This Privacy Policy explains how Setandstreak (“we”, “us”, or “our”) collects, uses, processes, and protects your personal data when you visit www.setandstreak.com (the “Site”), make an inquiry, pay a consultation deposit, or engage our workout planning and routine management services.
We operate in compliance with applicable data protection laws, including the European Union General Data Protection Regulation (EU GDPR), the UK GDPR, and the Mexican Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares – LFPDPPP).
- Data Controller Information
The data controller responsible for processing your personal data is:
Brand Name: Setandstreak
Company Name: XXX
Registered Address: XXX
Customer Support Email: fitness@setandstreak.com
Official Website: www.setandstreak.com
- Information We Collect
To facilitate initial consultation deposits, evaluate exercise planning requirements, issue service quotations, and complete scheduled bookings, we collect personal data that you voluntarily provide to us, as well as technical data automatically collected during your site visit.
A. Personal Information Provided Directly
When you place a consultation deposit, submit a quote request form, or contact customer support, we collect:
Contact Details: Full name, email address, telephone number, and residential or service location address for scheduled bookings.
Service Requirements: Details regarding your preferred exercise scheduling, goal-tracking layout preferences, routine parameters, and requested service scope.
Transaction Records: Details regarding consultation deposit payments, service quotations provided, deposit status, and remaining balance settlement records.
B. Automatically Collected Technical Data
When you navigate the Site, we automatically collect basic browser and connection information:
IP address, browser type and version, operational language preferences, time zone settings, referring web pages, and basic navigation interactions.
- Purpose and Legal Basis for Processing
We process your personal data strictly for defined operational and legal purposes under valid legal bases recognized by GDPR and Mexican privacy regulations:
Contractual Necessity: We process your contact information, service requirements, and deposit details to process consultation deposits, evaluate service requests, issue formal price quotes, and schedule appointments at your request prior to contract execution.
Contractual Necessity & Legitimate Interest: We process communication records to maintain clear correspondence regarding service bookings, schedule adjustments, or balance settlements throughout the service workflow.
Legal Obligation: We retain basic transaction and invoice records to comply with tax, legal accounting, corporate recordkeeping, and statutory obligations under Mexican and European laws.
Legitimate Interest: We analyze basic technical usage data to safeguard our operational systems, detect fraudulent activity, and maintain overall system security.
- Operational Workflow & Service Data Usage
Please note that our checkout pricing represents an initial consultation deposit. Personal data provided during checkout is utilized strictly according to our operational workflow:
Initial Deposit: Collecting primary contact and transaction records to confirm your inquiry reservation.
Consultation & Quotation: Utilizing your contact information to discuss individual planning scope, routine structures, and present a formal final quote.
Booking & Delivery: Utilizing service location data to execute scheduled on-site appointments or finalized planning document deliveries.
Final Settlement: Managing accounting records for deposit deduction and final balance collection upon service delivery.
- Sharing and Disclosure of Personal Data
We do not sell, rent, or trade your personal information to third parties. We disclose personal data strictly on a need-to-know basis under binding confidentiality and data protection obligations to:
Payment Processors: Authorized electronic payment solution providers processing transactions over encrypted SSL/TLS channels.
Operational Service Providers: Secure cloud hosting, administrative software platforms, and communication providers assisting in business operations.
Legal and Regulatory Authorities: Government bodies, tax authorities, or legal entities where required by applicable law, statutory regulation, or valid court order.
- International Data Transfers
As our corporate entity is established in Mexico and serves clients across Europe, your personal information may be transferred across international borders.
When transferring personal data outside the European Economic Area (EEA), we implement standard contractual safeguards, standard data protection clauses approved by the European Commission, and technical organizational measures to ensure your data receives an equivalent level of protection as required under European privacy legislation.
- Data Retention Policy
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
Fulfilling your workout planning service agreement and active booking schedules.
Satisfying legal, statutory accounting, tax compliance, or auditing obligations (typically up to 5 to 7 years depending on local corporate statutory limits).
Resolving legal disputes or enforcing contract terms.
Once personal data is no longer required, it is securely deleted or rendered permanently anonymous.
- Your Data Protection Rights
Under European (GDPR/UK GDPR) and Mexican (ARCO Rights under LFPDPPP) data protection legislation, you hold specific statutory rights regarding your personal data:
Right of Access: Request confirmation of whether we process your personal data and receive a copy of stored records.
Right to Rectification / Correction: Request correction of inaccurate, incomplete, or outdated personal information.
Right to Erasure / Cancellation: Request deletion of your personal data where statutory retention grounds no longer apply.
Right to Restrict or Object to Processing: Object to or request restricted processing of your personal information under specified statutory conditions.
Right to Data Portability: Request transfer of your data to another controller in a structured, commonly used format.
Right to Withdraw Consent: Withdraw previously granted consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please submit a written request to fitness@setandstreak.com. We respond to all verified requests within standard statutory timelines.
- Data Security Measures
We maintain appropriate physical, organizational, and technical safeguards to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction. Administrative access to personal records is restricted to authorized personnel requiring access to perform service duties. - Third-Party Web Links
Our Site may contain links to external web resources. We are not responsible for the privacy practices or content of third-party websites. We encourage users to review the privacy notices of any external site visited.