1. Who processes your data
The data controller is Soul Training. Contact details for any data protection question are on the Contact page.
Legal
Privacy policy
Draft text. It must be reviewed by a lawyer and the company details (legal name, tax ID, registered address) filled in before launch.
Soul Training — business entity details will be added before launch.
2. What we collect
What you enter yourself: name, email, phone and the content of your message. If you use the free assessment: goal, activity level, height, weight, age and sex. If you are a client: training data, measurements, nutrition entries and any progress photos you upload.
3. Why we process it
To answer your enquiry, build and run your program, process payment and meet the legal obligations that come with issuing invoices.
4. Sensitive data
Progress photos and body data are visible only to you and your coach. They are never used in marketing without your explicit written consent, and they never end up in analytics or logs.
5. Who we share it with
Only processors required to run the service: Stripe for payments, Cloudflare for hosting and storage, Resend for transactional email. Data is never sold or handed to advertisers.
6. How long we keep it
Enquiry data is kept for up to two years. Client data is kept for as long as the account exists and one year after deletion, except accounting records, which the law requires us to keep for eleven years.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Export and account deletion are available directly in your profile settings in the portal. You may also lodge a complaint with the Croatian Personal Data Protection Agency.
8. Cookies
The public site uses only essential cookies — remembering your chosen language and the security cookies for portal login. No advertising cookies and no cross-site tracking.