PrivacyPolicy

1. Data Controller

Kapratsis Kostas Coaching
[Street Address]
[Post-code, City]
Greece
Email: [email protected]

2. Cookies & Session

This site uses a session cookie to keep you signed in and to protect forms against cross-site request forgery. We don't use the session cookie to track you across other websites. If we add analytics or marketing cookies in the future, this section will be updated and, where required, we'll ask for your consent first.

3. What We Collect

When you create an account, book a consultation, send a message or subscribe to a coaching plan, we collect the information you provide directly — such as your name, email address and, where applicable, the training and nutrition details you share with your coach. Payments are processed by Stripe; we do not store your card details on our servers. Uploaded files (such as progress photos) are stored with our hosting provider.

4. Legal Basis & Health Data

We process your account and payment details to perform our contract with you (your subscription) and to meet our legal/accounting obligations. Nutrition and exercise details you share with your coach — including anything about your health, injuries or medical history — are processed only with your explicit consent, since this can qualify as special category health data under Article 9 GDPR. You can withdraw that consent at any time by contacting us, though this may limit our ability to continue coaching you.

5. How We Use It

We use your information to provide coaching services, manage your subscription, respond to your messages and meet our legal and accounting obligations. We do not sell your personal data.

6. How Long We Keep It

We keep account and coaching data for as long as your account is active, and for a reasonable period afterwards in case you resubscribe. Billing records are kept for as long as Greek tax law requires. If you ask us to delete your account, we delete or anonymise your data except where we are legally required to keep it (for example, invoicing records).

7. Who We Share It With

We share data with the service providers that run this platform: Stripe (payment processing) and our cloud hosting/storage provider. Some of these providers may process data outside the EU/EEA; where that happens, they do so under safeguards recognised by GDPR (such as the EU-US Data Privacy Framework or standard contractual clauses). We do not sell or rent your data to third parties for marketing.

8. Your Rights

You can ask to access, correct, delete or export the personal data we hold about you, object to how we use it, or withdraw consent, at any time by contacting us at the email address above. You can also lodge a complaint with the Hellenic Data Protection Authority at dpa.gr .