Privacy Policy

Introduction

baobabznci B.V. ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website baobabznci.live and use our online fitness coaching services.

This policy applies to all personal data processing activities carried out by baobabznci in connection with our services. We are the Data Controller for the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Collection

The data we collect includes personal information that you provide directly to us, information we collect automatically when you use our services, and information we receive from third parties. We collect this information to provide you with the best possible fitness coaching experience.

Information You Provide

• Contact information (name, email address, phone number, postal address)
• Account credentials (username, password)
• Fitness and health information (goals, current fitness level, medical conditions, dietary restrictions)
• Payment information (processed securely through our payment processors)
• Communication data (messages, feedback, support requests)
• Profile information (photos, progress measurements, workout logs)

Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, click patterns)
• Location information (general geographic location based on IP address)
• Cookies and similar tracking technologies

How We Use Your Information

We explain how we use your information to provide and improve our fitness coaching services. The use of your data is essential for delivering personalised coaching experiences and maintaining the quality of our platform.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To provide fitness coaching services you have requested
• Legitimate Interest: To improve our services, prevent fraud, and ensure platform security
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws and regulations

Purposes of Data Processing

• Providing personalised fitness coaching and nutrition guidance
• Creating and managing your account and profile
• Processing payments and managing subscriptions
• Communicating with you about our services
• Tracking your progress and adjusting programmes accordingly
• Providing customer support and responding to inquiries
• Improving our website and services
• Sending marketing communications (with your consent)
• Ensuring platform security and preventing fraud
• Complying with legal obligations

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information in the following circumstances:

• Service Providers: Third-party companies that help us operate our platform (payment processors, email services, hosting providers)
• Fitness Coaches: Assigned coaches who need access to your information to provide personalised services
• Legal Requirements: When required by law, court order, or government authorities
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Safety and Security: To protect the rights, property, or safety of baobabznci, our users, or others

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained for the duration of your account plus 3 years for legal and business purposes
• Fitness Data: Retained for 5 years to track long-term progress and provide historical insights
• Communication Data: Retained for 2 years for customer service and quality purposes
• Financial Data: Retained for 7 years to comply with tax and accounting obligations
• Marketing Data: Retained until you withdraw consent or for 2 years of inactivity

When data is no longer needed, we securely delete or anonymise it in accordance with our data retention procedures.

Your Rights

Under GDPR and other applicable privacy laws, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate or incomplete data
• Right of Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, please contact us using the information provided in the Contact section below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and security
• Secure hosting and backup procedures
• Incident response and breach notification procedures

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protection measures.

International Data Transfers

baobabznci is based in the Netherlands within the European Union. Your personal data is primarily processed within the EU/EEA. If we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes approved by data protection authorities

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our use of cookies, please refer to our Cookie Policy.

You can control cookie settings through your browser preferences, but please note that disabling certain cookies may affect the functionality of our website.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Providing notice through our platform

Your continued use of our services after the effective date of the updated Privacy Policy constitutes acceptance of the changes.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

We are committed to resolving any privacy concerns promptly and will respond to your inquiry within 30 days as required by applicable law.