Privacy Policy

Lucsoft SL (“we”, “us”, “our”) is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, process, and protect your personal data when you access or use the AlexaFit website (the “Website”).

1. Controller Information

Data Controller:

Lucsoft SL
Urbanizacion Paraiso de la Bahia, Bloque 1, H
Casares Costa, 29690
Malaga, Spain
Email: lucsoft.sl@gmail.com

Lucsoft SL acts as the data controller for personal data collected through the Website.

2. What Data We Collect

2.1 Information You Provide

We may collect:

• Name
• Email address
• Account credentials
• Payment-related information (processed via Stripe)
• Body metrics (e.g., weight, body composition)
• Nutrition and fitness-related information
• Photos uploaded by you
• Any information you voluntarily submit through forms or communication

2.2 Special Category Data (Health Data)

Body metrics, fitness information, and nutrition-related data may qualify as health-related data under applicable data protection laws.

We process this data only:

• With your explicit consent
• For the purpose of providing AlexaFit services

You may withdraw consent at any time (see Section 10).

2.3 Automatically Collected Data

We may automatically collect:

• IP address
• Device type
• Browser type
• Operating system
• Usage data
• Cookies and tracking technologies

3. How We Use Your Data

We process personal data for the following purposes:

• To create and manage your account
• To provide fitness and nutrition services
• To process payments
• To improve Website performance
• To communicate with you
• To comply with legal obligations
• To prevent fraud and abuse

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract – To provide services you request
• Consent – For health data and marketing communications
• Legitimate Interest – To improve services and prevent fraud
• Legal Obligation – To comply with applicable laws

5. Payment Processing

Payments are processed via third-party payment providers, including Stripe.

Lucsoft SL does not store full credit card information.

Stripe processes payment data according to its own privacy policy and security standards.

6. Data Sharing

We may share personal data with:

• Payment processors (e.g., Stripe)
• Hosting providers
• Analytics providers
• Technical service providers
• Legal or regulatory authorities where required

We do not sell personal data.

7. International Data Transfers

Your data may be transferred outside the European Economic Area, including to the United States.

Where such transfers occur, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Contractual data protection agreements with service providers

8. Data Retention

We retain personal data:

• For as long as your account is active
• As necessary to provide services
• To comply with legal obligations
• To resolve disputes and enforce agreements

Health-related and account data may be retained until you request deletion, subject to legal requirements.

9. Security

We implement appropriate technical and organizational measures to protect your personal data.

However, no system can guarantee absolute security.

10. Your Rights (GDPR & Applicable Laws)

If you are located in the EEA or other regions with similar laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise your rights, contact: lucsoft.sl@gmail.com

11. US Privacy Rights

If you are a resident of certain US states (such as California), you may have rights under applicable laws, including:

• The right to request access to your personal data
• The right to request deletion
• The right to know what data is collected
• The right not to be discriminated against for exercising privacy rights

We do not sell personal information.

12. Cookies & Tracking Technologies

The Website uses cookies and similar technologies to:

• Ensure proper Website functionality
• Analyze usage
• Improve user experience

You may manage cookie preferences via your browser settings or cookie consent banner where applicable.

A separate Cookie Policy may provide additional details.

13. Children’s Privacy

The Website is not intended for individuals under the age of 18.

We do not knowingly collect personal data from minors.

If we become aware that such data has been collected, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

Updated versions will be posted on this page with a revised effective date.

Continued use of the Website after changes constitutes acceptance of the updated Privacy Policy.

15. Contact

If you have any questions regarding this Privacy Policy or your personal data, contact:

Lucsoft SL
lucsoft.sl@gmail.com

Effective Date: 09 February 2025