Fitbuddie B.V. takes the privacy of its customers seriously. This policy explains which personal data we collect, why we collect it, how long we keep it and what rights you have. We never share your health data with third parties.
1. Who we are
Data controller: Fitbuddie B.V.
Address: Hofplein 20, 3032 AC Rotterdam, the Netherlands
Chamber of Commerce (KvK): 80216161
VAT number: [TODO]
Email: privacy@fitbuddie.nl
Customer service: support@fitbuddie.nl
2. What personal data we process
We process the following categories of personal data:
- Account data: name, email, password (hashed).
- Order data: billing and shipping address, phone, payment method (processed by Mollie — we do not see full card details).
- Communication: emails and support messages.
- Health data from the device (Pro X): heart rate, HRV, sleep, stress, GPS for workouts. This data lives only on your phone and on our EU servers (Frankfurt) and is never sold or shared with ad networks.
- Technical data: IP address, browser, device type, pages visited. Only with consent for analytics cookies.
3. Why we process this data
- Order and delivery (legal basis: contract performance).
- Customer service (legal basis: contract performance / legitimate interest).
- Accounting and tax obligations (legal basis: legal obligation).
- Site improvement, only with your consent via analytics cookies (legal basis: consent).
- Newsletter, only after explicit subscription (legal basis: consent, can be withdrawn at any time).
- Processing health data from the Pro X — solely to give you insights and recommendations via the FIT PRO app (legal basis: contract performance and explicit consent).
Health data is a special category of personal data under Article 9 GDPR. We process it only with your explicit consent and solely for the purpose for which you provided it.
4. Retention
- Order and invoice data: 7 years (Dutch tax law).
- Account data: as long as the account is active. Within 30 days of deletion: anonymised or deleted.
- Health data in the FIT PRO app: as long as the account exists. Delete your account and it is irreversibly erased within 30 days.
- Newsletter emails: until you unsubscribe.
- Analytics data: max 14 months, anonymised.
5. Who we share data with
We never sell your data. We share only what is strictly necessary, with:
- Mollie B.V. — for processing payments.
- PostNL / DHL — for shipping orders.
- Hosting provider (servers in the EU, Frankfurt) — for data storage.
- Accountant — only on request, for legal obligations.
We have a data processing agreement with all of these parties. We do not transfer personal data outside the EU/EEA.
6. Cookies and similar technologies
We use three categories:
- Essential (always on): cart, language, session. No consent required.
- Analytics (consent only): anonymised statistics to improve the site.
- Marketing (consent only): for personalised recommendations.
You can change your preferences at any time via the cookie settings.
7. Your rights
- Access to your data.
- Rectification of inaccurate data.
- Erasure ("right to be forgotten").
- Restriction of processing.
- Portability — we provide your data in a machine-readable format.
- Objection to processing.
- Withdraw consent when consent is the legal basis.
Send a request to privacy@fitbuddie.nl. We respond within 30 days.
8. Security
We secure your data with: HTTPS encryption on all connections, passwords hashed with bcrypt, end-to-end encrypted sync of health data, employee access controls and periodic security audits.
9. Filing a complaint
Have a complaint about how we handle your data? Contact us first at privacy@fitbuddie.nl. If we cannot resolve it, you can file a complaint with the Dutch Data Protection Authority .
10. Changes
This policy may be updated when our practices or legislation change. The most recent version is always on this page. For substantial changes we will actively notify you.