Privacy Policy

1. Who we are

Elevate Fitness Patras ("we", "us", "our") operates the website at https://elevatefitnesspatras.com and provides personal training and small group coaching services in Patras, Greece.

We are committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.

For any privacy-related questions, contact us at: [email protected]

2. What data we collect

We may collect the following categories of personal data:

• Contact information — name, email address, and telephone number when you submit an enquiry or book a free intro session.
• Communication data — the content of messages you send us via our contact form or by email.
• Usage data — anonymised analytics data about how visitors interact with our website (pages visited, session duration, device type). This data does not identify you personally.
• Cookie data — see our Cookie Policy for full details.

We do not collect sensitive personal data (health, financial, or biometric data) through this website.

3. How we use your data

We use your personal data for the following purposes:

• To respond to your enquiries — when you submit a contact form or book a free intro, we use your name, email, and phone number to get back to you. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
• To provide our services — if you become a member or client, we use your contact details to manage your membership and communicate about sessions. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• To improve our website — anonymised analytics help us understand how visitors use the site. Legal basis: legitimate interests (Art. 6(1)(f) GDPR), subject to your cookie consent.
• To comply with legal obligations — where required by law. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

4. How long we keep your data

We retain enquiry and contact data for up to 2 years from the date of last contact, unless you ask us to delete it sooner or we are required by law to keep it longer.

Member and client data is retained for the duration of the membership and for up to 5 years afterwards for accounting and legal compliance purposes.

Anonymised analytics data has no fixed retention limit as it cannot be used to identify you.

5. Who we share your data with

We do not sell or rent your personal data. We may share it with trusted third parties only where necessary:

• Email service providers — to deliver your enquiry notification to us. These providers process data on our behalf under data processing agreements.
• Analytics providers — anonymised usage data may be processed by analytics tools (e.g. Google Analytics) subject to your cookie consent.
• Legal or regulatory authorities — where required by law or to protect our legal rights.

All third-party processors are required to handle your data securely and in accordance with GDPR.

6. Your rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure — ask us to delete your data ("right to be forgotten").
• Right to restriction — ask us to limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

7. Cookies

Our website uses cookies. For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.

8. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and enquiry data is transmitted securely.

No method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us.

9. International transfers

Your data is processed within the European Economic Area (EEA). Where any third-party service provider processes data outside the EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission).

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: