Privacy Policy

1. Who we are

This privacy policy explains how NESS by Ines Personal Training and Lifestyle ("NESS", "we", "us" or "our") collects, uses, stores and protects personal data.

The data controller is:

Ines Angelova, trading as NESS by Ines Personal Training and Lifestyle
Dutch Chamber of Commerce (KvK): 71363068
Privacy contact: contact@inesangelova.com

Primary training location, by appointment only:
SportCity Den Haag New Babylon
Bezuidenhoutseweg 61–63A
2594 AC Den Haag
The Netherlands

This is NESS's primary training location and is not presented as a postal or registered office. Please use the email address above for privacy requests and business correspondence.

2. Scope of this policy

This policy applies when you:

  • visit nessbyines.com;

  • contact NESS or submit a website form;

  • subscribe to the NESS newsletter;

  • purchase a service, programme or physical product;

  • book or participate in personal, duo, group or online coaching;

  • use the NESS coaching environment provided through Everfit;

  • provide a testimonial, photograph or other content; or

  • otherwise communicate or interact with NESS.

3. Personal data we collect

Depending on how you interact with NESS, we may collect:

Website and technical data

  • IP address;

  • browser, device and operating-system information;

  • pages visited, approximate location and interaction data;

  • cookie preferences and related technical identifiers; and

  • information needed to keep the website secure and functioning.

Contact and enquiry data

  • name;

  • email address and telephone number;

  • the service you are interested in;

  • the contents of your enquiry and subsequent correspondence; and

  • preferred contact, appointment or training information.

Coaching and client data

  • contact details and account information;

  • training goals, preferences, availability and attendance;

  • programme, exercise, performance and progress information;

  • measurements, check-in information and progress photographs when voluntarily supplied;

  • nutrition and lifestyle information relevant to the service; and

  • communications, feedback and coaching notes.

Health-related data

To provide safe and appropriate coaching, we may ask about injuries, physical limitations, pregnancy, medical conditions or other health matters that affect exercise or nutrition. Health data is sensitive personal data under the GDPR. We collect only information that is reasonably necessary for your coaching and normally rely on your explicit consent in addition to the applicable ordinary legal basis.

NESS is not a healthcare provider and does not use this information to diagnose or treat medical conditions. You should seek advice from a qualified healthcare professional where appropriate.

Purchase and payment data

  • billing and delivery details;

  • products or services purchased;

  • transaction date, amount, status and reference;

  • invoice and tax information; and

  • information needed to manage delivery, refunds, cancellations or customer service.

Card details entered at checkout are processed by Stripe. NESS does not receive or store your complete payment-card number.

Newsletter and marketing data

  • name and email address;

  • subscription status and consent record; and

  • engagement information made available by Squarespace Email Campaigns.

Testimonials, photographs and media

We may process testimonials, photographs, videos, social-media handles or before-and-after material only where you have voluntarily provided them and, where required, given specific consent for publication. Participation is optional and is not a condition of receiving coaching.

4. How and why we use personal data

We use personal data to:

  • respond to enquiries and arrange consultations;

  • assess whether a service is suitable and take steps at your request before entering a contract;

  • provide, personalise and manage coaching services;

  • create programmes, monitor progress and communicate with clients;

  • process orders, payments, invoices, deliveries, cancellations and refunds;

  • administer client accounts and the Everfit coaching environment;

  • send newsletters or promotional messages where you have opted in;

  • publish approved testimonials or media;

  • operate, secure, troubleshoot and improve our website and services;

  • maintain business, accounting and tax records;

  • establish, exercise or defend legal claims; and

  • comply with legal and regulatory obligations.

5. Legal bases

Under the GDPR, we rely on one or more of the following legal bases:

  • Contract or steps before a contract: to answer service enquiries, take bookings, fulfil purchases and provide coaching.

  • Consent: for newsletters, optional non-essential cookies, testimonials, photographs and other optional publicity.

  • Explicit consent: where we process health-related information and no other exception under Article 9 GDPR applies.

  • Legal obligation: for tax, accounting, fraud-prevention and other records required by law.

  • Legitimate interests: to operate and secure the business, respond to ordinary communications, improve services and protect legal rights, where those interests are not overridden by your rights and freedoms.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn, or information that must be retained under another legal obligation.

6. Who receives personal data

We disclose personal data only where reasonably necessary. Recipients may include:

  • Squarespace, which hosts the website, website forms, online shop, analytics and email campaigns;

  • Stripe, which processes online payments;

  • Everfit, which provides the coaching application and client environment;

  • Moneybird, which supports invoicing and accounting;

  • banks and other payment providers used to receive or refund payments;

  • delivery and fulfilment providers where physical products are ordered;

  • email, cloud-storage, security and IT service providers;

  • accountants, legal advisers, insurers and other professional advisers;

  • social-media or video platforms when you interact with embedded content or our accounts; and

  • government, regulatory, law-enforcement or judicial authorities when disclosure is legally required.

These providers may act as processors on our instructions or as independent controllers for parts of their services. Their own privacy notices may also apply.

We do not sell or rent personal data.

7. International data transfers

Some service providers, including Squarespace, Stripe and Everfit, may process personal data outside the European Economic Area, including in the United States. Where this occurs, the provider and/or NESS relies on a lawful transfer mechanism, such as an adequacy decision, participation in an applicable Data Privacy Framework or European Commission-approved Standard Contractual Clauses, together with appropriate safeguards where required.

You may contact us for further information about the safeguards relevant to your data.

8. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including:

  • enquiries that do not become a client relationship: normally up to 12 months after the last meaningful contact;

  • active client and coaching data: for the duration of the service and normally up to 2 years afterwards, unless a longer period is required for a legal claim or obligation;

  • health-related coaching information: only while necessary for safe coaching and normally no longer than 2 yearsafter the coaching relationship ends, unless continued retention is legally justified;

  • invoices, transaction information and core business administration: normally 7 years, as required by Dutch tax law;

  • newsletter information: until you unsubscribe or we discontinue the mailing list, subject to retaining a minimal suppression record where necessary to honour your opt-out;

  • testimonials and promotional media: until consent is withdrawn or the material is no longer used; and

  • cookie and analytics data: according to the lifespan of the relevant cookie and your consent preferences.

Data may be kept longer where necessary to comply with law, resolve a dispute or establish, exercise or defend legal claims. When data is no longer needed, we delete or anonymise it where reasonably possible.

9. Cookies and website analytics

The website uses cookies and similar technologies. These may include:

  • necessary cookies, which enable security, navigation, checkout and other essential website functions;

  • functional cookies, which remember settings or enable requested features;

  • analytics cookies, which help us understand website traffic and use through Squarespace Analytics; and

  • third-party content cookies, which may be placed when you view or interact with embedded social-media or video content.

NESS currently uses Squarespace Analytics and does not currently use Google Analytics or Meta Pixel. If this changes, this policy and the cookie information will be updated before those tools are activated.

Where consent is legally required, non-essential cookies are restricted until you make a choice through the cookie banner. You can accept, reject or manage non-essential cookies and can change or withdraw your consent later through the Cookie Settings link in the website footer. Blocking some cookies may affect certain website features.

10. Newsletter and direct marketing

We send marketing emails only when you have opted in or where another lawful basis permits it. Every promotional email will provide an unsubscribe option. You may also unsubscribe by emailing contact@inesangelova.com.

Withdrawing from marketing does not prevent us from sending service messages that are necessary for an active booking, order or contract.

11. Your privacy rights

Subject to the conditions of the GDPR, you may have the right to:

  • receive information about how your data is used;

  • access the personal data we hold about you;

  • correct inaccurate or incomplete data;

  • request deletion of your data;

  • restrict how your data is used;

  • receive certain data in a portable format;

  • object to processing based on legitimate interests or to direct marketing; and

  • withdraw consent at any time.

To exercise a right, email contact@inesangelova.com. We may ask for information needed to verify your identity. We normally respond within one month, although the GDPR permits an extension for certain complex or numerous requests.

You also have the right to lodge a complaint with the Dutch supervisory authority:

Autoriteit Persoonsgegevens
https://www.autoriteitpersoonsgegevens.nl/

We would appreciate the opportunity to address your concern first, but contacting us is not a condition of filing a complaint.

12. Clients aged 16 or 17

NESS services are intended for people aged 16 and over. Where a client is under 18, we may require authorisation or involvement from a parent or legal guardian for contractual, payment, safety or coaching purposes. We do not knowingly collect data from children under 16 through the website or coaching services.

If you believe a person under 16 has provided personal data without appropriate authorisation, contact us so that we can investigate and, where appropriate, delete it.

13. Automated decision-making

NESS does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.

14. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. Access is limited to persons and providers who need the information for a legitimate business purpose. No online system is completely secure, but we review our practices and service providers as the business develops.

15. External links and platforms

The website may contain links to, or embedded content from, third-party platforms. When you visit or interact with those services, they may process your information under their own privacy policies. NESS is not responsible for the privacy practices of independent third parties.

16. Changes to this policy

We may update this privacy policy when our services, providers or legal obligations change. The latest version will be published on the website with a revised "Last updated" date. Where a change materially affects how we use personal data, we will take reasonable steps to provide additional notice where required.

17. Contact

For questions, requests or concerns about this privacy policy or the use of personal data, contact:

NESS by Ines Personal Training and Lifestyle
Attn: Ines Angelova
Email: contact@nessbyines.com
KvK: 71363068