Privacy Policy

Last updated: February 2026

1. Data Controller

  • Owner: Sandra Lorden Álvarez

  • Business activity: Personal Trainer

  • Email:

  • Sitio web: www.patricia-workouts.com

2. Data We Collect

We collect the personal data you voluntarily provide through:

  • Transformation Form: name, email address, telephone number, age, fitness and nutrition goals.

  • Contact Form: name, email address, and message.

  • Detailed Assessment Form: health information, eating habits, training routines, goals, and any other information you choose to share.

3. Purpose of Processing

Your data is used to:

  • Provide you with a personalised analysis of your health and fitness goals.

  • Contact you via WhatsApp or email to initiate your transformation plan.

  • Manage the business relationship and the services you have contracted.

  • Send you information related to the services requested.

4. Legal Basis

The processing of your data is based on:

Consent: By submitting any form, you expressly accept this Privacy Policy.

Performance of a contract: For the provision of the personal training and nutrition services you have contracted.

Legitimate interest: For maintaining and improving the business relationship.

5. Data Retention

Your data will be retained for as long as a business relationship exists or for as long as necessary to comply with legal obligations. You may request the deletion of your data at any time.

6. Disclosure of Data to Third Parties

We do not sell or disclose your data to third parties. Your data may be processed by:

Supabase Inc. — secure data storage (servers located in the EU).

Vercel Inc. — website hosting.

Resend Inc. — transactional email delivery.

These providers comply with the appropriate data protection safeguards required under the GDPR.

7. Your Rights

You have the right to:

Access: Find out what personal data we process about you.

Rectification: Correct inaccurate or incomplete data.

Erasure: Request the deletion of your data.

Objection: Object to the processing of your data.

Data portability: Receive your data in a structured format.

Restriction: Request the restriction of processing.

To exercise these rights, please contact us at sandralordenfit@gmail.com. We will respond within a maximum period of 30 days.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Para ejercer estos derechos, escríbenos a sandralordenfit@gmail.com. Responderemos en un plazo máximo de 30 días.

También puedes presentar una reclamación ante la Agencia Española de Protección de Datos (AEPD).

8. Security

We implement technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS), secure storage with access controls, and row-level security policies in the database.

9. Cookies

This website uses technical cookies that are necessary for its operation and analytical cookies to improve the user experience. Further information is available in our Cookie Policy.

10. Amendments

We reserve the right to update this Privacy Policy. The date of the latest update appears at the beginning of this document. We recommend reviewing it periodically.