Dads Camp — Privacy Policy

1. Who is responsible for your data (Data Controller)

Gert Van Looy, CVR 46669843, Slåenhøj 17, 2990 Nivå, Denmark, email gert@joindadscamp.com. We are the data controller for the personal data described below.

2. What data we collect

• Identity & contact: name, email, phone, date of birth.
• Health & fitness data (special-category data under GDPR Art. 9): your answers to the health and readiness screening in the onboarding survey, injuries, medical conditions, medication, dietary restrictions, height/weight, body measurements, training and nutrition logs, subjective wellbeing markers (energy, sleep, mood, confidence) collected at baseline and at quarterly reviews, and any progress photos you provide.
• Payment data: name, billing address and bank transfer details on invoices. We do not collect or store card numbers.
• Usage & communications: messages in the app, call attendance, and app usage data.

3. Why we process it, and the legal basis

Purpose -> Legal basis (GDPR):

• Provide coaching, programming, onboarding — Contract (Art. 6(1)(b))
• Process health data to tailor and safely deliver coaching — Your explicit consent (Art. 9(2)(a))
• Take payment, keep accounting records — Contract; legal obligation (Danish Bookkeeping Act)
• Send service emails and respond to you — Contract / legitimate interests
• Marketing emails and use of testimonials/photos — Your consent (withdrawable anytime)
• Improve the service — Legitimate interests

You may withdraw consent at any time; this does not affect processing already carried out. Note that withdrawing consent to process your health data may mean we can no longer safely coach you.

4. Who we share it with (processors & third parties)

We use third-party tools that process data on our behalf. Currently in use:

• Everfit — training programming, onboarding survey, habit and progress tracking, progress photos
• MyFitnessPal — nutrition tracking (you hold your own account)
• Dinero — invoicing and bookkeeping
• Revolut — receiving payments
• Google Workspace (Gmail, Google Calendar, Google Meet) — email, call booking, video calls
• Tally — sign-up form, e-signature, and consent records

Each processes data under its own terms. If we add a new tool that processes your personal data, we will update this policy and notify members before it starts.

The Campfire community — planned, not yet in use. We intend to launch a private member community, expected to run on WhatsApp (Meta). It is not running today and no member data is being shared with it. Before it opens we will: notify you, add WhatsApp to the list above, and ask for your separate consent. If you choose to join at that point, your display name will be visible to all other members for as long as you remain in the community. Whether your phone number is visible to other members depends on WhatsApp's phone-number-privacy setting for Communities, which Meta is still rolling out and which varies by account and region; the Coach, as admin, can always see it. We will confirm the exact position and update this policy before the community opens. We would rely on your consent (Art. 6(1)(a)) for this disclosure between members, and you could withdraw it by leaving the community.

International transfers: some of these providers are based outside the EU/EEA (for example the USA). Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision. You can request more detail at gert@joindadscamp.com.

5. How long we keep it

We keep your data for as long as you are a Member and for a reasonable period afterwards. Accounting records are kept for 5 years as required by the Danish Bookkeeping Act. Health data and photos are deleted on request, or within a reasonable period after your membership ends, unless we must keep them for legal reasons.

6. Your rights

Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to processing; data portability; and withdraw consent. To exercise any of these, email gert@joindadscamp.com. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

7. Security

We take reasonable technical and organisational measures to protect your data, and we use reputable providers. No online service can be guaranteed 100% secure.

8. Changes

We may update this policy and will post the current version at joindadscamp.com with the effective date and version number.