1. Data Controller
Finally Fit ("we", "the service") is the data controller for the personal data processed through the finally.fit service. We comply with applicable data protection legislation, including the GDPR.
Contact: info@finally.fit
2. What data we collect
We collect the following data to provide our service:
Data you provide
- First name
- Email address
- Wellness quiz responses (goals, exercise habits, diet, sleep, stress)
- Biometric data (height, weight, age) - only if you provide it
Automatically collected data
- Browser type and version
- Operating system
- IP address (anonymized)
- Site usage data (pages visited, quiz progress)
3. Why we collect data
We use your data for the following purposes:
- Creating a personalized wellness analysis
- Providing tailored recommendations
- Sending newsletters and marketing communications (with your consent)
- Developing and improving the service
- Providing customer support
4. Legal basis for data processing
We process your personal data on the following grounds (GDPR Article 6):
- Consent: You have given your consent to the processing of your data
- Contract: Processing is necessary to provide the service
- Legitimate interest: Developing and improving the service
5. Cookies
We use cookies to improve your experience:
- Essential cookies: Required for the service to function
- Analytics cookies: Help us understand how the site is used
- Marketing cookies: Used for targeted advertising (with your consent)
You can manage your cookie settings through your browser settings.
6. Sharing data with third parties
We do not sell your personal data. We only share data with the following trusted partners:
- Email service provider (for sending newsletters)
- Analytics tools (anonymized usage data)
- Payment service providers (for processing payments)
All our partners comply with GDPR requirements.
7. Data retention and location
We retain your data only for as long as necessary:
- Quiz responses: until you request deletion
- Email address: until you unsubscribe from the newsletter or request deletion
- Analytics data: 26 months (anonymized)
Your data is stored on secure servers. Data may be transferred internationally with appropriate safeguards in place.
8. Your rights
Under the GDPR, you have the following rights:
- Right of access: You can request a copy of your data
- Right to rectification: You can request correction of inaccurate data
- Right to erasure: You can request deletion of your data
- Right to restrict processing: You can request restriction of processing
- Right to data portability: You can request your data in a portable format
- Right to withdraw consent: You can withdraw your consent at any time
To exercise your rights, contact us at: info@finally.fit
9. Data security
We protect your data with appropriate technical and organizational measures, including:
- SSL/TLS encryption for all data transfers
- Access control and restriction of user permissions
- Regular security audits
10. Changes to this privacy policy
We may update this privacy policy from time to time. We will notify you of significant changes on our website or by email.
11. Supervisory authority
If you believe that the processing of your personal data violates data protection legislation, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
12. Contact
For questions regarding data protection, please contact us:
Finally Fit
Email: info@finally.fit
Location: Dubai, UAE