Legal

Privacy Policy

Kano Co Limited · Last updated: June 2025 · Compliant with the EU General Data Protection Regulation (GDPR) and the Cyprus Personal Data Processing (Protection of Individuals) Law 138(I)/2001 as amended.

1. Who We Are

Kano Co Limited (HE457629 · VAT CY60053482B), trading as Mom Fitness Club, is the data controller responsible for your personal data. Our registered address is Aristofanous 5, Limassol, Cyprus. Classes are held at IJS International Jiu Jitsu School, Paphos, Cyprus.

For any data protection queries, please contact us at: info@momfitnesspaphos.com

2. Data We Collect

We collect only the minimum personal data necessary to provide our services. This includes:

We do not collect any special category data (such as health data) unless you voluntarily share it with us for safety or medical reasons, in which case we treat it with the highest level of protection.

3. How We Use Your Data

Primary purpose — contract performance

We process your data to fulfil our booking contract with you: confirming your reservation, managing attendance, and communicating class changes or cancellations. Legal basis: Article 6(1)(b) GDPR — performance of a contract.

Service communications

We may contact you with class updates, schedule changes, or important safety information. Legal basis: Article 6(1)(f) GDPR — legitimate interest in maintaining our service.

Marketing (only with your consent)

We will only send you newsletters, promotions, or event updates if you have explicitly opted in. You can withdraw consent at any time by contacting us. Legal basis: Article 6(1)(a) GDPR — consent.

4. Data Sharing

We do not sell your personal data. We may share it only in limited circumstances:

We do not transfer your data outside the European Economic Area (EEA).

5. Data Retention

We retain booking and payment records for 7 years from the date of the transaction, as required by the Cyprus Income Tax Law and Companies Law Cap. 113. Personal data used only for marketing communications is deleted upon unsubscription. You may request deletion of non-legally-required data at any time (see Section 7).

6. Cookies & Tracking

This website does not currently use tracking cookies, advertising scripts, or analytics tools. Should this change, we will update this policy and obtain your consent where required.

7. Your Rights

Under the GDPR you have the following rights regarding your personal data:

AccessRequest a copy of the data we hold about you
RectificationAsk us to correct inaccurate or incomplete data
ErasureAsk us to delete your data ("right to be forgotten")
RestrictionAsk us to limit how we process your data
PortabilityReceive your data in a machine-readable format
ObjectionObject to processing based on legitimate interests

To exercise any of these rights, email us at info@momfitnesspaphos.com. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).

8. Data Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. Booking information is handled directly by our team and is not stored in publicly accessible systems.

9. Children's Data

Our classes are designed for parents attending with their babies and toddlers. We collect children's first names solely for attendance and safety management. We do not create profiles on children or use their data for any other purpose. We process children's data under the parent/guardian's booking contract.

10. Changes to This Policy

We may update this Privacy Policy periodically. The current version will always be on this page with the date of last update shown above. For significant changes, we will notify existing customers by email where possible.