Privacy policy

Who is responsible for your data

GoALs Fitness, Lohagou Kotini 1, Nafpaktos 30300, Greece, is the data controller for the information described here. You can reach us at info@goalsfitness.gr.

What we hold, and why

• Your name, your father's name and your phone number. Used to identify you at the gym and to contact you about your sessions. We ask for these when you create an account, or straight afterwards if you signed in with Google.
• Your email address. Used to sign you in and to send password resets.
• Your membership. The plan the gym has assigned you, how many sessions a week it allows, and when it starts and ends.
• Your bookings. Which sessions you booked, cancelled or attended, and the credits those used or returned. We keep this so that both you and the gym can see an accurate history.

We process this to provide the booking service you have asked us for, and to run the membership you hold with us. We do not use it for advertising, we do not sell it, and we do not share it with anyone for their own purposes.

If you sign in with Google

Signing in with Google is optional. If you use it, Google tells us your email address and the name on your Google account, and nothing else — no contacts, no calendar, no other Google data. We still ask you separately for your phone number and your father's name, because Google does not provide them and the gym needs them.

Who else handles it

Only the services that run this application:

• Supabase — stores the database and manages sign-in.
• Vercel — hosts the website itself.
• Google — only if you choose to sign in with Google.

Cookies and tracking

This site sets a cookie to keep you signed in. That is the only cookie it uses. There is no advertising, no analytics and no third-party tracking of any kind on this site. Your browser also remembers, on your own device, which notices you have dismissed; that never leaves your browser.

How long we keep it

We keep your account and booking history for as long as you are a member, and for two years afterwards so that membership and attendance records remain complete. You can ask us to delete it sooner.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to our use of it. You can change your name, your father's name and your phone number yourself at any time on your profile page. For anything else, write to us at info@goalsfitness.gr and we will respond within one month.

If you believe we have handled your data improperly, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, dpa.gr).

Changes

If we change this policy we will update the date at the top of this page.