Privacy Policy

Who is responsible for your data

Damian de Hoog, trading as DDH Fitness, based in Almere, NL, is the data controller for personal data collected through this site. You can reach me at hello@ddhfit.nl about anything in this policy.

What I collect, and when

I only collect what you actively send me through the two forms on this site. There are no tracking cookies and no analytics.

• Contact form: your name, email address, phone number (optional), and the message you write.
• Review form: your name, an optional context line, a star rating, your review text, and the invite code you were given.
• Anti-spam: when you submit a form, Cloudflare Turnstile processes your IP address and browser signals to confirm you are not a bot. I do not see or store your IP address myself.

Why I use it, and my legal basis

Contact form data is used only to answer your enquiry and, if we go ahead, to arrange coaching. The legal basis is your consent (given by ticking the box and sending the form) and, once we work together, the performance of our agreement.

Review form data is used to display a testimonial on the site after I have manually approved it. The legal basis is your consent.

The anti-spam check rests on my legitimate interest in keeping the forms free of abuse.

Health and fitness information

Coaching may later involve health-related information, for example a PAR-Q readiness questionnaire, injuries, or goals. Under the GDPR this is a special category of data (Article 9), so I will only collect it with your separate, explicit consent, tell you exactly what it is used for, and keep it no longer than needed. This website does not collect any health data today; it is gathered separately once coaching begins.

Who else processes your data

I use a small number of trusted service providers ("processors") to run the site and its email. Each only handles your data to provide their service to me:

• Netlify, website hosting and the form-handling function (United States).
• Postmark (ActiveCampaign), sending the form emails (United States).
• Cloudflare, spam protection (Turnstile) and forwarding of email sent to my address (United States / global).

International transfers

Some of these providers are based outside the European Economic Area. Where that is the case, transfers are covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard, so your data keeps an essentially equivalent level of protection.

How long I keep it

Contact enquiries are kept for as long as needed to handle your request and, if you become a client, for the duration of our coaching plus any period I am legally required to keep records. If nothing comes of an enquiry, I delete it within 12 months.

Published reviews are kept until you ask me to remove yours.

Your rights

Under the GDPR you can, at any time:

• Ask for a copy of the data I hold about you (access).
• Have inaccurate data corrected (rectification).
• Ask me to delete your data (erasure).
• Ask me to restrict or object to how I use it.
• Withdraw consent you have given, without affecting processing that already happened.
• Lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

How to exercise your rights

Email me at hello@ddhfit.nl and I will respond within one month. I may ask a question or two to confirm it is really you before acting on a request.

Changes to this policy

If this policy changes, I will update the date at the top of this page, and highlight anything significant on the site.