific injuries or other relevant information related to your physical or mental health status. In addition to the legal bases described above, the legal basis for our processing of your health information is Article 9 (2) (a) of the GDPR, which means that we will ask you for your explicit consent to allow us to process your health data prior to you becoming a client with us. Further, you may choose to make certain information public yourself e.g. by sharing personal information with us directly or to other people through the group chat. In this case, the legal basis is Article 9, (2) e) cf. Article 6 (1) b) of the GDPR. 

You may at any time withdraw your consent to us processing your health data. However, you should be aware that if we are prevented from processing relevant personal data, including information on any allergens, information that might reveal obesity or specific injuries or other relevant information related to your physical or mental health status, we will not be able to provide you with our services (customised meal- and workout plans based on your unique needs). 

How do we collect your data?

• You directly provide us with most of the data we collect. We collect data and process data when you:

• Register online or place an order for any of our products or services, including a coaching subscription.

• Submit any information through this website.

• Apply online or create an account with us or otherwise sign up for our services.

• Opt in to or otherwise receive marketing from us or our representatives.

• Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.

• Communicate with us via third-party social media websites.

• Contact us, correspond with us, or otherwise provide information to us.

How will we use your data?

We collect your data so that we can:

• Process your order and manage your account.

• Provide you with information about our products and services we think you might like (provided you consented to this).

• Provide our services to you, which may include:

• designing tailored meal and workout plans.

• monitoring changes or adaptations in your body to improve your coaching cycle, and to combine information we receive and collect (e.g. from updates you provide on your body transformation) to provide you with a more personalised experience and to make informed decisions about future coaching to best facilitate your improvement. This also provides vital statistics which we use to better understand the efficacy of different approaches to dieting and workouts.

• a history of your fitness activities, including (where eligible) duration, distance, speed, activity type and heart rate, as well as an overview of your fitness progression.

• access to the chat functionality, including a group chat with other clients, where you may post and communicate.

• Process your payments.

• Notify you of any changes to our services that may affect you.

• Comply with our legal obligations to keep internal (financial) records.

The security of your personal data is extremely important to us. We do not sell your personal data to any third parties, and we never will. 

Access to your personal data is only provided to carefully selected third parties, including our service providers who help us to provide our services to you, such as our infrastructure and IT service providers. These include:

• MyPTHub/Fitii Ltd and Stripe, who support our business by providing technical infrastructure services, analysing product performance, providing technical assistance and facilitating payments. 

We note therefore that MyPTHub may process your personal data as data processor on behalf of us. However, MyPTHub may also act as an independent data controller in limited cases. You can read more about MyPTHub’s processing of your personal data as data controller (including cookies) here: https://www.mypthub.net/legal/privacy-policy. You can read more about Stripe’s processing of your personal data as a data processor here: https://stripe.com/en-gb-hu/privacy.

• We may send your data to our regulators, law enforcement agencies or other public authorities and organisations if we are required to disclose your personal data by law.

• When we process your order, we may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.

How do we store your data?

We have implemented technical measures in order to safeguard personal data in our custody and control. Such measures include, limiting access to personal data only to employees and authorised service providers who need to know such information for the purposes described in this Privacy Notice, as well as other technical, administrative and physical safeguards (e.g. password protection, physical safeguarding of computers, etc).

To provide you with increased security, certain personal data stored in your online account is only accessible via your username and password. You are responsible for maintaining the confidentiality of your online account credentials, and we strongly recommend that you do not disclose your online account username or password to anyone. We will never ask you for your password in any unsolicited communication. Please notify us immediately (see "Contact us" section below) of any unauthorised use of your online account credentials or any other suspected breach of security. 

Your personal data will only be stored for as long as necessary for the purposes for which they were collected and only to the extent permitted by applicable laws. When we no longer need to use your information, we will remove it from our systems and records and / or take steps to promptly anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject). 

We will keep your data for 36 months after your last activity for the following purposes: 

• Management of your account

• Delivery of coaching services (except for health data and uploaded pictures, the period instead is 6 months)

• Marketing purposes

We will keep your data for up to 10 years after your last activity for the following purposes: 

• Mandatory record keeping including payments and financial purposes

Once the time limits stated above expire, we will delete or anonymise your data.

Third country data transfers 

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"), which does not offer an equivalent level of protection of the personal data to that guaranteed within the EEA. It may also be processed by staff operating outside the EEA and who work for us or for one of our service providers. 

The countries outside the EEA where personal data about you may be transferred and stored include USA. 

We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Notice and applicable data protection laws.

What are your data protection rights?

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request a copy of your personal data which we will provide back to you in electronic form.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, except in case we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims. 

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose. Where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it, we would mark stored personal data with the aim of limiting particular processing for particular purposes in accordance with your request, or otherwise restrict its processing. 

The right to object to processing – You have the right to object to us processing of your personal data. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim. 

The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

The right to withdrawal – Where we process certain personal data on the basis of your consent, you have the right to withdraw your consent, including with regard to direct marketing. 

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: patricia.fitnesscoach@gmail.com and include your name, email and postal address, as well as your specific request and any other information we may need in order to provide or otherwise process your request. 

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites and/or app, we (and our service providers) may collect the following information from you automatically through cookies or similar technology:

• Technical information, including your IP address, your login information, browser type and version, device identifier, location and time zone setting, browser plug-in types and versions, operating system and platform, page response times and download errors.

• Information about your visit, including the websites you visit before and after our website and products you viewed or searched for.

• Length of visits to certain pages, page interaction information (such as scrolling, clicks and mouseovers) and methods used to browse away from the page.

For further information, visit allaboutcookies.org.

Within our app, you may choose to import your history of fitness activities from Apple Health/Google Fit, MyFitnessPal or similar. You must first allow the app to access your data from these sources. You can remove the permission at any time by adjusting your app settings. 

While you are generally free to choose to what extent you share your personal data with us, please note that opting to not share such personal data may limit our ability to provide our service and our performance of the contract you have entered with us. 

How do we use cookies?

We use cookies in a range of ways to improve your experience on our website, including:

• Keeping you signed in

• Understanding how you use our website

How to manage cookies

You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Privacy policies of other websites

Our website may, from time to time, contain links to and from the websites of our partners, or affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy notices and that we have no control over how they may use your personal data. You should check the privacy notices of third party websites before you submit any personal data to them.

Changes to our privacy policy

We keep our privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 13th October 2022.

How to contact us

If you have any questions about this privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at patricia.fitnesscoach@gmail.com