Privacy Policy

1. Introduction and Scope

Welcome to YUWANNABEFIT ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy governs the privacy practices for our website (YUWANNABEFIT.com) and our digital 1:1 online fitness and nutrition coaching services (collectively, the "Services").

This policy outlines our procedures regarding the collection, use, disclosure, and safeguarding of your precise personal data, health data, and browsing data, establishing compliance with leading global data protection standards (including the principles set forth by the GDPR and CCPA). By accessing our Services or submitting any forms, you consent to the data practices described in this policy.

2. Information We Collect

To provide rigorous and personalized fitness coaching, we collect several categories of information:

3. Legal Basis and Purpose of Processing

We process your personal data under the following legal bases:

• Contractual Necessity: To review your application, determine your eligibility for the coaching program, and—if accepted—deliver personalized digital fitness and nutritional protocols.
• Explicit Consent: For processing "Special Category" health data (injuries, physical stats), precise geolocation data, and for receiving direct marketing communications (newsletters).
• Legitimate Interests: To operate our website securely, prevent automated spam/fraud in our inquiry forms, and analyze anonymized site traffic to improve our business operations.

4. Third-Party Data Sharing and Processors

We do not sell, rent, or trade your personal information. We only share data with carefully vetted third-party service providers (Data Processors) necessary for the operation of our business:

• Hosting & Infrastructure (Vercel): Our website and serverless functions are hosted on Vercel. IP addresses and HTTP requests are processed through their edge network to deliver the website securely and determine generalized geographic regions.
• Database Providers (NeonDB / PostgreSQL): Your submitted form data, including sensitive health inquiries, are securely stored in our encrypted PostgreSQL database hosted by Neon.
• Marketing & Communications (Brevo): If you explicitly opt-in to our newsletter, your name and email address are securely synchronized with Brevo (formerly Sendinblue). Our sales and marketing team uses this platform to send you training tips, nutritional advice, and promotional offers. Brevo processes this data strictly in accordance with their GDPR-compliant privacy policies.
• Legal Compliance: We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g., a court or government agency).

5. Cookies and Tracking Technologies

Our website utilizes cookies and similar tracking frameworks to enhance your user experience, maintain session security, and gather statistical data.

6. Data Security and Retention

Security Measures: We have implemented industry-standard security measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All data transitions between your browser and our servers undergo TLS/SSL encryption.

Retention Schedule: We retain your personal data only as long as necessary:

• Inquiries (Not Accepted): If your coaching application is not accepted, your health and personal data will be purged from our database within 12 months.
• Active Clients: Data will be kept for the duration of your coaching contract and up to 5 years thereafter for legal and tax compliance records.
• Marketing Subscribers: Email data in Brevo is retained indefinitely until you withdraw your consent (unsubscribe).

7. Your Data Protection Rights

Depending on your jurisdiction (such as residents of the EU/UK under the GDPR, or California under the CCPA), you are granted robust rights concerning your personal data:

• The Right to Access: You have the right to request copies of your personal data held by us.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
• The Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data unconditionally from our active databases and marketing platforms, subject to certain legal exceptions (e.g., tax record requirements).
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
• The Right to Object: You have the right to object to our processing of your personal data, particularly regarding direct marketing. Every marketing email contains an automated "Unsubscribe" link.

8. Contacting Our Privacy Team

To exercise any of your rights regarding your data, request an erasure, or if you have questions regarding this Privacy Policy, please deliver a formal request to our designated privacy operational email: