Privacy Policy
Last updated: October 19, 2026
This Privacy Policy explains how we collect, use and protect your personal data when you visit wellbeingpersonaltrainer.com, buy our Products or subscribe to our emails. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended (CCPA/CPRA) and similar laws.
1. Data controller
Iga Pawlicka, trading as Studio Treningu Iga Pawlicka, ul. Kaspra Twardowskiego 4/11a, 65-418 Zielona Góra, Poland. Tax ID: 9730291090. Contact for all privacy matters: igapawlicka@gmail.com.
2. Data we collect
- Account and order data: name, email address, billing country and address, order history, product access records.
- Payment data: processed by Stripe and PayPal. We receive confirmation of payment and limited details (such as the last four card digits), not your full card number.
- Email marketing data: email address, name, subscription preferences, and email engagement (opens and clicks) if you subscribe.
- Technical data: IP address, browser and device type, pages visited, referral source, collected through cookies and similar technologies (see our Cookie Policy).
- Communications: messages you send us and our replies.
- Course activity: lessons completed and progress inside our learning platform.
We do not knowingly collect sensitive health data. Please do not send us medical information.
3. Why we use your data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Processing orders, delivering Products, giving access, support | Performance of a contract |
| Taxes, accounting, legal obligations | Legal obligation |
| Sending marketing emails and newsletters | Consent (you can withdraw at any time) |
| Analytics, advertising and marketing cookies | Consent |
| Site security, fraud prevention, defence of legal claims | Legitimate interests |
| Improving the Site and Products | Legitimate interests |
4. Who receives your data
We share data only with service providers that help us run the business, under data processing agreements: payment providers (Stripe, PayPal), email marketing (MailerLite), web hosting (cyber_Folks), website and learning platform tools (WordPress, WooCommerce and related plugins), analytics and advertising providers (such as Google and Meta, only if you accept the relevant cookies), and accounting and legal advisers. We may disclose data if required by law. We do not sell your personal data.
5. International transfers
We are based in Poland (EU). Some providers are located outside the EU, UK or EEA, including in the United States. Where this happens we rely on adequacy decisions (such as the EU-US Data Privacy Framework where the provider participates) or Standard Contractual Clauses and equivalent safeguards.
6. How long we keep data
- Order and tax records: as long as required by tax and accounting law (in Poland, generally 5 years after the end of the tax year).
- Account data: while your account is active, and then until limitation periods for claims expire.
- Marketing data: until you unsubscribe or withdraw consent.
- Analytics and cookies: according to the cookie durations in our Cookie Policy.
7. Your rights (EU, UK and similar laws)
You have the right to access your data, correct it, delete it, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time (withdrawal does not affect earlier lawful processing). To use these rights, email igapawlicka@gmail.com. We respond within one month. You may also complain to your data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. In the UK it is the Information Commissioner’s Office (ico.org.uk).
8. Your rights in California and other US states
Residents of California and other US states with privacy laws may have the right to know what personal information we collect, use and disclose, to request deletion, to correct inaccurate information, to opt out of the sale or sharing of personal information and of targeted advertising, and not to be discriminated against for using these rights. We do not sell personal information. If you accept advertising cookies, data may be shared with advertising partners, which can count as “sharing” or “targeted advertising” under some laws. You can opt out at any time through the cookie settings link in the footer or by emailing us. We honour recognised opt-out preference signals such as Global Privacy Control where required. To make a request, email igapawlicka@gmail.com. We may need to verify your identity before acting on a request.
9. Marketing emails
We send marketing emails only with your consent. Every email contains an unsubscribe link, and you can also write to us to stop receiving them. We will still send essential messages about your orders and access.
10. Security
We use appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls and trusted processors. No system is completely secure, and we cannot guarantee absolute security.
11. Children
Our Products are intended for adults. We do not knowingly collect data from children under 16 (or the applicable age of digital consent in your country). If you believe a child has given us data, contact us and we will delete it.
12. Changes
We may update this Privacy Policy. The date at the top shows the latest version. For significant changes we will notify you on the Site or by email.
13. Contact
Iga Pawlicka, Studio Treningu Iga Pawlicka, ul. Kaspra Twardowskiego 4/11a, 65-418 Zielona Góra, Poland. Email: igapawlicka@gmail.com.