Privacy Policy

Your privacy matters. This policy explains how BioVitaGym collects and uses your personal data under the EU General Data Protection Regulation (GDPR). This is a template and should be reviewed by a qualified lawyer before launch to ensure it accurately reflects your processing activities.

1. Who we are (data controller)

The data controller responsible for your personal data is [COMPANY LEGAL NAME], registered in [COUNTRY/JURISDICTION] under company number [COMPANY REGISTRATION NUMBER], registered office [REGISTERED ADDRESS]. For any privacy matter, contact us at hello@biovitagym.com.

2. What personal data we collect

Depending on how you use the Service, we may collect:

• Account data — email address and password (stored securely in hashed form).
• Identity & contact data — your name and contact details.
• Billing data — billing address and subscription details. Card numbers are handled by Stripe, not stored by us.
• Health-related data (special category) — information such as age, weight, height, dietary preferences, and health or fitness goals, which you provide so we can personalise your nutrition plans.
• Usage & technical data — how you interact with the Service, device and log information, and cookie data (see Section 7).
• Communications — messages you send us and your marketing/newsletter preferences.

3. How we collect your data

We collect data directly from you when you register, complete your profile or health questionnaire, subscribe, or contact us. We also collect some data automatically through cookies and similar technologies when you use the Service, and we receive limited information from our payment provider (such as confirmation of a successful payment).

4. Purposes & legal bases

We process your personal data on the following GDPR legal bases:

• Performance of a contract — to create and manage your account, provide the Service and personalised plans, process subscriptions, and provide support.
• Consent — to send marketing and our newsletter where you have opted in, to set non-essential cookies, and (specifically) to process your health-related data (see Section 5). You can withdraw consent at any time.
• Legitimate interests — to secure and improve the Service, prevent fraud and misuse, and understand how our Service is used, balanced against your rights.
• Legal obligation — to comply with legal, tax, accounting, and regulatory requirements.

5. Health data & explicit consent

Information such as your age, weight, height, and goals is special-category (health-related) data under the GDPR. We only process it to create and adjust your personalised nutrition plans, and we do so on the basis of your explicit consent, which you give when you provide this information. You can withdraw this consent at any time by contacting hello@biovitagym.com; note that without it we may be unable to provide a personalised plan. We do not use your health data for advertising.

6. Payment data

Payments are processed by Stripe. Your full card details are entered directly with Stripe and are not stored on our systems. Stripe acts as an independent controller and/or processor for payment data under its own privacy policy. We receive only limited information, such as the outcome of a transaction and partial card details for reference.

7. Cookies

We use cookies and similar technologies to operate the Service and, with your consent, for analytics and marketing. For full details and how to manage your choices, see our Cookie Policy.

8. Who we share data with

We share personal data only as needed to run the Service, with processors acting on our instructions, including:

• Stripe — payment processing.
• Hosting / infrastructure provider — [HOSTING PROVIDER].
• Email / newsletter provider — [EMAIL PROVIDER].
• Analytics provider — [ANALYTICS PROVIDER].

We may also disclose data where required by law or to protect our rights. We do not sell your personal data.

9. International transfers

Some providers may process data outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as an adequacy decision or the European Commission's Standard Contractual Clauses. You can contact us for more information about these safeguards.

10. How long we keep data

We keep your personal data only as long as necessary for the purposes described here — generally while your account is active and for a reasonable period afterwards. Billing and tax records are kept for the period required by law. Marketing data is kept until you unsubscribe or withdraw consent. When data is no longer needed, we delete or anonymise it.

11. Your GDPR rights

Subject to conditions, you have the right to: access your data; request rectification of inaccurate data; request erasure; restrict or object to processing; request data portability; and withdraw consent at any time (without affecting prior processing). To exercise any right, email hello@biovitagym.com. You also have the right to lodge a complaint with your local supervisory authority — in our case [SUPERVISORY AUTHORITY].

12. Data security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, access controls, and vetted processors. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authority of a breach where legally required.

13. Children's privacy

The Service is intended for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Marketing choices

If you opt in, we may send you our newsletter and marketing about BioVitaGym. You can unsubscribe at any time via the link in any email or by contacting hello@biovitagym.com. Opting out of marketing does not affect essential service messages, such as billing or account notices.

15. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, notify you where appropriate.

16. Contact us

For any privacy question or to exercise your rights, email hello@biovitagym.com or write to [COMPANY LEGAL NAME], [REGISTERED ADDRESS].