Privacy Policy

Last updated: 15 January 2026

Introduction

OrbitAnalyst B.V. ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect the data we collect from visitors to our website and users of our fitness services.

As a company registered in the Netherlands (Registration Number: NL61827394), we comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller Information

OrbitAnalyst B.V. is the data controller for the personal information we collect and process. You can contact us regarding any privacy-related matters:

Company: OrbitAnalyst B.V.

Address: Beukenlaan 283, 1368 YU Almere, Flevoland, Netherlands

Email: privacy@orbitanalyst.pro

Phone: +31 369700937

Data We Collect

We collect various types of personal information depending on how you interact with our services. The data collection includes information you provide directly and information collected automatically through our website and services:

Information You Provide

  • Contact information (name, email address, phone number)
  • Membership and account details
  • Health and fitness information relevant to our services
  • Payment and billing information
  • Communication preferences
  • Feedback, reviews, and correspondence

Information Collected Automatically

  • Website usage data and analytics
  • Device information and IP addresses
  • Cookies and tracking technologies data
  • Browsing behaviour and preferences

How We Use Your Information

We use of your data is based on legitimate business interests, contractual necessity, or your explicit consent. We use your personal information for the following purposes:

  • Providing fitness services, personal training, and wellness programmes
  • Managing memberships, bookings, and payments
  • Communicating about services, schedules, and important updates
  • Improving our services and developing new programmes
  • Marketing communications (with your consent)
  • Ensuring facility safety and security
  • Complying with legal obligations
  • Website functionality and user experience enhancement

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary for membership services and bookings
  • Legitimate Interests: Website analytics, service improvement, and business operations
  • Consent: Marketing communications and optional data processing
  • Legal Obligation: Compliance with health and safety regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell your personal information. We may share your data with trusted third parties only when necessary:

  • Service providers (payment processors, website hosting, analytics)
  • Professional advisors (legal, accounting, insurance)
  • Regulatory authorities when required by law
  • Business partners with your explicit consent

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy. Our data retention periods are:

  • Active member data: For the duration of membership plus 3 years
  • Financial records: 7 years as required by law
  • Marketing data: Until you withdraw consent or 3 years of inactivity
  • Website analytics: 26 months (Google Analytics default)

After these periods, we securely delete or anonymise your personal information unless longer retention is required by law.

Your Rights

Under GDPR and applicable data protection laws, your rights include:

  • Right of Access: Request information about data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at privacy@orbitanalyst.pro or +31 369700937.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

  • Encrypted data transmission and storage
  • Regular security assessments and updates
  • Access controls and staff training
  • Secure payment processing systems

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) when we use third-party services. We ensure such transfers are protected by appropriate safeguards, including adequacy decisions or standard contractual clauses approved by the European Commission.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes through our website or direct communication. The "last updated" date at the top of this policy indicates when the most recent changes were made.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us:

Privacy Team: OrbitAnalyst B.V.

Email: privacy@orbitanalyst.pro

Phone: +31 369700937

Address: Beukenlaan 283, 1368 YU Almere, Flevoland, Netherlands

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable law.