Privacy Policy

1. Introduction

Breathing Flame S.L. ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or participate in our programs.

We are a Spanish company registered under Spanish law, providing performance, wellness, and coaching services globally. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for EU residents and other relevant privacy laws in your jurisdiction.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password, profile information
• Payment Information: Billing address, payment method details (processed securely by third-party providers)
• Health and Wellness Data: Information you voluntarily provide about your health, fitness goals, and wellness journey
• Program Participation: Information about your participation in our programs, assessments, and progress tracking
• Communication Records: Records of your communications with us, including support requests and feedback

2.2 Automatically Collected Information

We may automatically collect certain information when you use our services:

• Usage Data: Information about how you interact with our website and services
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: General geographic location based on your IP address
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

2.3 Third-Party Information

We may receive information about you from third parties, such as:

• Social media platforms when you connect your accounts
• Payment processors for transaction verification
• Analytics providers for website usage statistics
• Marketing partners for lead generation

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• Provide and maintain our services
• Process payments and transactions
• Deliver programs, workshops, and coaching sessions
• Track your progress and provide personalized recommendations
• Communicate with you about your account and services

3.2 Business Operations

• Improve our services and develop new features
• Conduct research and analytics
• Ensure security and prevent fraud
• Comply with legal obligations
• Enforce our terms of service

3.3 Marketing and Communications

• Send you newsletters and promotional materials (with your consent)
• Notify you about new programs and events
• Provide customer support
• Conduct surveys and gather feedback

4. Legal Basis for Processing (GDPR)

For EU residents, we process your personal information based on the following legal grounds:

• Consent: When you have given clear consent for us to process your data for specific purposes
• Contract Performance: To fulfill our contractual obligations to you
• Legitimate Interests: To pursue our legitimate business interests, such as improving our services
• Legal Compliance: To comply with legal obligations
• Vital Interests: To protect your vital interests or those of another person

5. Information Sharing and Disclosure

We may share your personal information in the following circumstances:

5.1 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our business, such as:

• Payment processors (Stripe, PayPal)
• Email service providers (Mailchimp, SendGrid)
• Analytics providers (Google Analytics, Mixpanel)
• Cloud storage providers (Google Cloud, AWS)
• Customer support platforms (Zendesk, Intercom)

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal process or court orders
• Government investigations
• Protection of our rights and property
• Prevention of fraud or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.4 Consent

We may share your information with your explicit consent for specific purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Periodic security assessments and updates
• Staff Training: Regular training on data protection and privacy
• Incident Response: Procedures for handling data breaches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information: Until you delete your account or request deletion
• Program Data: For the duration of your participation plus 3 years for record-keeping
• Payment Records: 7 years for tax and accounting purposes
• Marketing Data: Until you unsubscribe or withdraw consent
• Legal Compliance: As required by applicable laws

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to access your personal information and receive a copy in a portable format.

8.2 Rectification

You can request correction of inaccurate or incomplete personal information.

8.3 Erasure

You can request deletion of your personal information, subject to certain exceptions.

8.4 Restriction

You can request restriction of processing in certain circumstances.

8.5 Objection

You can object to processing based on legitimate interests or for marketing purposes.

8.6 Withdrawal of Consent

You can withdraw consent for processing that requires your consent.

8.7 Data Portability

You can request transfer of your data to another service provider.

To exercise these rights, please contact us at privacy@breathingflame.com.

9. International Data Transfers

As a global service, we may transfer your personal information to countries outside your jurisdiction. When we do so, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct
• Your explicit consent for specific transfers

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

10.1 Types of Cookies

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand website usage
• Marketing Cookies: Used for targeted advertising
• Preference Cookies: Remember your settings and preferences

10.2 Cookie Management

You can control cookies through your browser settings or our cookie consent banner. However, disabling certain cookies may affect website functionality.

11. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee our data protection practices. You can contact our DPO at:

15. Supervisory Authority

If you are an EU resident and believe we have not addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

For Spanish residents, the relevant authority is the Agencia Española de Protección de Datos (AEPD).

16. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at: