Privacy Policy

1. Who we are

This website is operated by Panagiotis Petridis, an individual fitness coach trading as The Forge (“we”, “us”, “our”). The Forge is not a company. It is a sole trader business run by Panagiotis Petridis in his own name.

• Business address: Dionisiou Papagiannoupoulou 10, 4156 Limassol, Cyprus
• Contact email: petrides1997@gmail.com

We are the data controller for the personal information described in this policy, which means we decide how and why it is used.

2. What information we collect

Information you give us

When you complete the coaching application form on this site, we collect:

• Your name
• Your email address
• Your phone number (optional)
• Your age range
• Your primary goal and how many days per week you can train
• Any injuries, medical conditions or limitations you choose to tell us about
• Anything else you write in the free-text message field
• Your consent to be contacted about your application, and, if you tick the optional box, your consent to receive occasional emails from us

We also collect any information you send us directly by email, phone or messaging apps.

Information about your visit

This site does not use advertising or profiling trackers, and does not follow you across other websites. We use Cloudflare Web Analytics, a privacy-focused, cookieless service that produces aggregate visitor statistics without fingerprinting individual visitors. Our hosting provider and the other services described in our Cookie Policy may also process technical data such as your IP address, browser type, device type and the pages you request, for security and delivery purposes.

3. Health information (special category data)

Information about injuries, medical conditions, medication, pregnancy or other health matters is treated as a special category of personal data under the GDPR. We only process it where you have given your explicit consent by voluntarily providing it, and we use it solely to assess whether coaching is appropriate for you and to design a programme that is safe for you.

Please share only what is relevant. You can withdraw your consent at any time by emailing us, and we will delete this information, although we may then be unable to continue coaching you safely.

4. Why we use your information, and our legal basis

5. Who we share it with

We do not sell your personal information and we do not share it for third-party advertising. We share it only with service providers who process it on our behalf under contract:

• Formspree: receives and delivers submissions from our application form
• Website host: Hetzner Online GmbH, whose servers are located in the European Union
• Email provider: Google (Gmail)
• Website analytics: Cloudflare, for cookieless aggregate visitor statistics
• Professional advisers, accountants or authorities where we are legally required to disclose

6. International transfers

Some of the providers above may store or process data outside the European Economic Area. Where that happens, the transfer is protected by an adequacy decision of the European Commission or by Standard Contractual Clauses. You can ask us for details of the safeguards used.

7. How long we keep it

• Application details (your name, phone number, age range, goals, health notes and message): up to 12 months after we last heard from you, then deleted
• Your email address, where you opted in to marketing: kept until you unsubscribe or ask us to delete it. There is no fixed end date, and every marketing email includes an unsubscribe link.
• Client records: for the duration of coaching and up to 6 years afterwards, in line with limitation periods
• Health information: deleted when coaching ends, unless we must keep it to defend a legal claim
• Invoices and accounting records: as required by Cypriot tax law, normally 6 years

8. Your rights

Under the GDPR you have the right to:

• Access a copy of the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased where there is no continuing reason for us to hold it
• Restrict or object to how we use it
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, without affecting processing already carried out

To exercise any of these rights, email petrides1997@gmail.com. We will respond within one month. If you are not satisfied with our response, you can complain to the Cypriot supervisory authority, the Office of the Commissioner for Personal Data Protection, or to the data protection authority of the country you live in.

9. Security

We use appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS), access-controlled accounts and reputable providers. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Children

Our coaching is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes affecting active clients will be communicated by email.

12. Contact

Questions about this policy or about your data: petrides1997@gmail.com.