Data protection

Privacy Policy

Last updated: 12 June 2026

Before publishing: still to fill in — your company/business name ([COMPANY NAME], once you know the registered name) and the data retention period ([e.g. 12 months] in section 4). Update the date at the top when you go live. Have a lawyer review this, especially since health data is processed.

Your privacy matters to us. This policy explains what personal data [COMPANY NAME] ("we", "us") collects about you, why we collect it, how we protect it and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection law.

1. Data controller

The controller responsible for processing your personal data is:
[COMPANY NAME]
Stockholm, Sweden
Email: tildetraining@gmail.com

2. What data we collect

When you fill in an application or enquiry form, or make a purchase, we may collect:

Contact and identity data – name, email address and similar contact details.
Training and lifestyle data – your training background, goals, activity level and available equipment.
Health data – information about injuries, illnesses, health conditions (e.g. answers to health/PAR-Q questions), height and weight. This is sensitive personal data ("special category data") under the GDPR and is handled with particular care.
Purchase and payment data – information about which services you have bought. The card payment itself is handled by our payment provider; we do not store your full card details.

3. Why we process the data and our legal basis

To deliver your service or program (building training and nutrition plans, providing coaching, handling your purchase). Legal basis: performance of a contract.
To process your health data so that your program is safe and tailored to you. Legal basis: your explicit consent. You give this consent actively in the form, and you can withdraw it at any time (see section 7).
To comply with legal obligations, e.g. accounting law. Legal basis: legal obligation.
To respond to enquiries you send us. Legal basis: our legitimate interest in being able to help you.

The processing of health data is based solely on your explicit consent. If you withdraw your consent, we will stop processing this data and delete it, unless we are legally required to keep certain information (e.g. accounting records).

4. How long we keep the data

We keep your data only for as long as needed for the purpose. Health and training data is kept while you are a client and is then deleted within [e.g. 12 months], unless you withdraw your consent earlier. Records required by accounting law are kept for seven years.

5. Who we share data with

We never sell your data. To run our business we use certain providers who process personal data on our behalf (data processors), for example services for forms, payment and email. We have data processing agreements in place with them.

Some of these providers may be based outside the EU/EEA (e.g. in the USA). When data is transferred to a country outside the EU/EEA, we ensure appropriate safeguards are in place, such as the European Commission's standard contractual clauses.

6. How we protect your data

We use appropriate technical and organisational security measures to protect your data against unauthorised access, loss and unlawful processing. Only those who need the data to perform their work have access to it.

7. Your rights

Under the GDPR you have the right to:

request access to the data we hold about you,
have inaccurate data corrected,
have your data erased ("the right to be forgotten"),
withdraw your consent at any time, after which we stop processing the data based on that consent,
request restriction of, or object to, certain processing,
receive your data in a machine-readable format (data portability).

To exercise any of these rights, contact us at tildetraining@gmail.com. You also have the right to lodge a complaint with the supervisory authority, the Swedish Authority for Privacy Protection (IMY).

8. Cookies

Our website may use cookies to make the site work and to improve your experience. You can choose to accept or decline cookies via the notice on the website, and you can change the settings in your browser at any time.

9. Changes to this policy

We may update this privacy policy. The latest version is always published here, with the date of the most recent change shown at the top.

10. Contact

Questions about how we handle your personal data? Get in touch at tildetraining@gmail.com.