ULTORA Fitness Privacy Policy

This Privacy Policy was last updated in June 2024.

I am committed to protecting and respecting your privacy.

This Policy explains when, why, and how I collect personal information about people who visit the https://www.ultorafitness.com website, how I use it, the conditions under which I may disclose it to others, and how I keep it secure. This privacy policy applies to the website and all products and services offered by me through ULTORA Fitness.

This Policy may change so please check this page regularly to ensure that you’re aware of any changes. By using the website, you agree to be bound by this Policy.

The administrator of your personal data is Izabella Jałocha, located in Kraków, Poland.

Any questions and requests about this privacy policy, my data procedures and policies, should be sent via email at: ultorafitness@gmail.com.

The personal information I collect may include:
- Information regarding what pages are accessed and when.

The personal information you may share with me via forms or any contact may include:
- Email address, 
- Your name or nickname, 
- Country of residence, 
- Gender,
- Age,
- Height,
- Current weight,
- Current or past injuries,
- Chronic diseases,
- Dietary Preferences.

If you enter into a service agreement with me and receive a payment link, your payment information is not held by me, it is collected by my third party payment processor - which is currently Stripe, who specialise in the secure online capture and processing of credit/debit card and transactions. I may hold your billing information for mandatory tax and billing reasons, but I do not have access to your own payment details.

I obtain information about you when you use the website. For example, when you contact me about services, when you fill in a form on the website, or when you register your email to a group coaching waitlist.
Since the website is hosted on Webflow, your Log file data is collected by Webflow.
To better understand what data about your session Webflow collects, please read through the Log file information section of Webflow’s privacy policy: https://webflow.com/legal/privacy.

‍You may voluntarily share personal data with me via Google Forms by filling out the Apply Form mentioned on the website. The data you share there goes through Google and is stored within their servers, and is available to my Google account only. By filling out the Apply Form you agree to your data being handled this way.
For a summary of Google’s privacy policies please see: https://policies.google.com/privacy?hl=en-US.
I collect such personal data to provide personal training & coaching services, and at the very least - to provide the initial personal fitness feedback for your application. This data is stored securely on my Google account and is accessed only by me. For storing, accessing and reading this data I use Gmail, Google Forms, Google Drive, Google Docs and Google Sheets. 
‍‍
‍‍You may voluntarily share personal data with me via any of the selected messaging platforms that we end up working on (e.g. Discord, Instagram Direct Messages, Whatsapp, etc.) through regular communication between trainee and trainer. Please refer to the proper privacy policy of respective messaging apps we choose to use as communication means.

I use Google Analytics to collect data about website performance. Your IP Address is used by Google to derive your city's geolocation. For GDPR International Data Transfer compliance, whenever an EU-based visitor's IP Address is analyzed, it is done so via Google's EU-based servers. After performing this operation, your IP Address is discarded.
I don't have access to your IP Address at any point of this operation - I can only access the final product of this operation, which is your geolocation down to city-level granularity.

I use Facebook Ads to collect leads and promote my services on Facebook and Instagram.
These platforms may collect, store and handle your personal data on separate terms, which can be accessed on: https://www.facebook.com/privacy/policy/.
If the ad I run has an option to provide me with such data, I may use it. The range and purpose of processing of this data depends each time on the content and purpose of the ads I run. 
Example #1: I run a promotion to sign up for group coaching with me and the ad contains a sign up form with email. In this case I collect Facebook account information and emails of people who decide to sign up.
Example #2: I promote my services and the ad contains a link to my website. In this case I collect only Facebook account information of people who decide to visit my website.
The legal basis for collecting, storing and processing this data is your consent which you can revoke at any time.

I may use your information to:
- carry out my obligations arising from any contracts entered into by you and me;
- collect feedback on the services I provide;
- notify you of changes to my services;
- send you communications which you have requested and that may be of interest to you. These may include information about my products and services, as well as promotions and special offers.

I regularly review my retention periods for personal information. I am legally required to hold some types of information to fulfill my statutory obligations. I will hold your personal information on my systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with me.

Your data is stored electronically on secure servers hosted by US and European service providers used by me. By using my website and services you agree for your data to be collected, handled, stored, processed and accessed via one or more of the following:
- Webflow (US-based) - mandatory.
- Google (US-based) - website performance mandatory, mail service provider mandatory when sending me any email, extra cookies optional can be opted out.
- Meta (US-based) - optional cookies can be opted out.

When data is collected because you are using my website, are contacting me through my website or sign up form, only I will have access to your information.

When you make a payment for my services, your information is collected by my third party payment processor (currently Stripe) in order to process the transaction. This is an automated process. Only I, as an individual person, will have access to your billing and contact information, but I will not be able to access your payment information which is securely handled by my payment processor.

I will not sell or rent your information to third parties.

I will not share your information with third parties for marketing purposes.

Third Party Product and Service Providers: I will not release your information to any other third parties for them to use for their own direct marketing purposes, unless you have requested me to do so, or I am required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.

I would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
‍The right to access – You have the right to request me for copies of your personal data. I may charge $10 for information requests to cover my costs in providing you with details of the information I hold about you.

‍The right to rectification – You have the right to request that I correct any information you believe is inaccurate. You also have the right to request me to complete the information you believe is incomplete.

‍The right to erasure – You have the right to request that I erase your personal data, under certain conditions.

‍The right to restrict processing – You have the right to request that I restrict the processing of your personal data, under certain conditions.

‍The right to object to processing – You have the right to object to my processing of your personal data, under certain conditions.

‍The right to data portability – You have the right to request that I transfer the data that I have collected to another organization, or directly to you, under certain conditions.

The accuracy of your information is important to me. If you make a request, I have one month to respond to you. If you would like to exercise any of these rights, please contact me via email: ultorafitness@gmail.com

You have a choice about whether or not you wish to receive information from me. If you do not want to receive direct marketing communications from me about my services, then you can contact me to remove your emails and other contact information from my lists.

I will not contact you for marketing purposes by email unless you have given your prior consent.

I will never contact you for marketing purposes by post, phone or text message.

When you share personal information with me, I take steps to ensure that it’s treated securely. The website you visit is set up with an SSL certificate which ensures that all data passed between the web server and browsers remain private and integral through encryption. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers.

Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while I strive to protect your personal information, I cannot guarantee the security of any information you transmit to me, and you do so at your own risk. Once I receive your information, I make my best effort to ensure its security on my systems.

I may analyze your personal information to create a profile of your interests and preferences so that I can contact you with information relevant to you. I may also use your personal information to detect and reduce fraud and credit risk.

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit my website, I may collect information from you automatically through cookies or similar technology.
For further information, visit allaboutcookies.org.

I use cookies in a range of ways to improve your experience on my website and with my services, including:
- Understanding how you use my website;
- Understanding my audience demographics by reviewing geo-location and demographics of website visitors;
- Advertising and analyzing through Facebook Ads (whether from Facebook or Instagram);
- Analyzing through Google Analytics;

There are a number of different types of cookies, however, my website uses:
‍
Functionality – I use these cookies so that I recognize you on my website and remember your previously selected preferences. These could include your cookie preferences themselves.. A mix of first-party and third-party cookies are used. These cookies help me to improve my website and deliver a better, more personalized service. Those cookies are necessary for my and the website’s operation, and thus cannot be opted out of.

Analytics – I use these cookies (specifically Google Analytics) to collect information about your visit to my website, your geolocation, the content you viewed, the links you followed, the form fields you clicked, and other similar website activities. I do this to improve my website and deliver a better, more personalized service.

Marketing – I use these cookies (specifically Facebook Pixel) to collect information about your visit to my website, the content you viewed, the links you followed, and information about your browser and device (e.g. whether you visited from PC, Android or iOS device). I sometimes share some limited aspects of this data with third parties for advertising purposes (e.g. information about what content you accessed on the website following a link from a Facebook ad is shared with Facebook to measure conversion rates). I do not share online data collected by cookies with any advertising partners.

You can opt-out from these cookies (apart from Functionality cookies) using the Preference Manager of my cookie policy pop-up, which should appear on your first visit to my website (and every subsequent visit after you clear your browser cookies).

For more information about Facebook’s Privacy Policy please see: https://www.facebook.com/privacy/policy/
For more information about Google’s Privacy Policy please see: https://policies.google.com/privacy?hl=en-US

It is possible to completely switch off cookies by setting your browser preferences. Turning cookies off may result in a loss of functionality when using my website.

This site is protected by Recaptcha and the Google Privacy Policy and Terms of Service apply.

My website may contain links to other websites run by other organizations. This privacy policy applies only to my website‚ so I encourage you to read the privacy statements on the other websites you visit. I cannot be responsible for the privacy policies and practices of other sites even if you access them using links from my website.

In addition, if you linked to my website from a third party site, I cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

I do not offer services to children under 18 and I am dedicated to protect the privacy of children under 18. Please do not use my website and do not sign up for my services if you are under 18. Dear parent/guardian, if you believe that your child may have accessed my services and I may possess their personal data, please contact me immediately and I will ensure to delete their data as soon as possible.

As part of the services offered to you through this website, the information that you provide to me is transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of my or my service providers' servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to your European country of residence. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If I transfer your information outside of the EU in this way, I will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.

If you use my services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

I regularly review and update this Policy. This Policy was last updated in November 2024.