Privacy policy

The controller of your data is me, Edvinas Maksimovas. Write to me by email about anything to do with your data.

Name

Edvinas Maksimovas

Email

maximator369@outlook.com

When you ask for the free weekly report template, I record your email address, the page you signed up on, the time, and a masked form of your IP address (more on that below).

Purpose: to send you the programme and emails related to it. Basis: your consent, given by ticking the box. Without the tick the form does not accept the address.

I keep the address until you withdraw your consent. You can do that at any time: write to me at maximator369@outlook.com and I will delete it.

The form collects:

• your name and email address;
• what you are after, in one sentence;
• how many times a week you can train and where you will train;
• the plan you chose and the language you filled the form in;
• technical data: the time of submission, a masked form of your IP address and your browser’s identification string (user agent).

It asks nothing about your health. I ask about that only if you choose to pay straight away, without a call: those answers are stored separately and described in the next section.

Purpose: to judge whether I can help you and to write your plan. Basis: the contract. Without this data I could not offer or provide the service.

How long: the system has no fixed deletion date for this part of the form yet. I keep it while we work together and while it may be needed to answer questions about the service. You can ask me to delete it at any time.

When the form arrives, the system sends two emails: a confirmation to you that it was received, and a note to me with your name, the plan you chose and the status of the application. That note contains no health answers.

If you choose the call, the form then sends you on to my calendar page. Its address carries your name and email so you do not type them again. None of that page’s code runs on this site: it is a link, nothing more.

While you fill the form in, your answers are kept for the moment in your own browser (sessionStorage), so a page reload does not lose them. They are sent to the server only when you press the last button. If the form stops earlier, for example because of age, nothing is sent. The browser deletes the answers when you close the tab, so on a shared computer close the tab when you are done.

I ask about your health in one case only: when you want to pay straight away, without a call. Under the General Data Protection Regulation (GDPR) this is special category data, and stricter rules apply to it. These are the questions:

• Has a doctor ever told you that you have a heart condition or high blood pressure??
• Do you feel chest pain at rest or during exercise??
• In the last 12 months, have you lost consciousness or felt severe dizziness??

I ask nothing else, and I collect no document. If a doctor’s clearance is needed, I ask you for it in person.

Basis: your explicit consent. You give it by ticking a separate box under those three questions before payment: without it payment cannot go ahead, and if you choose the call you never see the questions at all. The consent is recorded apart from your agreement to the terms, with its time, the box you ticked, the questions answered and the date of the documents in force at that moment.

How it is kept: health answers go into a separate database table, not together with the rest of the form. The form itself keeps only the status. The system never sends health answers by email.

How long: I keep health answers for no longer than 36 months from the day you send the form. That date is stored with every record, and on that day the record is deleted automatically, without waiting for anyone to remember.

You can withdraw this consent at any time by writing to me at maximator369@outlook.com. I then delete your health answers. Without them I cannot write a safe plan, so supervision cannot continue either.

After payment you get your plan and log your training in a third-party coaching app on your phone. I send the invitation by email. The app holds your plan, your training log and our messages. It is run by another company, which has its own privacy policy.

In online coaching you send a check-in in the app every Monday: your weight and photos from the front and back, and you log your sessions and results there too. Your weight and body photos can be health data. I get them only from you, sent by you, and use them only to follow your progress and adjust your programme.

I publish your photos or results on the site only with your written consent.

Payments are taken by Stripe. The payment page is on Stripe’s own site, so this site never receives or stores your card details.

I pass Stripe your email, the application identifier and the plan you chose, so the payment can be matched to your form. Stripe sends me notices about payments: the amount, the date, and the invoice and subscription identifiers. I keep these as payment records.

Once a payment arrives, the system creates a client record: the email address, name and language from your form, and the dates of the paid period. No health answers are copied into it.

Basis: the contract and accounting obligations. I keep payment records for as long as accounting rules require.

The database never stores your IP address. It stores only a hash calculated from it. The hash is used for two things: to show where a consent came from, and to limit how many forms one network can send in an hour, which keeps automated submissions out.

Like most servers, the server keeps a technical log of requests. That log does contain IP addresses, and it is deleted automatically after about two weeks.

I back the database up every night. The backup is encrypted, kept on the same server and deleted after 14 days, so anything I delete is gone from the backups within 14 days as well.

Basis: a legitimate interest in protecting the site and being able to show the consents it received.

The site uses no analytics, advertising or tracking cookies. It may set one cookie, “NEXT_LOCALE”, which remembers your language when it differs from your browser’s. It is deleted when you close the browser. The payment page’s cookies are set by Stripe.

These rules run only when you choose to pay straight away, without a call. The form then stops before payment if:

• you do not confirm that you are 18 or older;
• you answer “yes” to any of the three health questions.

These are fixed rules, not a judgement of you, and neither one turns you away: in the second case I ask you to book the free call. If you think the form stopped for no good reason, write to me at maximator369@outlook.com and I will decide myself.

I do not sell data or pass it on for advertising. It is handled only by these companies, which provide services to me:

• Hetzner Online GmbH: the server the site and its database run on. The server is in the European Union.
• Stripe: payments.
• Resend: sending email. Resend sees the recipient’s address and the content of the email.
• The coaching app: your plan, training log and messages once we work together.

Stripe and Resend are international companies, so some data may be handled outside the European Union. How they protect it is described in their own privacy policies.

Under the GDPR you have the right to:

• know what data I hold about you and get a copy;
• have inaccurate data corrected;
• have your data deleted;
• have its processing restricted;
• receive the data you gave me in a common machine-readable format and pass it to someone else;
• object to processing based on legitimate interest;
• withdraw your consent at any time, which does not undo what was lawfully done before;
• complain to the Lithuanian supervisory authority, Valstybinė duomenų apsaugos inspekcija (vdai.lrv.lt).

How: write to me at maximator369@outlook.com, ideally from the address you used in the form. I reply within one month. I handle requests myself: the site has no button to download or delete your data.

When I change this document, I update the date at the top of the page. Consents given in the form are recorded with the date of the documents in force at the time, so it is always clear which version you agreed to.