top of page

Cátia Conde

Bio

Programs

Book a class

Privacy Policy

Train With Catia - trainwithcatia.com Last updated: September 1st, 2026!

​

This Privacy Policy explains how Catia Conde, operating as Train With Catia ("we", "us", "our"), collects, uses, and protects your personal data when you visit trainwithcatia.com (the "Site") or use our Services, in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and the Portuguese Data Protection Act (Lei n.º 58/2019).

​

1. Data Controller

The data controller responsible for your personal data is:

  • Catia Conde, trading as Train With Catia

  • Address: Vila-Moura, Algarve

  • Contact for privacy matters: catiaslconde@gmail.com

  • ​

2. What Personal Data We Collect

Depending on how you interact with the Site, we may collect:

  • Contact details you provide via booking forms, the contact page, or WhatsApp - name, email address, phone number.

  • Booking and service information - programme or class chosen, session dates, health information you voluntarily disclose to help us deliver safe sessions (see Section 3 on special category data).

  • Payment information - processed by our payment provider(s); we do not store full card details ourselves.

  • Technical data - IP address, browser type, device information, and pages visited, collected automatically via cookies and analytics tools (see Section 7).

  • Communications - records of emails, WhatsApp messages, or other correspondence between you and us.

​

3. Special Category (Health) Data

If you voluntarily share health-related information with us (for example, an injury, pregnancy, or medical condition) so that we can safely tailor a session, this is treated as a special category of personal data under Article 9 GDPR. We only process this data:

  • with your explicit consent, given when you disclose it to us for the purpose of session safety; and

  • strictly to the extent necessary to deliver safe, appropriate coaching.

We do not use this information for any other purpose, and we do not share it with third parties except where required by law or, in an emergency, to protect your vital interests.

​

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

PurposeLegal basis

Responding to enquiries, arranging bookingsPerformance of a contract / pre-contractual steps (Art. 6(1)(b))

Delivering personal training / Pilates sessionsPerformance of a contract (Art. 6(1)(b))

Health information for safe session planningExplicit consent (Art. 9(2)(a))

Sending you marketing updates (if opted in)Consent (Art. 6(1)(a))

Website analytics and improving the SiteLegitimate interest (Art. 6(1)(f)) / consent for non-essential cookies

Complying with tax, accounting, or legal obligationsLegal obligation (Art. 6(1)(c))

​

5. How We Use Your Data

We use your personal data to:

  • respond to enquiries and confirm bookings;

  • deliver, personalise, and improve our Services;

  • process payments and maintain accounting records as required by Portuguese law;

  • send you service-related communications (e.g. booking confirmations, schedule changes);

  • with your consent, send occasional marketing or newsletter content; and

  • comply with our legal and tax obligations.

We do not sell your personal data to third parties.

​

6. Who We Share Your Data With

We may share limited personal data with trusted third-party service providers who process data on our behalf ("processors"), including:

  • Wix.com Ltd - our website hosting and booking infrastructure platform.

  • Google (Google Analytics) - website usage analytics, where cookies are accepted.

  • Meta / WhatsApp - where you choose to contact us via WhatsApp or interact with our Instagram content.

  • Payment processors used to handle transactions.

Where these providers are located outside the European Economic Area (EEA) - including the United States - transfers of your data are safeguarded through mechanisms recognised under GDPR, such as the EU Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission. You can request more detail on these safeguards by contacting us.

​

7. Cookies

The Site uses cookies and similar technologies, in accordance with the Portuguese ePrivacy rules (Lei n.º 41/2004, as amended) implementing the EU ePrivacy Directive. Cookies fall into these categories:

  • Strictly necessary cookies - required for the Site to function; no consent is required for these.

  • Analytics cookies (e.g. Google Analytics) - help us understand how visitors use the Site.

  • Marketing/embedded content cookies (e.g. Instagram feed embeds) - used for social media integration.

Non-essential cookies are only set with your consent, given via the cookie banner shown when you first visit the Site. You can withdraw or change your consent at any time through your browser settings or the Site's cookie preferences tool.

 

​

8. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this Policy:

  • Booking and client records: for the duration of our working relationship and for [INSERT PERIOD, e.g. 5 years] afterwards, in line with Portuguese tax and accounting retention obligations.

  • Health information: deleted or anonymised once no longer needed for session planning, and in any case no later than [INSERT PERIOD].

  • Marketing data: until you unsubscribe or withdraw consent.

  • Analytics data: as set by the retention settings of the relevant analytics tool.

  • ​

9. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you;

  • Rectify inaccurate or incomplete data;

  • Erase your data ("right to be forgotten"), where applicable;

  • Restrict or object to certain processing;

  • Data portability - receive your data in a structured, machine-readable format;

  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal; and

  • Lodge a complaint with the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados), at www.cnpd.pt, or with the supervisory authority in your own EU member state of residence.

To exercise any of these rights, contact us at [INSERT EMAIL]. We will respond within one month, as required by GDPR.

​

10. Children's Privacy

Our Services are intended for adults (18+). We do not knowingly collect personal data from children. Where a minor's data is processed with parental consent (e.g. for a supervised session), we apply the same protections described in this Policy.

​

11. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including relying on the security measures provided by our website and processing platforms.

​

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates the most recent revision.

​

13. Contact Us

For any questions about this Privacy Policy or how we handle your personal data:

Train With Catia [ADDRESS] [EMAIL] · [PHONE/WHATSAPP]

You may also contact the Portuguese data protection authority (CNPD) directly at www.cnpd.pt.

bottom of page