Legal
Privacy Policy
We respect your privacy. This policy explains, in plain language, how personal data is processed when you visit coachingnolimits.com, what your rights are and how to use them.
Who we are
No Limits Coaching, the data controller of this Website.
What we collect
Only the messages you send us and basic technical data.
What we never do
Sell your data, profile you or ask for health data here.
Your control
Access, correct or delete your data any time by email.
01
Who we are
The data controller is [LEGAL NAME OF THE COMPANY], [REGISTERED ADDRESS], [VAT / TAX NUMBER], operating under the brand No Limits Coaching (“we”, “us”).
You can contact us about anything in this policy at [email protected]. [If you have appointed a Data Protection Officer, add the name and email here. Otherwise delete this note.]
02
Scope of this policy
This policy applies to the website coachingnolimits.com (the “Website”), including the blog and the contact page.
- It does not cover the No Limits members’ mobile app and the coach panel. The app has its own terms and privacy information, given to members when they get access.
- It does not cover websites run by others that we link to. Their owners are responsible for their own policies.
03
What data we process
We keep the data we collect to the minimum needed. Here is what we process through the Website:
| Category | Examples | Where it comes from |
|---|---|---|
| Messages you send us | Name, email address, phone or WhatsApp number, the content of your message | You, when you write to us by email or WhatsApp |
| Technical data | IP address, browser and device type, pages visited, date and time of access | Collected automatically by our servers and security tools when you visit |
| Cookie data | Identifiers set by the Website or by our security provider | Your browser, see section 8 |
We do not ask for health data through the Website. Please do not include health information in your messages unless it is necessary to answer your question.
04
Why we use your data and the legal basis
Under the GDPR we need a legal basis for each use of your data:
| Purpose | Data | Legal basis |
|---|---|---|
| Answer your questions and requests | Messages you send us | Taking steps at your request before a contract, or our legitimate interest in answering you (art. 6(1)(b) and (f)) |
| Keep the Website secure, fast and working | Technical data, security cookies | Our legitimate interest (art. 6(1)(f)) |
| Comply with legal obligations | Any data we are legally required to keep or disclose | Legal obligation (art. 6(1)(c)) |
| Non-essential cookies or analytics, if we ever add them | Cookie and usage data | Your consent (art. 6(1)(a)) |
05
Who receives your data
We do not sell your personal data. We share it only with service providers that help us run the Website, under agreements that protect your data:
| Provider | What it does for us | Data involved |
|---|---|---|
| Hostinger | Hosting of the Website and our email | Website files, server logs, emails we receive |
| Cloudflare | Security, performance and content delivery | Technical data (your IP address passes through its network) |
| Google Fonts | Delivers the fonts used on the Website | IP address and browser data when a page loads |
| WhatsApp (Meta) | Messaging, if you choose to contact us there | Your number and messages, under WhatsApp’s own policy |
We may also disclose data to public authorities or professional advisers when the law requires it or to protect our legal rights.
06
International transfers
Some of these providers may process data outside the European Economic Area, including in the United States. When that happens, we rely on safeguards recognised by the GDPR, such as an adequacy decision (for example the EU-US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the safeguards in use. [CHECK THE DATA CENTRE LOCATION OF YOUR HOSTING PLAN IN HOSTINGER hPanel AND ADD IT HERE.]
07
How long we keep your data
| Data | Retention period |
|---|---|
| Messages and emails | As long as needed to answer you, then normally no more than [24] months |
| Server and security logs | Normally [30] days, longer only if needed to investigate a security incident |
| Data we must keep by law (for example accounting records) | For the period the law requires |
When the period ends, we delete or anonymise the data.
08
Cookies and similar technologies
The Website uses only cookies that are strictly necessary to make it work and keep it secure. These do not need your consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| __cf_bm (if present) | Cloudflare | Protects the Website against bots and abuse | About 30 minutes |
| wordpress_* and wp-settings-* (only for logged-in editors) | WordPress | Login and editor preferences. Visitors do not receive them | Session to 1 year |
| [ADD ANY OTHER COOKIE YOU SEE] | [PROVIDER] | [PURPOSE] | [DURATION] |
If we add analytics, advertising or similar tools in the future, we will ask for your consent first and update this policy. You can also block or delete cookies in your browser settings; the Website will still work, though some security features may be affected. [CHECK THE REAL LIST: open the Website, press F12 > Application > Cookies, and update this table.]
09
How we protect your data
We use technical and organisational measures suited to the risk, such as encrypted connections (HTTPS), access controls for the Website administration, security tools provided by our hosting and content delivery providers, and regular updates. No online service can be perfectly secure, so we cannot guarantee absolute security.
10
Your rights
Under the GDPR you have the right to:
- Access your data and receive a copy.
- Correct data that is inaccurate or incomplete.
- Delete your data, in the cases the law provides.
- Restrict how we use your data in certain cases.
- Object to processing based on our legitimate interest.
- Data portability: receive the data you gave us in a common, machine-readable format.
- Withdraw consent at any time, where processing is based on consent. This does not affect what happened before.
To use any of these rights, write to [email protected]. We may ask you to confirm your identity first. We will answer within one month, a period that can be extended in complex cases, and we will tell you if so.
11
Complaints
If you think we have not handled your data properly, please contact us first so we can try to fix it. You also have the right to lodge a complaint with the data protection authority of your country. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).
12
Do you have to give us your data?
You are never required to send us your data. If you choose not to, we may simply not be able to answer your request.
13
Automated decisions
We do not make decisions about you based solely on automated processing, and we do not profile you through the Website.
14
Children
The Website is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has sent us data, please contact us and we will delete it.
15
Links to other websites
The Website may link to other sites, such as social networks or messaging apps. We do not control them and are not responsible for their content or privacy practices.
16
Not medical advice
The content on this Website is for general information and does not replace medical advice. Always speak with a qualified healthcare professional before changing your training, nutrition or lifestyle, especially if you have a health condition.
17
Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The date at the top shows the latest version. For important changes we will make this clear on the Website.