V1 privacy draft

Privacy Policy

Draft for review

This V1 notice explains the current NXTU intake process. It is not lawyer-approved. Final business details and lawful-basis review must be confirmed before public intake activation.

Who is responsible

NXTU is the private personal training service led by Vadim. Private personal training takes place at SportCity Amsterdam RAI. Business/legal entity details are pending confirmation.

What information is collected

An intake request asks for your name, email and/or phone/WhatsApp number, preferred contact method, training goal, and preferred days or times.

You may also choose to share training experience, preferred training type, health or limitation context, age range, SportCity membership, and how you heard about NXTU.

Limited technical metadata may be processed to operate and protect the form. The current system does not store raw IP addresses.

Why and how the information is used

Intake information is used only to review your request, assess whether NXTU private training may be a suitable fit, contact you using your preferred method, answer practical questions, and protect the service from abuse.

Submitting an intake request does not create a client account, confirm a booking, or require you to purchase training.

Health and limitation context

Any health or limitation context is optional and is not a medical assessment. Do not use the intake form for urgent medical information. Seek appropriate medical advice where needed before starting exercise.

Access and sharing

Intake requests are restricted to authorized NXTU admin access. They are not public and are not visible to clients or other people who submit a request.

NXTU does not sell personal data. Information may be handled by service providers needed to host, secure, or operate the website, subject to the final production setup and agreements.

How long information is kept

Non-client intake requests are reviewed after 6 months and deleted or anonymized after 12 months. Spam and test requests are deleted immediately when identified. Admin notes follow the same retention rule as the related request.

Requests that become clients are kept as part of the client onboarding and business record, subject to applicable accounting and legal retention requirements.

Correction, deletion, and questions

You may ask NXTU to correct inaccurate information, explain how it is used, or delete information. Requests will be assessed under applicable requirements, and some information may need to be retained where a legal obligation applies.

Send privacy, correction, or deletion questions to hello@nxtu.eu.

Security

The current intake design uses server-side validation, restricted admin access, database access controls, and avoids returning request records to public users. No online system can guarantee absolute security, and production monitoring, retention operations, and incident procedures remain launch requirements.