Privacy Policy

Introduction

This Privacy Policy explains how apexlumen B.V. ("we," "us," or "our") collects, uses, discloses, and safeguards your personal information when you visit our website, use our services, or interact with us. We are committed to protecting your privacy and ensuring transparency about our data practices.

apexlumen B.V. is the data controller responsible for your personal data. Our registered office is located at Vijverweg 231, 4857 GY Breda, North Brabant, Netherlands. Registration Number: NL87361925.

Data We Collect

The data we collect depends on how you interact with our services. We may collect the following types of personal information:

Personal Information You Provide

• Contact information (name, email address, phone number, postal address)
• Account information for membership registration
• Health and fitness information relevant to our services
• Payment and billing information
• Communication preferences and feedback
• Any other information you choose to provide

Information Collected Automatically

• Website usage data and analytics information
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Location information (if permitted by your device settings)

How We Use Your Information

We use the information we collect for various purposes, including how we use your information to provide and improve our services:

• Providing fitness services, personal training, and wellness programmes
• Processing membership applications and managing accounts
• Communicating with you about our services, appointments, and updates
• Processing payments and managing billing
• Improving our website, services, and customer experience
• Sending marketing communications (with your consent)
• Complying with legal obligations and protecting our rights
• Ensuring safety and security of our facilities and services

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract: Processing necessary for the performance of our services
• Consent: For marketing communications and non-essential cookies
• Legitimate interests: For improving our services and website analytics
• Legal obligation: For compliance with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To service providers who assist us in operating our business
• To comply with legal obligations or respond to legal requests
• To protect our rights, property, or safety, or that of our users
• In connection with a business transfer or merger

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods depend on the type of information and the purpose for which it was collected:

• Membership and account information: For the duration of your membership plus 7 years
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: Up to 26 months
• Financial records: 7 years as required by law

Your Rights

Under GDPR and applicable privacy laws, you have the following rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Request transfer of your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data storage and backup procedures

International Data Transfers

We primarily process your data within the European Union. If we transfer your data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please reach out to us:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Netherlands. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the Dutch courts.