privacy policy

1. what we collect

Booking data: name, email address, phone number and, optionally, information you choose to share in the notes field (e.g. injuries or pregnancy) when you book a class.

Contact data: information you send us by email or phone.

Minimal technical data needed for the site to function (see the cookie policy). We use no marketing or tracking cookies.

2. why, and on what legal basis

To manage bookings and provide our services — basis: performance of a contract (art. 6(1)(b) GDPR).

For invoicing and tax obligations — basis: legal obligation (art. 6(1)(c) GDPR).

To answer your requests and defend our rights — basis: legitimate interest (art. 6(1)(f) GDPR).

Health information you choose to share (booking notes) is processed solely to adapt your training safely, based on your explicit consent (art. 9(2)(a) GDPR). Providing it is optional.

3. how long we keep data

Booking data: 3 years from your last interaction, for pack records and follow-up requests. Financial and accounting records: as required by law (currently 5–10 years). Optional health notes: deleted on request or at the end of the client relationship.

4. who we share data with

Service providers acting as processors: web hosting and infrastructure (e.g. Vercel Inc., with GDPR-compliant transfer safeguards — standard contractual clauses), class scheduling services and, where applicable, transactional email services. We never sell or rent your data.

Public authorities, only where required by law.

5. your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right to withdraw consent at any time without affecting prior processing.

To exercise your rights, write to hello@bodyreform.ro. We reply within one month.

You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP) — dataprotection.ro, 28-30 G-ral Gheorghe Magheru Blvd., Bucharest.

6. security

We apply appropriate technical and organisational measures: restricted access to data, encrypted communications (HTTPS), and storage with providers holding recognised security certifications.

7. contact

Controller: Health Tech Invest RO S.R.L., CUI RO 54754208, registered office: Calea Moșilor nr. 158, Modul 646, Etaj 4, Camera 4, Sector 2, București, România · hello@bodyreform.ro