Privacy policy

Who we are

Impulse Fitness is a gym in Codru. We decide how your data is used, so we are the personal data controller under Law No. 195/2024 on personal data protection of the Republic of Moldova. For any question about your data, you can reach us here:

Operator

Impulse Fitness

Address

Str. Grenoble 1A, Codru, Republic of Moldova

Phone

+373 69 338 989

WhatsApp

Message us on WhatsApp

Email

contact@impulsefitness.md

What data we keep

• Identity and contact: first and last name, sex, date of birth, email, phone, preferred language and a profile photo, so the front desk can recognise you.
• Membership: the memberships you bought, payments, debts and advance payments, freezes.
• Visits: the date and time of each time you enter and leave the gym.
• Training profile and measurements: height, weight, body measurements, goals, experience level and logged workouts.
• Health questionnaire: the conditions, injuries or limits you choose to tell us about. This is sensitive data, so we only ask for it with your explicit consent.
• Technical data: IP address, browser and pages visited, kept in the server logs for security, and the cookies described below.

We do not ask for your personal ID number (IDNP) and we do not keep your bank card details: you pay at the front desk.

Why we use it

• To give you your membership (our contract with you): registration, activation, checking access at the entrance, and keeping track of visits and payments.
• To make your workouts better (your consent): your profile, measurements and health questionnaire help us and the trainers choose the right exercises and show your progress.
• To write to you (our contract and your consent): service emails, such as account confirmation or membership expiry, and, only with your consent, offers and news.
• To follow the law (legal obligation): payment records and the documents required by accounting and tax law.
• To protect the gym and the website (our legitimate interest): security logs and preventing abuse.

We do not sell your data and we do not use it for advertising.

Emails with offers and news

We send offers and news by email only if you agreed to it, when you registered or in your account. You can withdraw your consent at any time: with the unsubscribe link in every email, in your account settings, or by telling us at the front desk. Service emails, for example "your membership is ending", are not marketing, and you get them as long as you have an account.

If you invite a friend, we use their email address only once, to send them that invitation. We keep it with the invitation so you can see whether it was sent and so the same address doesn't get several invitations. We never use it for offers or subscribe them to anything.

Digital trainer

When we launch the digital trainer and if you choose to use it, your workout plan will be created with the help of an external artificial intelligence provider. We send it only what it needs: your age (not your date of birth), sex, level, goals, the gym's equipment and the limits you told us about. We do not send it your name, email or phone.

We use the digital trainer only with your separate consent, which you can withdraw at any time. The generated plan is not medical advice.

Who can access the data

• the gym staff and trainers, only as much as they need for their work;
• the providers who help us run the service: website and database hosting, email delivery and, for the digital trainer, the artificial intelligence provider. They use the data only on our instructions;
• public authorities, only when the law requires it.

Some providers may keep data outside the Republic of Moldova, for example in the European Union. In that case we only choose providers that offer appropriate safeguards.

How long we keep the data

• Account, member record and visits: while you are a member and for 3 more years after your last membership ends. Then we delete or anonymise them.
• Payments and accounting documents: as long as accounting and tax law requires.
• Health questionnaire and measurements: until you delete your account or withdraw your consent.
• Consent for emails with offers: until you withdraw it.
• Server logs: 31 days.
• Database backups: 30 days.

Your rights

• Access: find out what data we have about you and get a copy.
• Export: get your data in a common electronic format, so you can use it elsewhere.
• Correction: correct data that is wrong or incomplete.
• Deletion: ask us to delete your data. We keep only what the law requires, for example payment records.
• Restriction and objection: ask us to stop using your data for a certain purpose.
• Withdrawing consent: at any time, without affecting what we did before.
• Complaint: to the National Center for Personal Data Protection (datepersonale.md).

To use any of these rights, write to us or come to the front desk. We will answer within 30 days. We may ask you to confirm that it is you, so that we do not give your data to someone else.

Cookies

We only use cookies that are strictly necessary for the website to work. We do not use advertising, analytics or social media cookies. Our fonts are hosted on our own server, not by Google.

The Google map on the contact page loads only after you press the load button. Only then can Google set its own cookies, under Google's rules.

How we protect the data

The website uses an encrypted connection (HTTPS). Passwords are stored only in encrypted form, so even we cannot read them. Each staff member sees only the data they need for their work.

Changes

When we change this policy, we update the date at the top. If the change is important, we will tell you by email or in your account.