BloomFitPT← Back to the website

Privacy Policy

This English version is provided for information only. In case of any discrepancy, the Portuguese version prevails.

This website is for information only and does not collect personal data through forms. It uses cookies that are essential for it to work and, only with the visitor's consent, analytics cookies that help us understand how the website is used (see the section "Cookies on bloomfit.pt"). It does not use advertising or marketing cookies. Any collection of personal data is carried out through the Regyfit website/app (including the RegyBox app), an associated application that fully complies with the General Data Protection Regulation (GDPR). If you have any questions, please read the policies below; you can also contact us through our official channels.

INTRODUCTION

Mind & Body Fitness, Lda, owner of the commercial platform and brand "BloomFit | Treinar pela Saúde", which provides its services individually through the commercial platform and brand identified above (hereinafter, the business unit is referred to as "BloomFit | Treinar pela Saúde"), as owner and operator of the commercial platform "BloomFit | Treinar pela Saúde", undertakes, as a central commitment of its business, to process the personal data of its Clients (hereinafter "Client", "Clients", "Data Subject" or "Data Subjects") with full respect for their privacy, and to protect and secure personal data against external threats and internal misuse, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter "GDPR") and the related national legislation.

Accordingly, Data Subjects are informed of, and have the right to be informed about, how "BloomFit | Treinar pela Saúde" collects, organises, keeps, consults, uses, shares, transmits, corrects, stores, processes, protects and deletes the Personal Data provided to it exclusively through the Regyfit website/app (including the RegyBox app, hereinafter "Regyfit website/app").

The legitimate purposes for which Personal Data are processed by "BloomFit | Treinar pela Saúde" result from the obligation, under the relevant legislation, for "BloomFit | Treinar pela Saúde" to ensure the lawful conditions for processing Data Subjects' Personal Data. In the specific case of the "BloomFit | Treinar pela Saúde" platform, the Data Subjects whose data are processed are its Clients, without prejudice to the existence of an internal privacy policy for the Personal Data of employees and other service providers.

"BloomFit | Treinar pela Saúde" therefore publishes its privacy policy on the Website, and any Data Subject may and should read it carefully. It has been written clearly and simply to make it easy to understand and to help Data Subjects exercise their rights (also referred to below as ARCO Rights: access, rectification, cancellation and objection).

SCOPE AND DATA CONTROLLER

This privacy policy applies to personal data processed directly or indirectly by "BloomFit | Treinar pela Saúde" through the Regyfit website/app, for the purpose of displaying and offering a range of services to Clients and enabling them to enter into a future contractual relationship for services sold by "BloomFit | Treinar pela Saúde" or by partner entities, allowing a Data Subject who registers as a new user of the Regyfit website/app to subscribe to or purchase services on competitive commercial terms and under the terms agreed between the parties.

Within the processing described above, "BloomFit | Treinar pela Saúde" may define specific privacy policies that improve, develop or detail particular aspects of the processing carried out for the stated purpose or for new purposes that it may develop or promote, and undertakes to ensure compliance with the GDPR in relation to any such new activities.

Such sector-specific privacy policies will be made known to Data Subjects, in compliance with the applicable legal provisions, through the means agreed between the Parties and available for that purpose.

The data controller is: Mind & Body Fitness, Lda., company no. 517887053, registered office at Rua Manuel Ferreira, n.º 23 D, 2795-229 Linda-a-Velha, Portugal.

You can contact Mind & Body Fitness, Lda. about any matter relating to this privacy policy through the following contact points:

In addition, in the specific cases described below, the controller may engage third parties (processors) to carry out the processing of the personal data concerned, always ensuring the rights and safeguards of Data Subjects and the processors' compliance with the applicable legal, regulatory and contractual obligations.

PURPOSES OF PROCESSING AND LEGAL BASES

The Clients' Personal Data processed by "BloomFit | Treinar pela Saúde" under this privacy policy, at the various relevant moments of collection, are the following, grouped into these categories:

(i) Identification and Contact Data

(ii) Website Access and Usage Data

(iii) Payment Data

(iv) Physical Activity Monitoring Data

Other personal data of an essentially technical nature may be obtained when the Regyfit website/app is accessed from mobile devices, as described in Title 12.

To allow quick, automated access and registration on the Regyfit website/app, the automated access controls identified below have been implemented. They allow certain technical data to be collected and transferred to the servers of the responsible entities, and "BloomFit" has no control over the data collected and used by those entities. The plug-ins used are: (i) Facebook (operator: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, U.S.A.) and (ii) Google (operator: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.A.).

These personal data are adequate, relevant and limited to the purpose described above, thus fully respecting the essential principles of the GDPR.

"BloomFit | Treinar pela Saúde" processes the Data Subject's data automatically for the specific purpose mentioned above, strictly observing the legal bases set out in the GDPR: processing is based on the Data Subject's prior consent and, at the time of subscription, an additional set of Personal Data must be provided, which is necessary for the performance of a contract or for pre-contractual steps taken at the Data Subject's request.

1. Purpose of processing

Processing of Clients' Personal Data in category (i) Identification and Contact Data for registration and access to the "BloomFit | Treinar pela Saúde" Platform, or as later changed by the Client in the reserved area of the "Client Account", through the Regyfit website/app.

Legal basis: Performance of a contract or pre-contractual steps taken at the Data Subject's request.

2. Purpose of processing

Processing of Clients' Personal Data in categories (i) Identification and Contact Data and (iii) Payment Data to manage the provision of the Services of "BloomFit | Treinar pela Saúde", the legal relationship established with the Client and the related invoicing.

Legal basis: Performance of a contract or pre-contractual steps taken at the Data Subject's request.

3. Purpose of processing

Processing of Clients' Personal Data in category (i) Identification and Contact Data to manage Services expressly subscribed to by the Client through the "BloomFit" Platform and to be provided by partner entities duly identified on the page of the "BloomFit" Platform where the subscription was made.

Legal basis: Consent given by the Data Subject for this specific purpose.

4. Purpose of processing

Processing of Clients' Personal Data in category (ii) Website Access and Usage Data to manage the provision of the Services of "BloomFit | Treinar pela Saúde".

Legal basis: Processing necessary for the legitimate interests pursued by "BloomFit | Treinar pela Saúde".

5. Purpose of processing

Processing of Clients' Personal Data in category (i) Identification and Contact Data for marketing purposes, including, without limitation, (i) information about news from the "BloomFit | Treinar pela Saúde" Platform, (ii) information about offers and promotional discounts, and (iii) other institutional information.

Legal basis: Consent given by the Data Subject for these specific purposes.

6. Purpose of processing

Processing of Clients' Personal Data in category (iv) Physical Activity Monitoring Data to manage the provision of the Services of "BloomFit | Treinar pela Saúde", in order to create and review training plans adapted to the Client's condition.

Legal basis: Performance of a contract or pre-contractual steps taken at the Data Subject's request.

7. Purpose of processing

Processing of Clients' Personal Data in categories (i) Identification and Contact Data, (ii) Website Access and Usage Data and (iii) Payment Data to review and respond to complaints.

Legal basis: Compliance with the legal obligations of "BloomFit | Treinar pela Saúde".

DISCLOSURE AND TRANSFER OF PERSONAL DATA

"BloomFit | Treinar pela Saúde" shares part of the Data Subjects' Personal Data with third-party processors, strictly following the principles of proportionality and data minimisation, for:

In this context, and in compliance with the applicable legal and regulatory obligations, "BloomFit | Treinar pela Saúde" requires third-party processors and partners to take all necessary precautions, given the nature of the Personal Data and the risks of processing, to protect the security of personal data and, in particular, to prevent its alteration or corruption and access by unauthorised third parties.

Personal data relating to the Client's history on the Regyfit website/app are not shared, except with hosting services and with services contracted by the Client that are to be provided by partner entities of "BloomFit | Treinar pela Saúde".

Except in the cases mentioned above, "BloomFit | Treinar pela Saúde" never shares Clients' Personal Data with other companies or brands for other commercial purposes.

PROCESSORS

"BloomFit | Treinar pela Saúde" uses the following processors, with which it has data processing agreements under Article 28 of the GDPR, and which only process Personal Data to the extent necessary to provide their services:

"BloomFit | Treinar pela Saúde" requires all processors to adopt appropriate technical and organisational measures to protect the security of Personal Data and prevent access by unauthorised third parties.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

"BloomFit | Treinar pela Saúde" and/or its processors will seek to process the Data Subject's data within the European Economic Area (EEA), although processing outside the EEA may take place when necessary or convenient. In such cases, "BloomFit | Treinar pela Saúde" may transfer the Client's personal data to carefully selected external service providers with which it has data processing and/or storage agreements in force, such as IT providers for storage or for the operation and optimisation of the Website, newsletter or CRM tools. In certain cases, data may be processed and stored on servers located outside the EEA. Such providers guarantee the same level of data protection as data kept and processed within the EEA, on the basis of the European Commission's Adequacy Decision on the EU-US Data Privacy Framework of 10 July 2023 and/or the Standard Contractual Clauses approved by the European Commission, under Article 46 of the GDPR.

RETENTION PERIOD

"BloomFit | Treinar pela Saúde" will keep Data Subjects' Personal Data only for as long as necessary for the purpose for which they were collected, and will delete them following an express and separate request from the Data Subject, as set out in the next Title.

If an account linked to a Data Subject is inactive for more than 3 (three) years, "BloomFit | Treinar pela Saúde" will, on its own initiative and after notifying the Data Subject individually, either keep the account (if the Data Subject expressly replies) or cancel the account and delete the Personal Data provided.

DATA SUBJECTS' RIGHTS

Any Data Subject may, at any time and, as a rule, free of charge – in accordance with the applicable legislation – exercise their rights of access, rectification and erasure (or de-indexing) of personal data or, where applicable, the right to restrict or object to processing and the right to data portability.

All the rights mentioned above should be exercised through the Regyfit website/app or, alternatively and where technically possible, through the following contact points:

"BloomFit | Treinar pela Saúde" and its processor(s) comply, and will continue to comply, scrupulously with all mandatory information duties set out in the applicable legislation within the contractual relationships between "BloomFit | Treinar pela Saúde" and the Data Subjects.

"BloomFit | Treinar pela Saúde" undertakes, always and in all cases, to meet the legal deadlines for responding to any Data Subject's exercise of their rights.

"BloomFit | Treinar pela Saúde" reserves the right to exercise, where legally and regulatorily applicable, all exceptions provided for in the applicable legislation regarding the full or partial fulfilment of Data Subjects' rights.

In any case, if Data Subjects consider that "BloomFit | Treinar pela Saúde" has breached or may have breached their rights under the applicable data protection legislation, they may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD).

DATA SUBJECT'S RESPONSIBILITY

When using the Regyfit website/app, the Data Subject undertakes to take the utmost care to prevent any unauthorised access to their Personal Data, keeping their password and any information in their Account fully confidential.

The Data Subject undertakes to have confirmed that they meet the minimum age required by law for their Personal Data to be processed under the applicable legislation.

If the Data Subject or any other user provides false or inaccurate information to "BloomFit | Treinar pela Saúde", it cannot be held liable for any damage resulting from such incorrect information.

MANDATORY PERSONAL DATA

The data duly identified as mandatory in the forms made available by "BloomFit | Treinar pela Saúde" through the Website must be provided to fulfil the contractual purpose described above or to comply with legal obligations.

If the Data Subject does not provide them, "BloomFit | Treinar pela Saúde" will not be able to fulfil its contractual obligations or respond to the Data Subject's requests.

DATA PROTECTION MEASURES

Given its strong commitment to privacy, "BloomFit | Treinar pela Saúde" has adopted several technical and organisational security measures to protect the personal data provided to us against disclosure, loss, misuse, alteration, unauthorised processing or access, and any other form of unlawful processing.

To this end, personal data collection forms require encrypted sessions, and all personal data provided by Clients are stored securely in the systems used by "BloomFit | Treinar pela Saúde", in line with all the security measures it considers essential to protect personal data.

For further information, please contact: bloomfit.geral@gmail.com

INFORMATION ABOUT THE DEVICE USED TO ACCESS THE WEBSITE

"BloomFit | Treinar pela Saúde" obtains technical information about the device used by the Client whenever they access and browse the Regyfit website/app, such as the operating system installed on the device.

For further information, please contact: bloomfit.geral@gmail.com

BLOOMFIT ONLINE PROGRAMME

The BloomFit Online Programme pages do not require registration or collect personal data, and do not use analytics, advertising or marketing cookies. Clients access them through the Regyfit website/app.

Class videos are shown through YouTube in privacy-enhanced mode. When a video starts playing, Google LLC may collect technical data under its own privacy policy, available at https://policies.google.com/privacy.

For further information, please contact: bloomfit.geral@gmail.com

COOKIES ON BLOOMFIT.PT

The bloomfit.pt website uses:

The website does not use advertising or marketing cookies. The location map (Google Maps), client reviews (Shapo) and help videos (YouTube, in privacy-enhanced mode) are displayed from their respective services, which may collect technical data under their own privacy policies.

Visitors can accept or reject analytics cookies in the notice shown on their first visit and change their choice at any time using the cookie settings icon in the bottom-left corner of the website, or through their browser settings. Rejecting analytics cookies does not affect the use of the website.

APPLICABLE LAW

This Privacy Policy is drawn up under and fully subject to Portuguese law and the GDPR.

CHANGES TO THIS PRIVACY POLICY

"BloomFit | Treinar pela Saúde" reserves the right to change this Privacy Policy or any terms of sector-specific privacy policies, always in full compliance with the applicable national and EU legislation.

Last revised: 08/10/2026

Talk to us