Privacy Policy
Last updated: 15th January 2026
Introduction
IronWhisper Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website ironwhisper.world or use our services.
This policy applies to all personal data we collect and process about you. By using our website and services, you consent to the data practices described in this policy.
Data Controller Information
The data controller responsible for your personal information is:
Company: IronWhisper Ltd
Registration Number: HE846597
Address: Athalassa Avenue 90, Nicosia 1023, Cyprus
Email: privacy@ironwhisper.world
Phone: +357 22753327
Data Collection
We collect various types of personal data to provide and improve our strength and conditioning services. The data we collect includes:
Information You Provide Directly
- Contact information (name, email address, phone number, postal address)
- Training and fitness information (goals, experience level, health conditions)
- Communication records (emails, messages, consultation notes)
- Payment and billing information
- Account credentials and preferences
Information We Collect Automatically
- Website usage data (pages visited, time spent, click patterns)
- Device information (browser type, operating system, IP address)
- Location data (general geographic location based on IP address)
- Cookies and similar tracking technologies
How We Use Your Information
We use your personal data for legitimate business purposes and how we use your information is essential to our service delivery:
- To provide personalised strength and conditioning program design services
- To communicate with you about your training programs and progress
- To process payments and manage your account
- To improve our website functionality and user experience
- To send you relevant updates about our services (with your consent)
- To comply with legal obligations and protect our legitimate interests
- To analyse website performance and optimise our digital services
- To prevent fraud and ensure the security of our platform
The legal basis for processing your data includes contract performance, legitimate interests, legal compliance, and your explicit consent where required.
Cookies and Tracking Technologies
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.
For detailed information about the cookies we use, please refer to our Cookie Policy.
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your data in the following circumstances:
- With trusted service providers who assist in delivering our services
- With payment processors for transaction handling
- With analytics providers to improve our website performance
- When required by law or to protect our legal rights
- In connection with a business transfer or acquisition
- With your explicit consent for specific purposes
All third-party service providers are contractually bound to protect your data and use it only for the specified purposes.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy. Our data retention periods are based on:
- Client records: 7 years after the end of our business relationship
- Marketing communications: Until you unsubscribe or withdraw consent
- Website analytics data: Up to 26 months
- Financial records: 7 years for tax and accounting purposes
- Legal compliance requirements as applicable
After the retention period expires, we securely delete or anonymise your personal data.
Your Rights
Under the General Data Protection Regulation (GDPR) and applicable privacy laws, your rights include:
- Right of access: Request copies of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a structured format
- Right to object: Opt out of certain data processing activities
- Right to withdraw consent: Remove previously given consent
To exercise any of these rights, please contact us using the contact information provided below.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Staff training on data protection practices
- Secure data backup and recovery procedures
While we strive to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry-standard practices.
International Data Transfers
IronWhisper is based in Cyprus, which is part of the European Union. When we transfer your personal data outside the EU, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the European Commission
- Standard contractual clauses approved by the European Commission
- Binding corporate rules for multinational companies
- Your explicit consent for specific transfers
Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Privacy Officer: IronWhisper Ltd
Email: privacy@ironwhisper.world
Phone: +357 22753327
Address: Athalassa Avenue 90, Nicosia 1023, Cyprus
We will respond to your enquiry within 30 days of receipt.
Supervisory Authority
If you believe that our processing of your personal data violates applicable law, you have the right to lodge a complaint with the relevant supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.