The Performance Dojo

Guillaume Baverel · guillaume@theperformancedojo.com

Last updated: June 3, 2026

This Privacy Policy explains how The Performance Dojo (“we,” “us,” or “our”), operated by Guillaume Baverel as an autónomo in Spain, collects, uses, stores, and protects your personal data when you use our website (theperformancedojo.com) or engage with our online coaching services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Spanish data protection law (Ley Orgánica 3/2018, LOPDGDD).

1. Data controller

Guillaume Baverel, operating as The Performance Dojo
Barcelona, Spain
Email: guillaume@theperformancedojo.com

2. Data we collect

We collect the following categories of personal data:

Identity and contact data:

  • Full name
  • Email address
  • Phone number

Health and body composition data (special category data under GDPR Art. 9):

  • Body weight and weight history
  • Caloric intake and nutritional information
  • Step count and physical activity data
  • Sleep data
  • Progress photos
  • Any other health or fitness information you share with us voluntarily during coaching

Payment data: Payment is processed by Stripe and/or Qonto. We do not store your card details. We retain transaction records (amount, date, currency) for legal and accounting purposes.

Communications: Messages, voice notes, and files exchanged via WhatsApp or email during the coaching relationship.

3. Legal Basis for Processing

We process your data on the following legal bases:

Explicit consent (Art. 9(2)(a) GDPR): for processing special category health data. You provide this consent at the time of onboarding via our intake process.

Contract performance (Art. 6(1)(b) GDPR): to deliver the coaching services you have purchased.

Legal obligation (Art. 6(1)(c) GDPR): to comply with Spanish tax and accounting requirements.

4. How we use your data

  • To deliver personalised training, nutrition, and recovery coaching
  • To track your progress over time
  • To communicate with you about your programme
  • To process payments and issue invoices
  • To comply with our legal obligations (tax, accounting)

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties.

5. Third party Services and Data Sharing

Your data may be processed by the following third-party services in the course of delivering our services:

  • Stripe (payment processing) — Stripe Privacy Policy
  • WhatsApp / Meta (client communication) — messages you send via WhatsApp are processed by Meta Platforms Inc. under their privacy terms. You are advised that WhatsApp is not a GDPR-certified data processor and that health data shared via this channel is transmitted outside of a GDPR-controlled environment.
  • Microsoft Office (document management and analysis)
  • Anthropic / Claude (AI-assisted analysis and coaching support)
  • Qonto (invoicing and accounting)
  • Google (intake forms)

We share only the minimum data necessary with each third party and do not authorise them to use your data for their own purposes.

6. International transfer

Some third-party providers listed above (including WhatsApp/Meta and Anthropic) may transfer and process data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions as permitted under GDPR Chapter V. However, we draw your attention in particular to the use of WhatsApp for health data, as noted in Section 5.

7. Data retention

  • Client coaching data (progress, health metrics, photos): retained for the duration of the coaching relationship, plus 12 months after the end of your programme, then securely deleted.
  • Financial and invoicing records: retained for 5 years as required under Spanish tax law.
  • Communications (WhatsApp, email): retained for the duration of the coaching relationship and deleted upon request after programme completion.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — to request a copy of the data we hold about you
  • Right to rectification — to correct inaccurate or incomplete data
  • Right to erasure — to request deletion of your data (subject to legal retention obligations)
  • Right to restrict processing — to ask us to limit how we use your data
  • Right to data portability — to receive your data in a structured, machine-readable format
  • Right to withdraw consent — for health data processing, you may withdraw consent at any time; this does not affect the lawfulness of prior processing
  • Right to lodge a complaint — with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es

To exercise any of these rights, contact us at guillaume@theperformancedojo.com. We will respond within 30 days.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include password protection, limited access to data, and secure payment processing via Stripe. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Testimonials and marketing content

Photos, progress images, or testimonials shared by clients may be used for marketing purposes (website, social media, or promotional materials) only with the client’s explicit prior written consent. Such consent will be sought separately and is entirely optional — it has no bearing on the delivery of your coaching programme.

You may withdraw your consent at any time by contacting us at guillaume@theperformancedojo.com. Upon withdrawal, the relevant content will be removed within a reasonable timeframe.

11. Cookies

Our website may use cookies for basic functionality and analytics. Where non-essential cookies are used, we will request your consent via a cookie banner. You can manage your cookie preferences at any time through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Where changes are material, we will notify active clients by email.

13. Contact

For any questions about this Privacy Policy or your data, contact us at:
guillaume@theperformancedojo.com

Scroll to Top