Privacy Policy

1. Data controller

The data controller is:

Aw Coaching Online Limited
Pod 2, The Old Station House, 15a Main Street,
Blackrock, Dublin, A94 T8P8, Irlande
Company Number : 722707
Email : contact@methodedelavier.com

2. Data we collect

We collect the following data:

2.1 Identification and account data

• First name, last name
• Email address
• Phone number (optional)
• Date of birth, gender (optional)
• Profile picture (optional)
• Encrypted authentication credentials (hashed password)

2.2 Health and fitness data (Health)

When necessary for client follow-up and service delivery:

• Body measurements
• Sports activity
• Nutritional data
• Progress photos
• Self-reported wellness data
• Personal goals

All this information is entered voluntarily by the user or their coach directly in the provided services.

2.3 Communication data

• Messages exchanged
• Shared documents and files
• Questionnaire responses
• Electronically signed contracts

2.4 Technical and device data

• Device model, OS version, app version, language
• IP address and approximate region
• Crash reports and diagnostic logs
• Push notification token

3. How we use your data

Your data is used to:

• Create and secure your account
• Provide purchased services and content
• Track your program progress and goals
• Enable communication between client and coach
• Send service-related notifications
• Fix bugs and maintain service availability
• Comply with legal obligations

We never use health and fitness data for advertising, profiling, or resale.

4. Legal basis (GDPR)

Data processing is based on:

• Contract performance: to deliver our services
• Explicit consent: where required, including certain health-related processing
• Legitimate interest: to improve service quality and security
• Legal obligation: to retain invoicing/accounting records

5. Data retention period

We apply the following retention periods:

• Account and profile data: for the duration of the commercial relationship
• Health and fitness data: while the account remains active
• Messages and shared documents: for the duration of the relationship
• Technical logs and crash reports: maximum 90 days
• Inactive accounts: deleted after 24 months of inactivity
• After a deletion request: active data erased within a maximum of 30 days
• Accounting records: up to 10 years when legally required

6. Who can access your data

Your data may be shared with:

• Authorized coaches and administrators of Méthode Delavier
• Technical processors bound by data processing agreements
• Payment providers (for transaction processing)
• Hosting providers (Vercel)
• Public authorities when required by law

We never sell your personal data.

7. Your rights (GDPR)

Under GDPR, you have the following rights:

• Right of access: obtain a copy of your data
• Right to rectification: correct inaccurate data
• Right to erasure: request deletion of your data
• Right to restriction: restrict data processing
• Right to portability: receive your data in a structured format
• Right to object: object to certain processing

To exercise these rights, contact us at: contact@methodedelavier.com

8. Deletion of your data

You can request deletion of your account and associated data at any time:

1. From your personal account area when this feature is available
2. Via the contact form on the website
3. By email at: contact@methodedelavier.com

After verification of your request, active data is deleted within a maximum of 30 days and backups are overwritten within a maximum of 90 days, subject to legal retention obligations.

9. Cookies

Our website uses cookies to:

• Essential cookies: required for core site functionality
• Performance cookies: to analyze site usage
• Functional cookies: to remember your preferences

You can manage cookie preferences through your browser settings.

10. Security

We implement appropriate technical and organizational safeguards to protect data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of sensitive data and the use of secure protocols (HTTPS/TLS).

11. International transfers

When certain technical providers process data outside the European Union, GDPR-compliant safeguards are implemented (including appropriate contractual clauses and security guarantees).

12. Minors

Services are not intended for individuals under 16 years old. If we learn that a minor has provided personal data without appropriate authorization, we will take the necessary steps to delete that data.

13. Policy updates

We may update this privacy policy at any time. Changes are published on this page with an updated date. We encourage you to review this page regularly.

14. Contact

For any question regarding this policy or your personal data:
Email : contact@methodedelavier.com

You may also lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés): www.cnil.fr