Privacy Policy

Data Controller Information

primeorbit Ltd is the data controller responsible for your personal data. We are a company registered in Cyprus with registration number HE482675 and VAT number CY48236715X. Our registered office is located at Poseidonos Avenue 24, Paralimni, 5292, Famagusta District, Cyprus.

Data We Collect

We collect and process various types of personal data depending on how you interact with our services. The data we collect includes information you provide directly to us, information we collect automatically when you use our website, and information we may receive from third parties.

Information You Provide to Us

• Contact details (name, email address, phone number, company name)
• Communication preferences and enquiry details
• Information provided in contact forms, emails, or phone calls
• Business information about your gym or fitness facility
• Marketing objectives and current challenges

Information We Collect Automatically

• Website usage data (pages visited, time spent, navigation patterns)
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies (see our Cookie Policy for details)
• Referral sources and marketing campaign interactions

How We Use Your Information

We use your personal data for various legitimate business purposes. How we use your information depends on the services you use and your preferences. Here's how we use your data:

• Service Provision: To provide our marketing consultancy services, respond to enquiries, and deliver requested information
• Communication: To contact you regarding your enquiries, appointments, and service updates
• Business Development: To understand your business needs and develop appropriate marketing strategies
• Website Improvement: To analyse website performance and enhance user experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Marketing: To send relevant marketing communications (with your consent where required)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we must have a legal basis for processing your personal data. We process your data based on:

• Consent: Where you have given clear consent for specific processing activities
• Contract: Where processing is necessary for performing our services
• Legitimate Interests: Where we have legitimate business interests that do not override your rights
• Legal Obligation: Where processing is required by law

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in delivering our services
• Analytics and Advertising: With Google Analytics, Google Ads, and similar platforms for website analytics and marketing
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with any merger, sale, or transfer of our business

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Generally, we retain client data for the duration of our business relationship plus seven years for legal and tax purposes. Marketing data is retained until you withdraw consent or request deletion. Website analytics data is typically retained for 26 months. We regularly review our data retention practices to ensure compliance with applicable laws.

Your Rights

Under GDPR and other applicable data protection laws, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training. However, no internet transmission is completely secure, and we cannot guarantee absolute security of your data.

International Data Transfers

As we serve clients across the European Union, your data may be processed in different EU member states. When we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us immediately, and we will take steps to remove such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please get in touch:

Supervisory Authority

If you believe we have not handled your personal data in accordance with applicable laws, you have the right to lodge a complaint with the relevant supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection. You can also contact the supervisory authority in your country of residence.