Privacy Policy

PRIVACY POLICY

Magda.k Fitness – Sole Trader (United Kingdom)

Effective Date: 6 April 2026

1. Who I Am

Magda.k Fitness (“I”, “me”, “my”) operates as a sole trader in the United Kingdom.

I am the data controller responsible for your personal data collected through Stripe checkout, Google Forms submissions, and email communication.

2. What Data I Collect 

When you purchase or use my services, I may collect:

Personal Identification Data:

- Full name

- Email address

Service Data:

- Exercise videos submitted for review

- Exercise names

- Information provided in submission forms

Health Information:

- Health declarations (PAR-Q responses)

- Confirmation of medical fitness to exercise

Payment Data:

Payments are processed securely via Stripe.

I do not store your card details.

Stripe may collect billing name, billing address, and payment method details under its own Privacy Policy.

3. How Your Data Is Collected

Your data is collected when you:

- Purchase a service via Stripe

- Complete the Google Form submission

- Submit exercise videos

- Communicate via email

4. Why I Collect Your Data (Legal Basis)

Under UK GDPR, I collect and process your data for:

Contractual Necessity:

To deliver your purchased technique review, provide written feedback, and communicate regarding your service.

Legal Obligations:

To maintain transaction records for tax purposes.

Legitimate Interests:

To protect my business, maintain service documentation, and prevent misuse of services.

Health declaration information is processed solely for service safety and risk awareness purposes.

5. How Your Data Is Stored

Your data is stored securely using:

- Google Workspace (Google Forms & Google Drive)

- Email provider

- Stripe (for payments)

Reasonable technical and organisational measures are taken to protect your data.

6. How Long Your Data Is Kept

Personal and transaction data may be retained for up to 6 years for tax and legal record-keeping purposes.

Exercise videos may be deleted earlier at my discretion once feedback has been delivered.

Submission records may be retained where necessary for legal protection.

7. Who Your Data Is Shared With

Your data is not sold. It may be processed by:

- Stripe (payment processing)

- Google (form and file storage)

- Email service provider

These third-party providers operate under their own privacy policies and security standards.

8. International Data Transfers

Some service providers (such as Google and Stripe) may process data outside the UK. Where this occurs, appropriate safeguards are in place in accordance with UK GDPR.

9. Your Rights Under UK GDPR

You have the right to:

- Access your personal data

- Request correction of inaccurate data

- Request deletion (where legally possible)

- Object to processing

- Request restriction of processing

- Lodge a complaint with the Information Commissioner’s Office (ICO)

Certain data may be retained where legally required (e.g., tax records).

Should you have any questions about this Privacy Policy or wish to exercise your data protection rights, you must contact Magda.k Fitness at: pt.magdakfitness@gmail.com

10. Data Security

While reasonable security measures are implemented, no online transmission is completely secure.

By using this service, you acknowledge the inherent risks of online data transmission.

11. Changes to This Policy

This Privacy Policy may be updated periodically.

The current version will always be available on my website.