Privacy Policy

This Privacy Policy explains how FITvena collects, uses, and protects your personal data when you use our marketplace platform. We are committed to handling your data responsibly and in line with the EU General Data Protection Regulation (GDPR).

The data controller is [FITvena legal entity, registered address — placeholder, to be confirmed]. You can contact us about privacy at hello@fitvena.com.

We collect the following categories of personal data:

• Account information — name, email address, password, and role (Client or Trainer);
• Profile information — for Trainers, this may include bio, specialties, qualifications, photos, and pricing;
• Booking data — sessions, programs, schedules, and related details;
• Payment data — processed by Stripe; we do not store full payment-card details;
• Usage data — device, log, and interaction data collected as you use the Platform;
• Communications — messages sent through the Platform and to our support team.

We use personal data to:

• Provide, operate, and maintain the Platform;
• Facilitate bookings and process payments and payouts;
• Communicate with you about your account, bookings, and support requests;
• Improve, personalize, and secure the Platform;
• Comply with legal obligations and prevent fraud or abuse.

Under the GDPR, we process personal data on the following legal bases:

• Performance of a contract — to provide the services you request;
• Consent — where you have given it (for example, certain communications or non-essential cookies);
• Legitimate interests — to operate, secure, and improve the Platform, balanced against your rights;
• Legal obligation — where processing is required by law.

We share personal data only as needed to operate the Platform:

• With Trainers and Clients — the information necessary to fulfil a booking;
• With Stripe — to process payments and payouts;
• With service providers — such as hosting, email delivery, and analytics, under appropriate agreements;
• With authorities — where required by law or to protect rights and safety.

We do not sell your personal data.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Request rectification of inaccurate data;
• Request erasure of your data ('right to be forgotten');
• Request restriction of processing;
• Data portability — receive your data in a portable format;
• Object to certain processing, including direct marketing;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with your local data-protection supervisory authority.

To exercise any of these rights, contact us at hello@fitvena.com.

We retain personal data for as long as needed to provide the Platform and to meet legal, accounting, or reporting obligations. Specific retention periods are [to be defined — placeholder]. When data is no longer needed, we delete or anonymize it.

We use appropriate technical and organizational measures to protect personal data. Payments are handled by Stripe under its own security standards. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, by a service provider), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses [confirm transfer mechanisms — placeholder].

We use cookies and similar technologies. For details on what we use and how to manage them, see our Cookie Policy.

The Platform is not intended for children under [18 / the applicable age — placeholder]. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can remove it.

We may update this Privacy Policy from time to time. We will post the updated version with a new "last updated" date and, where appropriate, notify you.

For privacy questions or to exercise your rights, contact hello@fitvena.com. [Data Protection Officer contact, if appointed — placeholder.]