Privacy Policy

We may collect the following categories of personal information:

• Identity data: name, date of birth, gender
• Contact data: email address, phone number, country of residence
• Fitness data: body measurements, training history, general eating habits, goals and, only with your separate explicit consent, progress photos
• Payment data: processed securely through our payment provider (we do not store card details)
• Communication data: messages exchanged during coaching

We use your information to:

• Deliver personalized coaching services
• Track progress and adjust your program
• Communicate with you about your coaching
• Process payments and issue receipts
• Comply with legal and accounting obligations

Data that may reveal your physical condition is treated as a special category of personal data under Article 9 GDPR. It is collected only on the basis of your prior, explicit and freely revocable consent, given separately from the acceptance of these terms, and is used strictly to design and adjust your coaching programme.

Progress photos are optional. They are never published as testimonials or used for marketing without your separate written permission, and your consent may be withdrawn at any time.

We process your data on the following legal grounds:

• Performance of the coaching contract
• Your explicit consent (for health data)
• Compliance with legal obligations
• Our legitimate interest in operating and improving our services

Your data is stored on secure, access-controlled platforms. We apply appropriate technical and organizational measures to protect against unauthorized access, loss, or disclosure. No system is 100% secure, but we take data protection seriously.

We rely on trusted third-party providers to operate our coaching services. Each provider has its own privacy policy:

• Stripe: payment processing
• Calendly: scheduling discovery calls
• Google Forms & Google Drive: intake forms and secure file storage
• Notion: internal coaching workspace
• WhatsApp: client communication
• Email providers: correspondence and notifications

Our website may use cookies to improve functionality and understand how visitors interact with the site. For details, see our Cookie Policy.

We retain personal data only for as long as necessary to provide our services and comply with legal obligations. Coaching records are typically kept for up to 5 years after the end of the client relationship, after which they are securely deleted or anonymized.

If you are located in the EU/EEA, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Restrict or object to certain processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

If you access our services from outside the EU, your data may be transferred to and processed in countries with different data protection laws. We take steps to ensure your data remains protected in accordance with this Policy.

Where processing is based on your consent, for example fitness data or progress photos, you may withdraw that consent at any time by sending a simple request by email, without giving a reason and without any charge. Withdrawal does not affect the lawfulness of processing carried out before it, and where the data is necessary for the coaching service the service may no longer be deliverable.

No decision affecting you is taken solely by automated means and no profiling within the meaning of Article 22 GDPR is carried out. Every programme adjustment is reviewed and decided by a person.

Services are aimed at adults. Persons under 18 may be served only with the written consent of a parent or legal guardian, who provides any consent for the processing of the minor's data and receives this Policy in advance. Where consent is required from a child under 15, it is given or authorised by the holder of parental responsibility, as provided by Greek Law 4624/2019.

The data controller is APOLLONFORGE, a sole proprietorship operating online, established in Greece. Full business registration details, including tax registration number, tax office and commercial registry number, are available on request and are stated on every invoice issued. For any privacy related question or to exercise your rights, contact us at apollonioske@gmail.com. Requests are answered within one month, as provided by Article 12 GDPR.

If you consider that your rights have been infringed, you may lodge a complaint with the Hellenic Data Protection Authority, 1 to 3 Kifisias Avenue, 115 23 Athens, www.dpa.gr.