ULTORA Fitness Privacy Policy

I am committed to protecting and respecting your privacy.

This Policy explains when, why, and how I collect personal information about people who visit the https://www.ultorafitness.com website, how I use it, the conditions under which I may disclose it to others, and how I keep it secure. This privacy policy applies to the website and all products and services offered by me through ULTORA Fitness.

This Policy may change so please check this page regularly to ensure that you’re aware of any changes. By using the website, you agree to be bound by this Policy.

Personal Data Administrator

The administrator of your personal data is Izabella “Toraishya” Szczęsna, located in Kraków, Poland.

Any questions and requests about this privacy policy, my data procedures and policies, should be sent via email at: hello@ultorafitness.com.

What type of information is collected from you?

The personal information I collect may include:

  • Information regarding what pages are accessed and when (anonymous, without cookies; see below).

The personal information you may share with me via forms or any contact may include:

  • Email address,
  • Your name or nickname,
  • Country of residence,
  • Gender,
  • Age,
  • Height,
  • Current weight,
  • Current or past injuries,
  • Chronic diseases,
  • Dietary preferences.

If you enter into a service agreement with me and receive a payment link, your payment information is not held by me, it is collected by my third party payment processor - which is currently Stripe, who specialise in the secure online capture and processing of credit/debit card and transactions. I may hold your billing information for mandatory tax and billing reasons, but I do not have access to your own payment details.

How do I collect information from you?

I obtain information about you when you use the website. For example, when you contact me about services, or when you fill in a form on the website.

The website is hosted on Cloudflare Pages. Like any web server, Cloudflare processes technical data such as your IP address to deliver the website and protect it from abuse. See Cloudflare’s privacy policy.

You may voluntarily share personal data with me via Tally forms by filling out the Apply for coaching form or the PAR-Q health questionnaire on the website. Tally is a form provider based in Belgium (EU). The data you share there is stored by Tally and is available to my account only. By filling out these forms you agree to your data being handled this way. See Tally’s privacy policy.

I collect such personal data to provide personal training & coaching services, and at the very least - to provide the initial personal fitness feedback for your application. This data is accessed only by me. For storing, accessing and reading this data I use Tally, Gmail, Google Drive, Google Docs and Google Sheets. For a summary of Google’s privacy policies please see: policies.google.com/privacy.

You may voluntarily share personal data with me via any of the selected messaging platforms that we end up working on (e.g. email, Instagram Direct Messages, etc.) through regular communication between trainee and trainer. Please refer to the proper privacy policy of respective messaging apps we choose to use as communication means.

If you sign up for race alerts on the website, your email address (and your city, if you give it) is stored by MailerLite, my email provider (based in the EU, Lithuania). You’re only added after you confirm by clicking the link in the email you receive. I use it only to send you the emails you signed up for, and every email has an unsubscribe link. The legal basis is your consent, which you can withdraw at any time by unsubscribing. See MailerLite’s privacy policy.

I use Cloudflare Web Analytics to see how many people visit the website and which pages they view. It does not use cookies, does not store your IP address, and does not track you across websites. See Cloudflare Web Analytics privacy.

I advertise on Facebook and Instagram. Those platforms handle your data under their own terms: facebook.com/privacy/policy. This website does not run any Meta tracking (no pixel), so clicking an ad does not tell Meta anything about what you do here. If an ad I run has an option to send me your details (e.g. a contact form inside Instagram), I may use them to reply to you.

How is your information used?

I may use your information to:

  • carry out my obligations arising from any contracts entered into by you and me;
  • collect feedback on the services I provide;
  • notify you of changes to my services;
  • send you communications which you have requested and that may be of interest to you. These may include information about my products and services, as well as promotions and special offers.

I regularly review my retention periods for personal information. I am legally required to hold some types of information to fulfill my statutory obligations. I will hold your personal information on my systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with me.

How do I store your information?

Your data is stored electronically on secure servers hosted by US and European service providers used by me. By using my website and services you agree for your data to be collected, handled, stored, processed and accessed via one or more of the following:

  • Cloudflare (US-based) - website hosting and anonymous analytics, mandatory.
  • Tally (EU-based) - when you fill in a form.
  • MailerLite (EU-based) - only if you sign up for emails.
  • Google (US-based) - mail service provider mandatory when sending me any email; storage of client documents.
  • YouTube (Google, US-based) - only if you press play on an embedded video.

Who has access to your information?

When data is collected because you are using my website, are contacting me through my website or sign up form, only I will have access to your information.

When you make a payment for my services, your information is collected by my third party payment processor (currently Stripe) in order to process the transaction. This is an automated process. Only I, as an individual person, will have access to your billing and contact information, but I will not be able to access your payment information which is securely handled by my payment processor.

I will not sell or rent your information to third parties.

I will not share your information with third parties for marketing purposes.

Third Party Product and Service Providers: I will not release your information to any other third parties for them to use for their own direct marketing purposes, unless you have requested me to do so, or I am required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

What are your data protection rights?

I would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request me for copies of your personal data.

The right to rectification – You have the right to request that I correct any information you believe is inaccurate. You also have the right to request me to complete the information you believe is incomplete.

The right to erasure – You have the right to request that I erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that I restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to my processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that I transfer the data that I have collected to another organization, or directly to you, under certain conditions.

The accuracy of your information is important to me. If you make a request, I have one month to respond to you. If you would like to exercise any of these rights, please contact me via email: hello@ultorafitness.com

Your Choices

You have a choice about whether or not you wish to receive information from me. If you do not want to receive direct marketing communications from me about my services, then you can contact me to remove your emails and other contact information from my lists.

I will not contact you for marketing purposes by email unless you have given your prior consent.

I will never contact you for marketing purposes by post, phone or text message.

Security precautions in place to protect the loss, misuse or alteration of your information

When you share personal information with me, I take steps to ensure that it’s treated securely. The website is served only over HTTPS, which ensures that all data passed between the web server and browsers remains private and integral through encryption.

Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while I strive to protect your personal information, I cannot guarantee the security of any information you transmit to me, and you do so at your own risk. Once I receive your information, I make my best effort to ensure its security on my systems.

Profiling

I may analyze your personal information to create a profile of your interests and preferences so that I can contact you with information relevant to you. I may also use your personal information to detect and reduce fraud and credit risk.

Cookies

This website does not set any cookies of its own and does not use any tracking or advertising cookies, so there is no cookie banner.

Embedded content – Videos are embedded from YouTube (privacy-enhanced mode) and Instagram. They only load, and may set cookies, after you press play. The forms are embedded from Tally.

Website analytics (Cloudflare Web Analytics) do not use cookies. If you arrive through a link with a campaign tag (e.g. from my Instagram bio), your browser keeps that tag for the current tab only and sends it along with a form you submit, so I know which links work. It contains no personal data and isn’t stored after you close the tab.

For more information about Google’s Privacy Policy please see: policies.google.com/privacy.

My website may contain links to other websites run by other organizations. This privacy policy applies only to my website, so I encourage you to read the privacy statements on the other websites you visit. I cannot be responsible for the privacy policies and practices of other sites even if you access them using links from my website.

In addition, if you linked to my website from a third party site, I cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

18 or Under

I do not offer services to children under 18 and I am dedicated to protect the privacy of children under 18. Please do not use my website and do not sign up for my services if you are under 18. Dear parent/guardian, if you believe that your child may have accessed my services and I may possess their personal data, please contact me immediately and I will ensure to delete their data as soon as possible.

Transferring your information outside of Europe

As part of the services offered to you through this website, the information that you provide to me is transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of my or my service providers’ servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to your European country of residence. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If I transfer your information outside of the EU in this way, I will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use my services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

Review of this Policy

I regularly review and update this Policy. This Policy was last updated in October 2026.