Privacy Policy
1. Controller
Milev Consult Ltd (Милев Консулт), UIC 131394252, 83 Evlogi i Hristo Georgievi Blvd., Sofia, Bulgaria, e-mail info@functionalbodybuilding.com.
2. What we collect
- Account: name, e-mail, password (stored only as a secure hash).
- Questionnaires: age, height, weight, body measurements and body composition, goals, daily schedule, eating habits, training history and strength benchmarks.
- Health data (special category): diagnosed conditions, medication, allergies, pain, injuries and restrictions, and any test results you upload.
- Training diary: workouts, sets, weights and body-weight entries you log.
- Payments: handled by Stripe; we receive the payment status and a customer reference, never your card number.
3. Why and on what basis
- To create, review and adapt your plan — performance of our contract (Art. 6(1)(b) GDPR).
- Health data — only with your explicit consent (Art. 9(2)(a) GDPR), given when you create your account. You may withdraw it at any time; without it we cannot build a safe plan.
- Accounting and tax records — legal obligation (Art. 6(1)(c)).
4. Who processes data for us
- SuperHosting.BG (hosting, Bulgaria / EU).
- Stripe (payments).
We do not sell your data or use it for advertising.
5. How long we keep it
While your account is active and up to 12 months after it ends, unless you ask us to delete it earlier. Accounting records are kept as required by law.
6. Your rights
You can request access, correction, deletion, restriction, portability, object to processing and withdraw consent by writing to info@functionalbodybuilding.com. You can also complain to the Commission for Personal Data Protection (cpdp.bg).
7. Cookies
We use only one essential session cookie to keep you signed in. No tracking or advertising cookies.
8. Security
Data is transmitted over HTTPS and stored outside the public web folder. Access to client records is limited to you and your coach.