Your data
PRIVACY
POLICY.
Last updated: 11 November 2026
This page explains what information we collect when you use this website, why we need it, who can see it, and the rights you have over it. We only collect what we need to train you, and we never sell your data.
01 Who we are
This website belongs to Michael Aggelos Pandeli, personal trainer, based in Larnaca, Cyprus. Michael is responsible for your personal information (the "data controller" under the EU General Data Protection Regulation, GDPR).
For any question about your data, email [email protected].
02 What we collect
We only collect what you type into one of our three forms:
We do not take card payments online; you pay in person at your session. We do not use tracking, advertising or analytics tools.
03 Why we use it
- To arrange your training: confirm or decline bookings, prepare your custom program and reply to your messages. This is needed to provide the service you asked for.
- To email you about it: you get an automatic email when your request is received, and another when Michael confirms or declines it.
- To keep the website safe: limiting how many forms can be sent, to stop spam and abuse.
We never use your information for marketing, and never sell or rent it to anyone.
04 Health information
Some things you might share, such as an injury, pain, your weight or a medical condition, count as health data, which the law protects more strictly. We only use it so Michael can train you safely and build a program that suits you.
Sharing it is always your choice. By ticking the privacy box on a form, you give your explicit consent for Michael to use the health information you include for this purpose only. You can withdraw that consent at any time by emailing us, and we will delete it.
05 Who can see it
Only Michael reads your information. The website's developer has technical access to keep the site working and secure, and does not use your data for anything else.
To run the website, we use a small number of trusted service providers. They only store or deliver data for us, under contract, and may not use it for their own purposes:
- Secure database hosting: stores bookings, questionnaires and messages on servers in the European Union.
- Email delivery: sends the automatic emails. This provider may process data outside the EU, protected by the EU's Standard Contractual Clauses.
- Email inbox: where Michael receives your emails and form notifications.
- Website hosting: delivers the website to your browser and forwards emails sent to @mpanteli.com.
You can ask us for the names of these providers at any time.
We only share your information with anyone else if the law requires it.
06 How long we keep it
- Bookings: up to 12 months after the session date.
- Questionnaires: up to 12 months after your program is sent, so Michael can update it if you come back.
- Messages: up to 12 months after we reply.
After that we delete it, unless the law requires us to keep something longer. You can ask us to delete it sooner at any time.
07 How we protect it
Everything is sent over an encrypted connection (HTTPS). Visitors to the website can send information but can never read anyone's data back. Only Michael and the developer can log in to see it, and the database checks their permission on every request.
09 Your rights
Under the GDPR you can ask us at any time to:
- give you a copy of the information we hold about you;
- correct anything that is wrong;
- delete your information;
- stop or limit how we use it, or withdraw your consent;
- send your information to you or another provider in a common format.
Email [email protected] and we will reply within one month. It is free.
If you are unhappy with how we handle your data, you can complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).
10 Changes to this policy
If we change how we use your information, we will update this page and the date at the top.