Last updated: 19 October 2026

At Grow StrongHer, I respect your privacy and am committed to protecting your personal information. This Privacy Policy explains how I collect, use, store and protect your personal data when you visit my website, contact me, book a fitness session, participate in a coaching program or sign up for my newsletters.

Please read this policy together with any additional privacy information provided when you register for an event, join a mailing list or become a coaching client.

1. Who is responsible for your personal data?

Data controller: Vanesa Soledad Nicolosi, self-employed professional (autónoma), trading as Grow StrongHer.

Business/tax identification number: Y7955277M

Business address: 28850- Torrejón de Ardoz, Madrid

Website: https://www.growstrongher.com

Email: info@growstrongher.com

I am responsible for deciding how and why your personal data is processed for the activities described in this policy.

2. What personal data do I collect?

The information I collect depends on how you interact with Grow StrongHer.

Website visitors

When you visit my website, certain technical and usage information may be collected, such as your IP address, browser and device information, pages visited, visit duration and interactions with the website. Analytics data is collected through Google Analytics in accordance with your cookie choices and the website's cookie settings.

Enquiries and communications

When you contact me by email, through a website form or through another communication channel, I may collect your name, email address, contact details and the information you choose to provide in your message.

Pop-up event participants

When you register for a Grow StrongHer Anywhere event, I may collect:

• Your name and email address.

• Your event registration, booking and payment status.

• Information you provide through event registration questions.

• Correspondence relating to your booking, attendance, cancellation or refund.

Event registrations are managed through Luma. Payment information is handled through the relevant booking and payment providers; I do not intend to collect or store your full payment card details directly.

I do not routinely collect health information as part of pop-up event registration.

Newsletter subscribers

If you sign up for the Grow StrongHer Anywhere mailing list or the main Grow StrongHer newsletter, I collect your email address and, where provided, your name and newsletter preferences.

These are separate mailing lists. Signing up for one does not automatically subscribe you to the other.

Personal training and coaching clients

If you participate in individual personal training or a group coaching program, I may collect additional information necessary to provide the service, such as:

• Contact and administrative information.

• Training goals and relevant exercise experience.

• Information about progress, training sessions and program participation.

• Information about injuries, medical conditions, physical limitations or other health matters that you voluntarily provide through a private client form.

Health information is treated as specially protected personal data. I collect it only where necessary for the relevant coaching service and with the appropriate legal basis, including your explicit consent where required.

Please do not send health information through general website enquiries, event registration forms or newsletter signup forms.

Photos, videos and testimonials

If I take photographs or videos at a pop-up event, or collect testimonials about a session, I will seek separate permission where required before using identifiable images or testimonials for marketing purposes.

Providing feedback or participating in an event does not automatically mean you consent to the use of your image or words in promotional materials.

3. Why do I use your personal data?

I use personal data for the following purposes:

To provide and manage services. To respond to enquiries, arrange coaching, manage bookings, deliver programs, communicate about sessions and handle payments, cancellations or refunds.

To organise Grow StrongHer Anywhere events. To manage event registrations, maintain attendee lists, send confirmation emails and reminders, communicate changes and provide essential event information.

To send newsletters and marketing communications. To share pop-up announcements, upcoming locations, training advice, relevant news and offers, where I have the appropriate permission or other lawful basis.

To improve my website and services. To understand how visitors use the website, assess website performance and improve the information and services I provide, using analytics where permitted by your cookie preferences.

To manage feedback and promotional content. To collect participant feedback and, where appropriate permission has been given, publish testimonials, photographs or videos.

To meet legal obligations. To maintain appropriate business, payment and accounting records, respond to lawful requests and establish, exercise or defend legal claims where necessary.

I do not use your personal data to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

4. What is the legal basis for processing your data?

Depending on the purpose, I rely on one or more of the following legal bases under the General Data Protection Regulation (GDPR):

Contractual necessity: Processing necessary to respond to requests leading to a service agreement, deliver coaching, administer event bookings or fulfil the services you have purchased.

Legal obligations: Processing required to comply with applicable tax, accounting or other legal requirements.

Consent: Processing based on your consent, including newsletter subscriptions where consent is required, optional marketing photography and optional testimonials.

Explicit consent for health information: Where I process health data for coaching purposes, I obtain explicit consent where required under Article 9 of the GDPR. This consent is separate from the agreement to receive coaching services.

Legitimate interests: Where appropriate, processing necessary for legitimate business purposes, such as responding to ordinary enquiries, protecting website security or maintaining records needed to manage and defend legal claims, provided those interests do not override your rights and freedoms.

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. If you do not provide information necessary to fulfil a booking or service agreement, I may be unable to provide that service.

5. Newsletters and marketing communications

Grow StrongHer offers two separate mailing lists:

• Grow StrongHer Anywhere: Updates about pop-up fitness events, locations and related activities.

• Grow StrongHer Newsletter: Broader training advice, fitness information, business updates and relevant offers.

You can choose which communications you would like to receive. Your details will not automatically be added to the other list just because you subscribe to one.

You can unsubscribe from marketing emails using the unsubscribe link included in the email or by contacting info@growstrongher.com.

I use MailerLite to manage subscriber information and send email communications.

6. Health information provided by coaching clients

Health information may reveal particularly sensitive details about an individual and receives additional protection under the GDPR.

Where health information is needed for individual training or a group coaching program, I will explain the purpose of collection and obtain the appropriate consent, including explicit consent where required.

I aim to collect only information relevant to providing coaching and supporting safe exercise participation. Access is restricted to those who need the information to provide the service.

I will not use your health information for unrelated marketing purposes or add it to my newsletter mailing lists.

You may withdraw consent for future processing based on that consent. Withdrawal may affect my ability to continue providing a service safely or appropriately. Some information may still need to be retained where another lawful basis or legal obligation applies.

7. Photos, videos and testimonials

Where consent is required for the use of identifiable photographs, videos or testimonials, I will request it separately and explain the intended uses, such as my website, social media, newsletters or promotional materials.

Consent is voluntary and is not a condition of participating in a pop-up event.

You can withdraw consent for future use by contacting info@growstrongher.com. Withdrawal does not make earlier lawful processing unlawful, and it may not be possible to remove copies that other people have already shared independently.

8. Cookies and website analytics

My website uses Google Analytics to help me understand how visitors interact with the website and to improve its performance.

Depending on the configuration, Google Analytics may process technical information, online identifiers and website usage data.

Analytics cookies and other non-essential tracking technologies will be used in accordance with applicable requirements and your cookie preferences. You can manage your choices through the website's cookie settings, where available.

For further information about the cookies used on the website, their purposes and how to manage them, please see the [Cookie Policy]([COOKIE POLICY URL]).

9. Who may receive your personal data?

I may share relevant information with service providers who help me operate my business, deliver services or manage communications. These may include:

Website hosting and technical providers: To operate and maintain the website and its forms.

Google: To provide website analytics, where enabled in accordance with your cookie choices.

Luma: To manage event registration, attendee information and event communications.

Payment service providers: To process ticket payments, refunds and related transactions through the event booking platform.

MailerLite: To manage newsletter subscriptions, subscriber groups and email delivery.

Coaching form and storage providers: To collect and securely manage information provided by coaching clients.

Professional advisers and authorities: Such as accountants, legal advisers or public authorities, where disclosure is necessary for legal or professional obligations.

Service providers process personal data according to their applicable contractual terms and, where relevant, data-processing agreements. I do not sell your personal data.

Only the information necessary for the relevant purpose should be shared.

10. International data transfers

Some providers may process personal data outside the European Economic Area (EEA).

For further information, you can consult the privacy policies and data-processing documentation of the relevant providers:

• Luma Privacy and Security Information

• MailerLite Legal and Data Processing Information

• Google Privacy Policy

11. How long do I keep your personal data?

I retain personal data only for as long as necessary for the purposes described in this policy, taking account of legal obligations and the need to establish or defend legal claims.

In general:

• Enquiries: For as long as necessary to respond and deal with any resulting matter.

• Event bookings: For as long as necessary to administer the event, handle questions, cancellations, refunds or complaints, and meet relevant legal obligations.

• Invoices and accounting records: For the legally required retention periods.

• Newsletter subscribers: Until you unsubscribe or withdraw consent, subject to retaining limited information where needed to respect your unsubscribe request and maintain suppression records.

• Coaching and health information: For as long as necessary to provide the coaching service and address relevant safety, contractual or legal matters. Where possible, health information will be deleted or securely anonymized when no longer needed, subject to any applicable retention obligations.

• Photographs, videos and testimonials: For as long as they are needed for the agreed purposes or until consent is withdrawn, where consent is the applicable basis, subject to legal requirements.

When personal data is no longer needed, it will be securely deleted, anonymized or otherwise handled in accordance with applicable requirements.

12. How do I protect your data?

I take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or misuse.

These measures include limiting access to information, using appropriate service providers and taking care when handling client and participant information.

No method of electronic storage or transmission can be guaranteed to be completely secure.

13. Your data protection rights

Under applicable data protection law, you may have the right to:

• Request access to your personal data.

• Ask for inaccurate or incomplete information to be corrected.

• Request deletion of your data where the legal conditions are met.

• Request restriction of processing in certain circumstances.

• Object to processing based on legitimate interests or direct marketing.

• Request portability of data where the applicable conditions are met.

• Withdraw consent at any time where processing is based on consent.

• Lodge a complaint with the Spanish Data Protection Agency (AEPD).

To exercise your rights, contact me at info@growstrongher.com. I may need to verify your identity before responding.

You can also find information about making a complaint at the Spanish Data Protection Agency (AEPD).

These rights are subject to the conditions and exceptions established by applicable law. For example, some information may need to be retained to comply with legal obligations or establish, exercise or defend legal claims.

14. Third-party websites and services

My website and communications may contain links to third-party websites or services, including event booking, social media and payment platforms.

Those providers operate under their own privacy policies and terms. I encourage you to review them when using their services. This policy does not govern the independent processing of personal data carried out by those providers under their own responsibilities.

15. Changes to this Privacy Policy

I may update this Privacy Policy to reflect changes in my services, the tools I use or applicable legal requirements.

The most recent version will be published on this page, with the updated date shown at the top. Where required, I will provide additional information about significant changes.

16. Contact

If you have questions about this Privacy Policy or how your personal data is handled, please contact:

Vanesa Soledad Nicolosi | Grow StrongHer

Email: info@growstrongher.com