Depending on the service: identity, contact details, language, enquiries, orders, payments and invoices, history, sign-in and security data, preferences and consent. Coaching or Carnet Corporel may include goals, activity, questionnaire answers, sessions, weight, measurements, indicators, photos, signed documents and notes.

Data is used to respond, contract, deliver products, provide services, support users, secure accounts, prevent fraud, comply with obligations, improve the service and, with the appropriate legal basis, send communications.

Access is limited to the user, authorised Move&Groove staff where coaching exists, and providers required for payment, hosting, storage, messaging, maintenance or security.

They are bound by confidentiality and security obligations. Disclosure may also be required by law. Architecture, credentials and precise technical locations are not published.

Account and tracking data is kept during the relationship and as needed for legal obligations and claims. Inactive accounts are reviewed after twenty-four months, prospects after no more than three years, and access logs are retained up to twelve months unless another need applies.

Invoices, orders and business records are retained for the periods required in Spain, generally six years for commercial documentation, without prejudice to other tax or claims periods. Isolated technical copies may remain temporarily after deletion until normal rotation.

Non-essential trackers require the choice presented in the consent banner. Move&Groove applies proportionate organisational and technical safeguards without publishing attack-enabling details.