Privacy Policy

Last Updated: 21/07/2026

This Privacy Notice describes how Lift-AF (we, us) handle your (user) personal data.

1. WHAT IS PERSONAL DATA AND OTHER RELATED TERMS USED IN THIS PRIVACY NOTICE?

1.1. In this Privacy Notice we use the following terms:

1.1.1. ‘personal data’ means any information relating to an identified or identifiable natural

person (‘data subject’);

1.1.2. 'data subject’ is an identifiable natural person who can be identified, directly or indirectly, In particular by reference to an identifier such as name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

While using our website website you are considered to be a data subject.

1.1.3. 'processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

1.1.4. 'controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are handled safely, lawfully, and in compliance with data privacy regulations such as GDPR.

We are the controller of your personal data. You may find more information about us in chapter 3 of this Privacy Notice.

1.1.5. ‘processor’ means a natural legal person, public authority, agency or other body which processes personal data on behalf of the controller;

1.1.6. ‘third party’ means a natural or legal person, public authority , agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

1.1.7. ‘consent’ of the data subject means freely given, specific, informed and unambiguous indication of the data subjects wishes by which they, by a statement of clear affirmative action, signifies agreement to the processing of personal data relating to them;

1.1.8. ‘GDPR’ means Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC.

2. WHAT KIND OF PERSONAL DATA DO WE PROCESS AND WHY?

2.1. Personal data which is being collected- Purpose/s for collecting (processing) personal data

Name - Sign up/ Use of service or product

Contact Information (telephone number, email)- Sign up/ Use of service or product

Address- Use of service or product

Health information- Use of service or product

Please note that our website is not intended to offer any services directly to children. We do not knowingly collect information from children.

3. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

3.1. The controller of the personal data within this website is:

Lift-AF

Responsible person: Alexandra Farmer

Phone number: +447349742375

Email: alex@lift-af.com

You may always reach us by sending an electronic message to our email, via phone call (by using the contact information listed above) or vial message on the contact form on our website.

4. HOW LONG DO WE STORE YOUR PERSONAL DATA?

4.1 We store your data for as long as personal data is needed for the respective purpose and then delete it as far as no legal storage obligations stand in the way.

5. WHAT ARE THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?

5.1. Article 6 1 lit. a GDPR- the data subject has given consent to the processing of his or her personal data for one or more specific purposes- serves our company as the legal basis for processing operation in which we obtain consent for a specific processing purpose.

5.2. if the processing of personal data is necessary for the performance of a contract which the data subject is party, as is the case, for example, with processing operations that are for the delivery of goods or provision of other service or consideration, the processing is based on Article 6 1. lit b GDPR- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services.

5.3. If our company is subject to a legal obligation by which processing of personal data becomes necessary, such as the fulfillment of tax obligation, the processing is based on Article 6 1. lit.c GDPR- processing is necessary for compliance with a legal obligation to which the controller is subject.

5.4.In rare cases, the processing of personal data might become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example if a client were to be injured during training and as a result their name, age or other vital information had to be passed on to a doctor, hospital or third party. Then the processing would be based on Article 6 1. lit. d GDPR- processing is necessary in order to protect the vital interests of the data subject or of another natural person.

5.5. Finally, processing operations could be based on Article 6 1. lit. f GDPR- processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller.

5.6. Your personal data may be transferred to the country other than your own. This includes transfer to both EU countries and non-EU countries, in which no level of data protection comparable to that in the EU is guaranteed. This applies in particular to the USA, where unsolicited access by government agencies is possible. A transfer to recipients outside the EU only takes place if it is ensured that the recipient of the data guarantees an adequate level of data protection and that there are no other interests worthy of protection against the data transfer.

6. WHAT ARE YOUR RIGHTS WITH RESPECT TO PROTECTION OF YPUR PERSONAL DATA?

6.1. The right to be informed- an obligation on us to inform you how we use your personal data (as described in this Privacy Notice)

6.2. Right of access- The controller offers you access to your personal data that we process. This means you can contact us and request from us a confirmation whether or not your personal data is being processed and if so, you have the right to request access to your data, which we will provide to you in the form of a ‘registry’ (stating, in particular, purposes, categories of personal data, categories of recipients of personal data, storage periods or criteria for which determines storage periods).

6.3. Right to rectification- you have the right to have inaccurate personal data we have stored about you rectified.

6.4. Right to erasure- you may also ask us to erase your personal data from our systems. We will comply with such requests unless we have a legitimate ground to not delete your personal data.

6.5. Right to restriction of processing- you may request us to restrict certain processing of your personal data. If you restrict certain processing of your personal data, this may lead to fewer possibilities to use our services and website.

6.6. Right to data portability- You have the right to receive your personal data from us in a structured, commonly used and machine- readable format in order to transmit the personal data to another controller.

Right to object- you have the right to object to us processing your personal data (for example, if you object to us processing your data for direct marketing).

6.7. Rights in relation to automated decision-making and profiling- the right you have for us to be transparent about any profiling we do, or any automated decision-making.

6.8. Right to withdraw consent- you have the right to revoke any consent you may have previously given us at any time, if we have collected and processed your personal data with your consent. Withdrawing your consent will not affect the lawfulness of any processing we conducted with your consent prior to withdrawal, nor will it affect processing of your personal information conducted in reliance of lawful processing grounds other than consent.

6.9. How to use your rights- you may exercise your rights above in writing by sending an email to the contact details (listed above in this Privacy Notice). you will not have to pay a fee to exercise any of your rights unless your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. We may require confirmation of your identity depending on your request. We respond to all requests we receive from individuals wishing to exercise their data rights in accordance with applicable data protection laws.

7. CAN THIS PRIVACY NOTICE BE AMENDED?

Yes.

We may amend this Privacy Notice at any time. Please refer back to this notice on a regular basis. When a new Privacy Notice has come into force it will be published here on this website. You may always find out whether our Privacy Notice has been amended by checking the ‘last updated’ legend on the top of this page.