Privacy Policy

This Privacy Policy explains how Aquafit Cyprus ("we", "us", "our") collects and uses personal data when you use aquafitcy.com or attend our classes. We are the data controller under the EU General Data Protection Regulation (GDPR) and the Cyprus data protection law (Law 125(I)/2018).

1. Contact

Aquafit Cyprus - St Raphael Resort, Limassol, Cyprus.
Email: info@aquafitcy.com · Phone: +357 99 584 775

2. What we collect

• Account data: name, email, phone, password (hashed).
• Booking data: classes booked, credits/packages purchased, waitlist entries.
• Health disclosures: only information you choose to share with the instructor (e.g. pregnancy, injuries).
• Payment data: processed directly by Stripe. We never see or store your full card number.
• Communications: messages you send us via the contact form, email or WhatsApp.
• Technical data: IP address, device and browser info, and, if you consent, Google Analytics usage data.

3. How we use it

• To provide bookings, packages, waitlists and transactional emails (contract, Art. 6(1)(b)).
• To send booking, cancellation and purchase confirmations (contract).
• To run the site securely and prevent abuse (legitimate interest, Art. 6(1)(f)).
• To meet legal obligations, including tax and accounting (Art. 6(1)(c)).
• To measure usage with Google Analytics only where you accept analytics cookies (consent, Art. 6(1)(a)).

4. Sharing

We share data only with the processors we need to run the service:

• Stripe Payments Europe, Ltd. (payments)
• Supabase / Lovable Cloud (hosting and database)
• Resend (transactional email)
• Google Ireland Ltd. (Google Analytics, only with consent)

We do not sell your personal data.

5. International transfers

Some processors may transfer data outside the EEA. Where they do, transfers are covered by the European Commission's Standard Contractual Clauses.

6. Retention

Account and booking data are kept while your account is active and for up to 7 years afterwards to meet accounting obligations. Analytics data is retained per Google's default (14 months).

7. Your rights

You have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. To exercise any right, email info@aquafitcy.com. You can also complain to the Office of the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).

8. Cookies

We use essential cookies to keep you signed in and to process payments. With your consent, we also load Google Analytics to understand how the site is used. You can change your choice at any time by clearing your browser storage for this site.

9. Changes

We may update this policy. Material changes will be announced on the site.