Privacy Policy

Last updated: 25th October 2022

1) Who we are?

European Fitness And Wellness Academy (EFWA®) (“we”, “us”, “our”).

Registered address: Unit Da2 Sutherland House, 43 Sutherland Road, E17 6BU London, United Kingdom

Company No: 11479811

Email: info@efwa.co.uk · Tel: +44 7732 206691

We are the data controller for personal data processed via efwa.co.uk and our e-learning platform.

2) What we collect ?

• Identity & contact: name, email, phone, billing address.
• Account & study: username, enrolments, course progress, assessments, support messages.
• Transactions: orders, billing history (we do not store full card numbers; only tokens/last 4 digits from payment processors).
• Technical: IP, device/browser type, logs, approximate location, cookies.
• Marketing preferences: newsletter opt-ins/opt-outs.

3) Why we use it (lawful bases) ?

• Contract: create/manage your account, process orders, provide digital (non-physical) access, issue certificates.
• Legitimate interests: site security, fraud prevention, service improvement, limited customer communications.
• Consent: email marketing and non-essential cookies (you can withdraw at any time).
• Legal obligation: tax and accounting records.

4) Payments

Card and wallet payments are handled by independent processors (e.g., Revolut, Square, Apple Pay/Google Pay). Card data is processed on their systems; we receive payment status and identifiers only.

5) Cookies & analytics

We use essential cookies (login, basket, checkout) and optional analytics/marketing cookies. You can manage preferences via our cookie banner. Blocking optional cookies will not affect core functions. See our Cookie Policy for details.

6) Sharing your data

We share personal data only with trusted providers necessary to run our services: hosting and security, e-learning/LMS, email and newsletter delivery, analytics, customer support and payment processors. We may disclose information to authorities where required by law. We do not sell personal data.

7) International transfers

Where suppliers are outside the UK, we use appropriate safeguards (UK adequacy decisions, UK IDTA/Addendum or standard contractual clauses with additional measures).

8) Retention

• Account, orders, invoices: up to 6 years (legal/tax).
• Learning records/certifications: for the life of your account or as required for verification.
• Marketing data: until you unsubscribe or request deletion.
  After these periods we anonymise or securely delete data.

9) Your rights (UK GDPR)

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests, and withdraw consent at any time. To exercise rights, email info@efwa.co.uk. We reply within one month.

If you are unhappy with our response, you can contact the Information Commissioner’s Office (ICO).

10) Security

We use HTTPS, access controls and appropriate technical/organisational measures. No system is 100% secure; please keep your password confidential.

11) Children

Our services are intended for adults (18+) unless stated otherwise. If we learn we hold a child’s data without proper consent, we will delete it.

12) Changes

We may update this Policy. Material changes will be posted here with an updated “Last updated” date.