PRIVACY POLICY
Last updated: July 2026
1. Introduction
ATHL.Exercise (“ATHL”, “we”, “our”, or “us”) is committed to protecting your privacy and ensuring that your personal data is processed responsibly, securely, and transparently.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website, contact us, purchase our services, or participate in any coaching, assessment, education, or outdoor activities offered by ATHL.Exercise.
We believe that your personal information belongs to you. We only collect the information necessary to provide our services, improve your experience, comply with our legal obligations, and maintain the quality and safety of our coaching.
ATHL.Exercise processes personal data in accordance with:
- The Qualified Law 29/2021 on the Protection of Personal Data (LQPD) of the Principality of Andorra;
- The regulations issued by the Agència Andorrana de Protecció de Dades (APDA);
- And, where applicable, principles established under the General Data Protection Regulation (EU) 2016/679 (GDPR).
By using our website or services, you acknowledge that you have read this Privacy Policy.
2. Scope of this Policy
This Privacy Policy applies to personal data collected through:
- the ATHL.Exercise website;
- online coaching enquiries;
- contact forms;
- coaching applications;
- athlete assessments;
- movement and performance evaluations;
- nutrition support services;
- training programmes;
- digital coaching platforms;
- email communications;
- payment processes;
- any other service provided directly by ATHL.Exercise.
This policy does not apply to third-party websites linked from our website. Those websites have their own privacy policies and practices.
3. Definitions
For the purposes of this Privacy Policy:
Personal Data
Any information relating to an identified or identifiable natural person.
Examples include:
- name
- email address
- telephone number
- postal address
- date of birth
- payment information
- assessment results
- training history
- performance metrics
Health Data
Information relating to your physical or mental health, including information that reveals your current or past health condition.
Examples include:
- injury history
- surgeries
- pain reports
- medical restrictions
- medications
- rehabilitation status
- health questionnaires
- medical documentation voluntarily provided by you
Health data is considered a special category of personal data and receives additional protection under applicable legislation.
Processing
Any operation performed on personal data.
Examples include:
- collecting
- recording
- storing
- analysing
- updating
- sharing with authorised service providers
- deleting
Data Subject
The individual whose personal data is processed.
Processor
A third party that processes personal data on behalf of ATHL.Exercise while acting under our documented instructions.
4. Personal Data We Collect
Depending on the services you request, we may collect the following categories of personal information.
4.1 Identification Data
- Full name
- Date of birth
- Sex (where relevant for coaching)
- Emergency contact information
4.2 Contact Information
- Email address
- Telephone number
- Country of residence
- Postal address where required for billing
4.3 Coaching Information
To design, deliver and monitor your coaching programme we may collect:
- sporting background
- coaching objectives
- experience level
- preferred activities
- training availability
- competition schedule
- previous coaching history
- current physical activity
- equipment information where relevant
4.4 Performance Data
Throughout your coaching programme we may collect information including:
- strength assessments
- mobility assessments
- movement screening
- neuromuscular assessments
- performance testing
- training logs
- progression reports
- training compliance
- workload metrics
- recovery information
- subjective wellness questionnaires
- photographs or videos voluntarily submitted for coaching analysis
4.5 Health Information
Where necessary for the safe delivery of coaching services, we may collect health-related information, including:
- injury history
- previous surgeries
- current pain or discomfort
- diagnosed medical conditions voluntarily disclosed
- rehabilitation status
- movement limitations
- medical reports provided by you
- information contained within pre-exercise health questionnaires
This information is collected only where necessary for the provision of our services and is processed with appropriate safeguards.
4.6 Nutrition Information
Where nutrition support forms part of the service purchased, we may collect:
- dietary preferences
- food logs
- body measurements
- nutrition questionnaires
- performance nutrition objectives
- macro tracking information
- adherence reports
ATHL.Exercise does not diagnose medical conditions or provide medical nutrition therapy.
4.7 Payment Information
Payments are securely processed through Stripe.
ATHL.Exercise does not store your complete payment card details.
We retain only the billing information necessary to identify transactions, manage invoices and comply with legal accounting obligations.
4.8 Website Information
When you visit our website we may collect technical information such as:
- IP address
- browser type
- operating system
- referring website
- device information
- website usage statistics
- pages visited
- session duration
Where required by law, this information is collected only after obtaining the appropriate consent through our cookie management system.
5. How We Collect Your Information
We collect personal data directly from you when you:
- complete a contact form;
- apply for coaching;
- purchase a service;
- complete questionnaires;
- submit assessments;
- upload documents or videos;
- communicate by email or messaging applications;
- use our coaching platform;
- complete payment forms;
- subscribe to marketing communications.
We may also receive limited information from trusted service providers that help us deliver our services, such as payment confirmations or coaching platform updates.
ATHL.Exercise does not purchase personal data from third parties, nor do we collect personal information from publicly available sources for marketing purposes.
6. Purposes of Processing and Legal Bases
ATHL.Exercise processes personal data only where there is a valid legal basis to do so and only for the purposes described below.
| Purpose | Personal Data | Legal Basis |
|---|---|---|
| Respond to enquiries and requests | Name, email, phone, enquiry details | Pre-contractual measures requested by the user |
| Assess coaching suitability | Training history, goals, assessment questionnaires, health screening | Pre-contractual measures and, where applicable, explicit consent for health data |
| Deliver coaching services | Identification, training plans, performance data, communication records | Performance of a contract |
| Deliver nutrition support (where included) | Nutrition questionnaires, food logs, progress data | Performance of a contract |
| Monitor athlete progress | Performance assessments, training logs, wellness questionnaires, videos, photographs | Performance of a contract |
| Process payments and issue invoices | Billing information, payment records | Performance of a contract and compliance with legal obligations |
| Maintain accounting and tax records | Invoice and billing information | Compliance with legal obligations |
| Improve coaching quality and internal operations | Anonymous or aggregated coaching data | Legitimate interests |
| Send service communications | Email address, coaching notifications | Performance of a contract |
| Send newsletters and marketing communications | Email address | Explicit consent |
| Comply with legal obligations | Any information required by law | Compliance with legal obligations |
ATHL.Exercise does not sell personal data and does not use your information for unrelated commercial purposes.
7. Processing of Health Data
As an exercise science and coaching business, ATHL.Exercise may process health-related information that is necessary to provide safe and appropriate coaching services.
Health information may include:
- injury history;
- surgeries;
- rehabilitation status;
- movement restrictions;
- pain reports;
- medical questionnaires;
- medical reports voluntarily provided by you;
- exercise limitations;
- other health information relevant to the safe delivery of coaching.
Health information is processed only when:
- you have explicitly provided it;
- it is necessary for the delivery of the coaching services you have requested; and
- appropriate technical and organisational safeguards are in place.
ATHL.Exercise does not use health information for marketing purposes.
Where appropriate, you may choose not to provide certain health information. However, doing so may limit our ability to safely provide coaching services or may prevent us from offering specific services altogether.
ATHL.Exercise does not provide medical diagnosis or medical treatment. Any recommendations provided are intended solely for exercise programming, performance coaching, education and physical preparation.
8. Third-Party Service Providers
To deliver our services efficiently, ATHL.Exercise uses carefully selected third-party providers that process personal data on our behalf.
These providers process personal information only for the purposes required to deliver the services requested and under their own security and privacy obligations.
Current providers include:
| Provider | Purpose |
|---|---|
| Stripe | Secure payment processing |
| Everfit | Coaching platform, programme delivery and athlete monitoring |
| Google Workspace | Business email and document management |
| MailerLite | Email newsletters and service communications |
| WordPress | Website management |
| Google Analytics | Website analytics |
| Meta Platforms | Advertising measurement and website analytics where applicable |
These providers may change over time as our business evolves. ATHL.Exercise will only use providers that offer appropriate safeguards for the protection of personal data.
9. International Data Transfers
Some of the third-party providers used by ATHL.Exercise operate internationally and may process personal data outside the Principality of Andorra.
Where international transfers occur, ATHL.Exercise takes reasonable steps to ensure that personal data is protected through appropriate safeguards in accordance with applicable data protection legislation.
Such safeguards may include:
- adequacy decisions;
- Standard Contractual Clauses approved by competent authorities;
- contractual commitments regarding data protection;
- other legally recognised transfer mechanisms.
10. Data Retention
ATHL.Exercise retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.
The following retention periods generally apply.
| Category | Retention Period |
|---|---|
| Contact enquiries | Up to 12 months after the final communication unless a coaching relationship begins |
| Coaching records | Five years after the end of the coaching relationship unless a longer legal obligation applies |
| Performance assessments | Five years after completion of coaching |
| Health questionnaires and medical documentation | Only for as long as necessary to safely provide services and fulfil legal obligations |
| Nutrition records | Five years after completion of coaching |
| Invoices and accounting records | For the period required under applicable accounting and tax legislation |
| Marketing mailing lists | Until consent is withdrawn or the user unsubscribes |
When personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in accordance with our internal procedures and applicable legal requirements.
11. Marketing Communications
ATHL.Exercise only sends marketing communications where permitted by applicable law.
Where marketing communications require consent, they will only be sent after you have voluntarily opted in.
You may withdraw your consent at any time by:
- clicking the unsubscribe link included in every marketing email;
- contacting us directly at coach@athlexercise.com.
Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.
Service-related communications necessary for the administration of your coaching programme are not considered marketing communications and may continue to be sent while your coaching relationship remains active.
12. Your Rights
Under the applicable data protection legislation of the Principality of Andorra, you have the right to exercise control over your personal data.
Subject to the conditions established by law, you may request:
- Access to the personal data we hold about you.
- Rectification of inaccurate or incomplete personal data.
- Erasure (“right to be forgotten”) where the data is no longer necessary or where processing is no longer lawful.
- Restriction of processing in specific circumstances established by law.
- Data portability, allowing you to receive your personal data in a structured, commonly used and machine-readable format where applicable.
- Objection to processing based on legitimate interests.
- Withdrawal of consent at any time where processing is based on your consent.
The exercise of these rights will not affect the lawfulness of any processing carried out before the request or withdrawal of consent.
To exercise any of these rights, please contact:
Email: coach(a)athlexercise.com
ATHL.Exercise may request reasonable information to verify your identity before responding to your request.
13. Security of Personal Data
ATHL.Exercise is committed to protecting the confidentiality, integrity and availability of the personal data entrusted to us.
We implement appropriate technical and organisational measures designed to reduce the risk of accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures include, where appropriate:
- encrypted website connections (HTTPS);
- password-protected systems and devices;
- restricted access to personal information;
- secure cloud-based service providers;
- regular software updates;
- appropriate authentication procedures;
- secure backup practices;
- staff awareness of confidentiality obligations.
Although we take reasonable steps to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure. Consequently, ATHL.Exercise cannot guarantee absolute security but undertakes to apply industry-standard safeguards appropriate to the nature of the information processed.
14. Cookies and Analytics
ATHL.Exercise uses cookies and similar technologies to improve the functionality, security and performance of the website.
Depending on your preferences and the services implemented, cookies may be used to:
- ensure the proper operation of the website;
- remember your preferences;
- analyse website traffic and visitor behaviour;
- measure the effectiveness of marketing campaigns;
- improve user experience.
Where required by applicable legislation, non-essential cookies will only be placed after obtaining your consent through the website’s cookie management system.
Further information regarding the cookies used on this website can be found in the ATHL.Exercise Cookie Policy.
15. Third-Party Websites
The ATHL.Exercise website may contain links to third-party websites or services.
ATHL.Exercise is not responsible for the privacy practices, security measures or content of external websites.
Users are encouraged to review the privacy policies of any third-party websites they choose to visit.
16. Children’s Privacy
ATHL.Exercise provides coaching services to adults and, in certain cases, to minors participating in organised programmes.
Where coaching services are provided to individuals who have not reached the legal age required to provide valid consent under applicable law, the consent of a parent or legal guardian may be required before personal data is processed.
ATHL.Exercise does not knowingly collect personal information from children where such collection is prohibited by law.
17. Complaints
If you believe that ATHL.Exercise has processed your personal data in a manner that does not comply with applicable data protection legislation, we encourage you to contact us first so that we may attempt to resolve your concerns promptly.
If you remain dissatisfied, you have the right to lodge a complaint with the competent supervisory authority responsible for data protection in the Principality of Andorra.
18. Changes to this Privacy Policy
ATHL.Exercise may update this Privacy Policy from time to time to reflect:
- changes in legislation;
- changes to our services;
- technological developments;
- regulatory guidance;
- improvements to our internal procedures.
Where significant changes are made, we will take reasonable steps to inform users through appropriate channels where required.
The most recent version of this Privacy Policy will always be available on our website.
19. Data Controller & Contact
The Data Controller responsible for processing your personal data is:
ATHL.Exercise
Carretera de Prats 66, 1r 2a
AD100 Canillo
Principality of Andorra
Email: coach(a)athlexercise.com
The Data Controller determines the purposes and means by which your personal data is processed.
For any questions regarding this Privacy Policy or the processing of your personal data, please contact: