Privacy Policy

Who we are

Athletifyou provides online postnatal restoration and corrective exercise coaching for women. For the purposes of UK and EU data protection law, the "data controller" for the information described in this policy — the person who decides how and why it is used — is Athletifyou, a sole trader established in Czechia.

You can reach us about anything in this policy at info@athletifyou.com. We have not appointed a Data Protection Officer, as we are not required to; enquiries come directly to the practitioner.

Which law applies to you

We are based in Czechia and offer coaching to women there, across the rest of the European Economic Area, and in the United Kingdom. More than one data protection regime can therefore apply, and which one covers you depends on where you are:

• If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply to your information.
• If you are in the European Union or the wider EEA, the EU GDPR (Regulation (EU) 2016/679) applies to your information, because that is where we are established.

The two regimes are near-identical, and the rights described in Your rights are the same under both. Where this policy names a UK law or a UK regulator, the equivalent in your own country applies to you if you live in the EEA. Where the two differ, we apply whichever gives you more protection rather than asking you to work out which one you fall under.

What this policy covers

This policy explains what personal information we collect about you, why we collect it, who we share it with, how long we keep it and what rights you have. It applies to:

• visitors to this website;
• people who apply for or book a free consultation, or enquire about coaching;
• clients who purchase and take part in a coaching programme;
• clients using the private client hub; and
• anyone who otherwise corresponds with us.

We are the controller of that information, which means we decide how and why it is used. Where this policy links to another company's service — a booking tool or a payment provider, for example — that company has its own privacy policy governing what it does with your information.

Information we collect

Information you give us

• Enquiry and booking details — your name, email address, telephone number, time zone and the appointment slot you choose, provided when you book a free consultation.
• Application answers — the short form you complete when you ask for a free consultation: how long ago you gave birth, whether you have been cleared to exercise, what you want to work on, and anything you choose to tell us about your birth and current fitness.
• Assessment answers — a fuller questionnaire completed once coaching begins, covering your body and recovery, your sleep, routine and surroundings, and how you are coping emotionally. Some of those questions are personal, every one of them can be skipped, and skipping does not affect your coaching. This includes health information, which is treated with extra care and is covered in the next section.
• Your client hub account — your login details, the messages you exchange with your coach, the programme assigned to you, and any progress you log.
• Payment details — the package you buy, the amount, the date and the reference. Card and bank details are entered directly with our payment provider and are never seen, handled or stored by us.
• Correspondence — emails, messages, and notes we make during or after a session so that we can plan your programme and track your progress.
• Videos and photographs you choose to send us for movement feedback — see Videos and photographs.

Information we collect automatically

Our website does not use analytics or advertising tracking. Our web server keeps standard access logs — your IP address, the pages requested, the date and time, your browser type — which exist to keep the site running securely and to diagnose faults.

Your health information

We collect this information for one reason: exercise coaching cannot be delivered safely without it. Knowing about a caesarean scar, a prolapse diagnosis or a blood-pressure condition is what allows us to adapt or decline exercises rather than put you at risk.

Our lawful basis for processing it is your explicit consent — Article 9(2)(a) of the UK GDPR if you are in the UK, and of the EU GDPR if you are in the EEA. We ask for that consent clearly and separately on the form itself, never bundled into acceptance of our terms. You can withdraw it at any time by contacting us — but please note that if you withdraw it we will usually be unable to continue coaching you safely, and the coaching agreement will end. Withdrawing consent does not affect anything we did lawfully before you withdrew it.

We do not use your health information for marketing, we do not sell it, and we do not share it with anyone except as described in Who we share it with.

Videos and photographs

Movement coaching often works best when we can see you move. You may choose to send us video or photographs of yourself performing an exercise so that we can give you form corrections. This is always optional, and it is always your choice what to record and what to send.

• We use your video or photographs only to assess your movement and give you feedback.
• We will never use them in marketing, on social media, on this website, in testimonials or in teaching material unless you have given us separate, specific, written consent for that particular use. You can refuse, and refusing has no effect on your coaching.
• They are stored privately, are not publicly accessible or indexable, and are not shared with any other client.
• You can ask us to delete any video or photograph at any time, and we will do so promptly.

Please do not send us material that shows anyone other than yourself without their knowledge and agreement.

Why we use it, and our lawful bases

Data protection law requires us to have a lawful basis for everything we do with your information. The bases below are the same under the UK GDPR and the EU GDPR, and the article numbers are identical in both. Ours are:

We do not make any decision about you by automated means, and we do not profile you.

Who we share it with

We do not sell your personal information, and we do not share it for anyone else's marketing. We use a small number of service providers who process information on our instructions, under contract, and who may not use it for their own purposes:

Our intake and assessment forms are not one of these. They run on our own server, so your answers — including everything you tell us about your health — go directly to us and pass through no third party at all. The same is true of your client hub, your messages and any video you upload.

One exception, stated plainly. Our video calls run on Google Meet through an ordinary Google account rather than a business one, so Google provides that service on its own consumer terms and not under a data protection contract with us. What reaches Google is limited to your name, your email address and the call itself — never your intake answers, your assessment, your coaching notes or any video you send us.

We may also disclose information:

• to our accountant or professional advisers, where they are bound by a duty of confidence;
• to our insurer, in connection with a claim;
• where the law requires it, or to protect someone's vital interests — for example, if we genuinely believed there was a risk to your life or to someone's safety; and
• to a buyer, if the business is ever transferred, on the same terms as this policy.

Where your information is held

Our website, your client hub, your assessment answers and any video you send us are held on a single server located in France, inside the European Economic Area. We chose to keep everything in one place, in the EEA, rather than spread it across services in several countries.

If you live in the EEA, that means your information does not leave the EEA at all for the core of what we do. If you live in the UK, it means your information sits in a country the UK has formally recognised as providing adequate protection, so no additional transfer safeguard is needed.

Two things are worth setting out plainly rather than burying:

• Booking and payment. Some of the providers listed above are based outside the UK and the EEA, including in the United States. Where your information reaches them, we rely on the safeguards the law requires — an adequacy decision covering the destination, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, together with checks on the provider's own security.
• Live coaching calls. Our video calls run on Google Meet, provided by Google LLC in the United States, through an ordinary Google account. Because that is not a business account, there is no data protection contract between us and Google to rely on here. We use it because holding the session is what you have asked us to do, and only your name, your email address and the call itself reach Google — never your intake answers, your assessment, your coaching notes or any video you send us.

You can ask us for details of the safeguards applying to any particular transfer, and we will give you a straight answer.

How long we keep it

We keep your information only as long as we need it, then delete it securely.

Where a longer period is needed to defend a legal claim, or the law requires it, we keep the relevant records for that period only.

How we keep it secure

• This website is served over an encrypted HTTPS connection.
• Coaching records and any videos are stored privately, encrypted, and are not publicly accessible.
• Access is limited to the practitioner, protected by strong, unique passwords and two-factor authentication where the provider supports it.
• We keep the amount of information we hold to the minimum the coaching actually requires.
• We choose providers that offer appropriate security and are bound by written terms.

No online service can promise perfect security. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will report it within 72 hours — to the Information Commissioner's Office where UK clients are affected, and to the relevant supervisory authority in the EEA where clients living there are affected — and we will tell you directly where the law requires it.

Your rights

Under both the UK GDPR and the EU GDPR you have the right to:

• Be informed about how we use your information — that is what this policy is for.
• Access a copy of the information we hold about you.
• Rectification — have inaccurate information corrected or incomplete information completed.
• Erasure — ask us to delete your information, where there is no overriding reason for us to keep it.
• Restrict our use of your information while a concern is resolved.
• Data portability — receive the information you gave us in a common, machine-readable format, or have it sent to another provider.
• Object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time, where we rely on it.

To exercise any of these, contact us at info@athletifyou.com. We will respond within one month. There is no charge, and we may ask you to confirm your identity first so that we do not disclose your information to someone else.

Cookies and similar technology

This website sets no analytics, advertising or tracking cookies of its own. We do not track you across websites and we do not build a profile of you.

Our typefaces and all other page assets are served from our own server, so simply reading this website sends your details to nobody but us. In particular, we do not use Google Fonts.

This website makes no third-party connections at all. Reading any page here — including this one — sends your details to nobody but us.

Two services do appear later in the process, and only once you have chosen to use them:

• Calendly — our booking calendar. It is not on this website. It appears on our application site once you have completed the application form, at the point where you choose a time. Until then nothing about your visit reaches Calendly at all. When it does load, Calendly receives your IP address and sets the cookies it needs to work, under its own privacy policy.
• Payment provider — when you click through to pay, the provider's own cookie and privacy terms apply on their page.

You can block or delete cookies through your browser settings; blocking those used by the booking calendar may stop it working.

Children's information

Our coaching is for adults, and this website is not directed at children. We do not knowingly collect information about anyone under 18.

You may mention your baby or child in the course of coaching — a birth date, a feeding pattern, a sleep routine — because it is relevant to your recovery. We treat that information with the same care as your own, use it only to support your coaching, and keep it to a minimum.

Changes to this policy

We may update this policy as the service develops. The version and date at the top of this page always tell you which version applies. If a change materially affects how we use your information — particularly your health information — we will tell current clients directly rather than relying on you to notice.

Questions and complaints

Please contact us first at info@athletifyou.com — most concerns are resolved quickly and we would genuinely like the chance to put things right.

You also have the right to complain to a data protection regulator at any time, and you do not have to come to us first.

If you are in the UK — the Information Commissioner's Office:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline 0303 123 1113 · ico.org.uk/make-a-complaint

If you are in the EEA — the supervisory authority for the country you live in, or the one where you work or where the problem happened. You may also complain to our own lead authority, the Czech Úřad pro ochranu osobních údajů (uoou.cz). The full list of national regulators is published by the European Data Protection Board at edpb.europa.eu. If you are in the UK you can also raise it with our UK representative, named in Our representative in the UK.

Read our Terms of Service