Privacy Policy

Data Controller:
Traveller Street, Lda, VAT Number 517831490, Rua Pedro Nunes – IPN Coimbra, Edíficio C, 3030-199 Coimbra, a legal entity incorporated in Portugal, hereinafter referred to as “Moovflex”.
Contact for data protection matters: hello@moovflex.com

Moovflex is committed to protecting the privacy of its Users, ensuring full compliance with Regulation (EU) 2016/679 (GDPR), Law no. 58/2019 of 8 August, and all other applicable legislation regarding the collection, protection, and processing of personal data.

This Privacy and Data Protection Policy aims to inform Users about how their personal data is collected, processed, stored, and protected, ensuring transparency, security, and respect for data subject rights.

1. Data We Collect

Moovflex may collect the following categories of personal data:

• a) Identification: name, surname, taxpayer number, date of birth, country, state/province, city, postal code.
• b) Contact: mobile phone number, email address.
• c) Billing and payment: booking, payment, and invoicing data.
• d) Platform usage: booking history, access logs, IP address, device data, geolocation (if enabled).
• e) Health and fitness: sensitive data voluntarily provided, subject to the data subject’s express and specific consent.
• f) Communications and feedback: information related to support interactions and completed forms.
• g) Cookies and technical data: as detailed in the Cookies Policy.

2. When We Collect Information

Personal data is collected when the User:

• Completes forms on the platform;
• Makes bookings or payments;
• Subscribes to newsletters or marketing communications (subject to consent);
• Requests information or services;
• Browses the platform, where technical information may be collected.

3. Purposes of Processing

Personal data may be processed for the following purposes:

• 3.1. Management of the contractual relationship (bookings, payments, invoicing).
• 3.2. Communication with Users, including booking notifications.
• 3.3. Compliance with legal and tax obligations.
• 3.4. Fraud prevention and detection and ensuring platform security.
• 3.5. Improvement of the User experience, including personalization of services and use of AI technologies (subject to consent).
• 3.6. Sending of marketing communications, only with prior consent.

4. Legal Bases

Processing of personal data by Moovflex is based on:

• a) Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR);
• b) Compliance with legal obligations (Art. 6(1)(c) GDPR);
• c) Consent of the data subject (Art. 6(1)(a) GDPR), particularly for marketing or sensitive data processing;
• d) Legitimate interests of Moovflex (Art. 6(1)(f) GDPR), notably platform security and fraud prevention.

5. How We Protect Your Data

Personal data is stored on secure servers and protected by appropriate technical and organizational measures, including:

• a) Restricted access control;
• b) Encryption whenever applicable;
• c) Monitoring against viruses and malware;
• d) Regular audits and security reviews;
• e) Compliance with the principle of “privacy by design and by default.”

6. Cookies and Similar Technologies

Moovflex uses cookies for the following purposes:

• a) Strictly necessary cookies: basic operation of the platform.
• b) Performance and analytics cookies: usage analysis (subject to consent).
• c) Preference cookies: storing User choices (subject to consent).
• d) Marketing and third-party cookies: personalized advertising (subject to consent).

Users can manage preferences via the link available in the platform’s footer.

7. Data Retention

• a) Bookings and payments: retained for the period required under tax law.
• b) Marketing: retained until consent is withdrawn.
• c) Health and sensitive data: retained only for as long as necessary for the consented purpose.

8. Data Sharing and Disclosure

Moovflex does not sell or trade personal data. Data may only be shared with:

• a) Subcontracted entities (e.g., payment processors, server hosting), bound by confidentiality and data protection obligations;
• b) Competent authorities, when legally required.

International data transfers will only take place with adequate safeguards (e.g., EU Standard Contractual Clauses or equivalent mechanisms).

9. Data Subject Rights

Users may, at any time, exercise the following rights:

• a) Right of access
• b) Right of rectification
• c) Right to erasure (“right to be forgotten”)
• d) Right to restriction of processing
• e) Right to data portability
• f) Right to object
• g) Right to withdraw consent, without affecting lawfulness of prior processing
• h) Right to lodge a complaint with the CNPD (Portuguese Data Protection Authority)

Requests should be submitted to: hello@moovflex.com

10. Third-Party Links

The platform may contain links to third-party websites. Moovflex is not responsible for their privacy practices and recommends reviewing their policies.

11. Changes to the Policy

Moovflex reserves the right to amend this Privacy and Data Protection Policy at any time. Any changes will be published on the platform and, where legally required, notified to Users.

12. Governing Law

This Policy is governed by Portuguese law and applicable European Union data protection law.

Last updated: 5 January 2026