Privacy Policy

Last updated: 15th January 2026

Introduction

IronWhisper Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website ironwhisper.world or use our services.

This policy applies to all personal data we collect and process about you. By using our website and services, you consent to the data practices described in this policy.

Data Controller Information

The data controller responsible for your personal information is:

Company: IronWhisper Ltd

Registration Number: HE846597

Address: Athalassa Avenue 90, Nicosia 1023, Cyprus

Email: privacy@ironwhisper.world

Phone: +357 22753327

Data Collection

We collect various types of personal data to provide and improve our strength and conditioning services. The data we collect includes:

Information You Provide Directly

  • Contact information (name, email address, phone number, postal address)
  • Training and fitness information (goals, experience level, health conditions)
  • Communication records (emails, messages, consultation notes)
  • Payment and billing information
  • Account credentials and preferences

Information We Collect Automatically

  • Website usage data (pages visited, time spent, click patterns)
  • Device information (browser type, operating system, IP address)
  • Location data (general geographic location based on IP address)
  • Cookies and similar tracking technologies

How We Use Your Information

We use your personal data for legitimate business purposes and how we use your information is essential to our service delivery:

  • To provide personalised strength and conditioning program design services
  • To communicate with you about your training programs and progress
  • To process payments and manage your account
  • To improve our website functionality and user experience
  • To send you relevant updates about our services (with your consent)
  • To comply with legal obligations and protect our legitimate interests
  • To analyse website performance and optimise our digital services
  • To prevent fraud and ensure the security of our platform

The legal basis for processing your data includes contract performance, legitimate interests, legal compliance, and your explicit consent where required.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:

  • With trusted service providers who assist in delivering our services
  • With payment processors for transaction handling
  • With analytics providers to improve our website performance
  • When required by law or to protect our legal rights
  • In connection with a business transfer or acquisition
  • With your explicit consent for specific purposes

All third-party service providers are contractually bound to protect your data and use it only for the specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy. Our data retention periods are based on:

  • Client records: 7 years after the end of our business relationship
  • Marketing communications: Until you unsubscribe or withdraw consent
  • Website analytics data: Up to 26 months
  • Financial records: 7 years for tax and accounting purposes
  • Legal compliance requirements as applicable

After the retention period expires, we securely delete or anonymise your personal data.

Your Rights

Under the General Data Protection Regulation (GDPR) and applicable privacy laws, your rights include:

  • Right of access: Request copies of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a structured format
  • Right to object: Opt out of certain data processing activities
  • Right to withdraw consent: Remove previously given consent

To exercise any of these rights, please contact us using the contact information provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Staff training on data protection practices
  • Secure data backup and recovery procedures

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry-standard practices.

International Data Transfers

IronWhisper is based in Cyprus, which is part of the European Union. When we transfer your personal data outside the EU, we ensure appropriate safeguards are in place, including:

  • Adequacy decisions by the European Commission
  • Standard contractual clauses approved by the European Commission
  • Binding corporate rules for multinational companies
  • Your explicit consent for specific transfers

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Privacy Officer: IronWhisper Ltd

Email: privacy@ironwhisper.world

Phone: +357 22753327

Address: Athalassa Avenue 90, Nicosia 1023, Cyprus

We will respond to your enquiry within 30 days of receipt.

Supervisory Authority

If you believe that our processing of your personal data violates applicable law, you have the right to lodge a complaint with the relevant supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.