Privacy notice
This notice explains what personal data we collect when you use peakprotocol.fit, why we collect it, and what rights you have. It is written to meet Regulation (EU) 2016/679 (GDPR) and applies to visitors from all countries.
1. Controller
7901 4th St N, Ste 300
St. Petersburg, FL 33702
United States
Email: hello@peakprotocol.fit
Representative in the European Union (Art. 27 GDPR)
[[street and number]]
[[postcode, city, member state]]
Email: [[representative contact email]]
We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR.
2. No cookies, no tracking
This website sets no cookies. It runs no analytics, no advertising pixels and no session tracking. Fonts are loaded from your own device rather than from a third-party font service, so visiting the site transfers no data to any advertising or analytics provider. This is why you are not asked for cookie consent.
3. Data processed when you visit
Our hosting provider processes server log data that your browser transmits automatically. This is technically necessary to deliver the website and to protect it against attacks.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| IP address (shortened where possible), date and time, page requested, referrer, browser and operating system | Delivering the site, security, abuse prevention | Art. 6(1)(f) GDPR — legitimate interest in a secure, functioning website | Held only briefly by the hosting provider, then deleted or aggregated |
Hosting provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States. A data processing agreement under Art. 28 GDPR is in place. Log data is retained by the hosting provider for a short period for security and abuse-prevention purposes and is not used to identify individual visitors.
4. Data you send us
Enquiry form
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Name, email address, area of interest, your message | Answering your enquiry and, where relevant, preparing a coaching agreement | Art. 6(1)(b) GDPR — steps prior to entering a contract; Art. 6(1)(f) for general enquiries | Deleted 12 months after the last contact, unless a contract results |
The enquiry form is operated by Basin (usebasin.com), a service of Moonshot Ventures Inc., British Columbia, Canada, as a processor on our behalf under Art. 28 GDPR. The form provider deletes submissions automatically 365 days after receipt. Submissions are stored on servers in Canada, a country covered by an adequacy decision of the European Commission; file storage, where used, is located in the United States.
If you email us directly, we process your address and the content of your message for the purpose of replying. Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR. Retention as above.
Our mailboxes are hosted by Migadu-Mail GmbH, Switzerland, as a processor on our behalf under Art. 28 GDPR. Enquiries sent through the form are also forwarded to these mailboxes. Switzerland is covered by an adequacy decision of the European Commission.
5. Health-related information
We do not ask for health data through this website. Do not send laboratory results, diagnoses or other health information through the enquiry form or by unencrypted email.
If you become a coaching client, health-related information is processed only within the coaching relationship, only with your explicit consent under Art. 9(2)(a) GDPR, and under a separate agreement that sets out the details. You can withdraw that consent at any time with effect for the future.
6. Payments
Payments for coaching and digital products are processed by Stripe, LLC, United States. For individuals in the European Economic Area, Stripe Technology Company Limited, Ireland, is responsible for the processing of personal data. Stripe acts as an independent controller. We receive confirmation that a payment was made, together with the information needed for invoicing and accounting. We do not receive or store your full card details. Please see the payment provider's own privacy notice for how it handles your data.
7. Transfers outside the EU
We are established in the United States, so data you send us is processed there. Where our processors are located outside the European Economic Area, transfers are based on the European Commission's Standard Contractual Clauses under Art. 46(2)(c) GDPR, or on an adequacy decision where one applies.
You should be aware that the level of data protection in third countries may not correspond to that in the European Economic Area, and that public authorities there may have access rights that are broader than under EU law.
8. Recipients
We do not sell personal data and do not share it for advertising. Data is disclosed only to:
- our hosting provider, form provider and email provider, as processors;
- our payment provider, where you make a purchase;
- our accountants and tax advisers, where required for bookkeeping and tax filings;
- public authorities, where we are legally obliged to disclose.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have data erased (Art. 17);
- have processing restricted (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting processing that took place before withdrawal (Art. 7(3)).
To exercise any of these, write to hello@peakprotocol.fit or contact our EU representative. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state where you live, work, or where the alleged infringement took place.
10. Is providing data required?
No. You can browse this website without providing any personal data. If you want us to answer an enquiry, we need at least an email address — without it we cannot reply.
11. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
12. Changes
We update this notice when our services or the legal position change. The version in force is always the one published here, with the date shown at the top.