Privacy Policy
PRIVACY POLICY
Lior Murphy Training Services
Website: liormurphy.com
Contact: info@liormurphy.com
Introduction and scope
This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website, online studio, and live Zoom training sessions (the “Services”).
By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Services.
We aim to comply with:
– Israeli Privacy Protection Law, 5741–1981, and related regulations
– Recent amendments to Israeli privacy law and guidelines of the Privacy Protection Authority
– GDPR for users in the European Economic Area (EEA)
– Other applicable international privacy standards, including basic U.S. and European consumer expectations
The data controller is:
Business name: Lior Murphy
Location: Tel Aviv, Israel
Contact: info@liormurphy.com
Information we collect
2.1 Information you provide
When you interact with us, you may provide:
a. Account and contact details
– Full name
– Email address
– Phone number and country of residence
– Login credentials (passwords are stored in hashed form)
b. Health and fitness information (sensitive data)
– Self-reported fitness level
– Medical conditions, injuries, physical limitations, pregnancy status (optional but recommended)
– Training goals and preferences
– Emergency contact details (optional)
This is considered “sensitive” or “special-category” data under some laws. We collect it only with your explicit consent and use it only to provide safe, appropriate training.
c. Payment and billing information
– Name and billing details as needed by the payment processor
– Transaction details (amount, currency, date, status)
Payment card data is processed by our payment provider (e.g. YaadPay). We do not store full card numbers.
d. Communications and content
– Emails and messages you send us
– Support requests and feedback
– Optional testimonials or reviews you choose to share
– Messages you choose to send in community channels (such as WhatsApp groups)
e. Profile and preferences (optional)
– Profile photo
– Social media handle (e.g. Instagram)
– Class preferences, schedule preferences
2.2 Information collected automatically
When you use the Services, we may collect:
– Usage data: pages visited, buttons clicked, classes booked, classes attended, cancellations, and general interaction patterns
– Device and technical data: IP address, browser, operating system, device type, approximate region inferred from IP
– Log data and performance data: errors, loading times, server logs
We also use privacy-focused analytics (such as Vercel Analytics) to gather anonymized, aggregated statistics about how the site is used.
2.3 Cookies and similar technologies
We use a small number of cookies and similar technologies for:
– Essential functions (login, session, security)
– Basic analytics (anonymized performance and usage)
You can manage cookies in your browser settings. Blocking essential cookies may affect your ability to use the Services.
2.4 Data we do not intentionally collect
We do not:
– Collect precise GPS location
– Collect biometric identifiers
– Sell personal data to data brokers or ad networks
How we use your information and legal bases
3.1 Service delivery
We use your information to:
– Create and manage your user account
– Deliver live online classes via Zoom
– Handle bookings, cancellations, and package balance
– Tailor exercises and training to your level and limitations
– Provide customer support and respond to your questions
Legal bases (GDPR): contract performance, legitimate interests, and explicit consent (for health data).
3.2 Communications
We use your details to:
– Send class confirmations and reminders
– Inform you of schedule changes or cancellations
– Send account and security notifications
– Notify you of important policy or system changes
These are “transactional” communications and are necessary for using the Services.
3.3 Safety and personalization
We use health and fitness information (with your consent) to:
– Adapt exercises to your needs and limitations
– Reduce risk of injury
– Adjust difficulty over time based on your progress
3.4 Payments and administration
We use billing and transaction data to:
– Process payments and manage purchases
– Maintain invoices and accounting records
– Handle refunds or adjustments where applicable
– Prevent fraud and misuse
Legal bases: contract performance, legal obligations, and legitimate interests.
3.5 Improvement and analytics
We use aggregated and anonymized data to:
– Understand how the Services are used
– Improve content, user experience, and technical performance
– Develop new features and offerings
Legal basis: legitimate interests, balanced against your privacy rights.
3.6 Marketing (only if you opt in)
If you explicitly opt in, we may send:
– Promotions, special offers, and discounts
– Information on new classes and programs
– Educational content and updates
You can withdraw consent for marketing at any time without affecting your access to classes.
3.7 Legal compliance and protection
We may process data to:
– Comply with accounting, tax, and regulatory requirements
– Respond to lawful requests from authorities
– Enforce our Terms of Service
– Protect our rights, property, and safety or that of others
3.8 Session Recordings and Use of Visual and Audio Data
Live training sessions may be recorded. These recordings may include personal data such as your image, voice, name as displayed in the session, and physical movement.
We process session recordings for the following purposes:
– Providing access to participants who missed a live session
– Reviewing and improving instructional quality and class delivery
– Training instructors and developing new classes, programs, and features
– Creating promotional, marketing, branding, and advertising materials for our Services, including use on our website, social media platforms, and other media
– Developing, offering, and selling digital products, courses, or recorded training materials
Legal bases for this processing include performance of contract, legitimate interests, and, where required by law, your consent.
If you object to the use of recordings for promotional or commercial purposes, you may contact us. Where legally required, we will honor withdrawal of consent for future use. This does not affect recordings already lawfully processed before withdrawal.
Health and sensitive-data processing
Health and medical-related information is collected only when you choose to provide it and give explicit consent. It is used only to:
– Assess whether exercises are appropriate and safe
– Offer modifications based on self-reported conditions
– Handle emergencies more effectively, where possible
You can withdraw consent to our use of health data at any time. If you do so, we may not be able to offer certain personalized training, but you may still participate at your own discretion, subject to the Terms of Service.
How we share your information
5.1 No sale of personal data
We do not sell or rent your personal information to third parties for their independent marketing.
5.2 Third-party service providers
We share limited data with trusted providers who help us run the Services, for example:
– Hosting and infrastructure (e.g. Firebase / Google Cloud): account data, booking data, and usage required to operate the platform
– Payment processors (e.g. YaadPay): billing details and transaction data necessary to complete payments
– Video conferencing (Zoom): your name, email (if required), and class attendance
– Analytics tools (e.g. Vercel Analytics): anonymized usage and performance data
– Email / SMS services: contact details and message content for notifications and communications
– WhatsApp (for community groups): your phone number and profile as configured by you in WhatsApp
These providers are required to use your data only for the agreed purpose, protect it with appropriate safeguards, and comply with applicable law.
5.3 Legal and rights-related disclosures
We may disclose information when reasonably necessary to:
– Comply with applicable laws or legal processes
– Respond to valid requests from authorities
– Protect the safety, rights, or property of ourselves, our users, or the public
– Detect, prevent, or address fraud, abuse, or security issues
5.4 Business transfers
If the business is restructured, sold, or merged, your data may be transferred to a successor entity. In that case, the successor will be bound by this Privacy Policy (or an equivalent policy), and you will have an opportunity to close your account if you do not wish to continue.
5.5 Aggregated and anonymized information
We may share or publish aggregated statistics that do not identify you (for example, number of active users, popular class times).
International data transfers
Our systems and third-party providers may process data in Israel, the EU, the US, and other countries.
Israel currently has an EU “adequacy” decision, which means personal data can generally flow from the EEA to Israel under GDPR without additional transfer mechanisms, as long as processing complies with applicable law.
Where data is transferred to countries without adequacy decisions, we use appropriate safeguards (such as contractual protections and security measures) where required.
Data retention
We keep personal data only as long as reasonably necessary for the purposes described in this Policy or as required by law. In general:
– Account and profile data: kept while your account is active and for a limited period afterwards for support, legal, and accounting purposes.
– Payment and transaction data: retained for the period required by tax and accounting laws (often around 7 years).
– Health and fitness data: retained while you are an active client and for a limited period afterwards where needed for safety and legal purposes; we aim not to keep more than is necessary.
– Support communications: retained for a limited period to improve service and handle any follow-up issues.
– Analytics data: retained in anonymized form for trend analysis.
If you request deletion, we will remove or anonymize data not required to keep by law or for legal claims. Some information may remain in backups for a limited technical period.
Your rights
Your rights depend on where you live, but we generally aim to honor the following:
– Access: You can request information about the personal data we hold about you.
– Correction: You can request corrections to inaccurate or incomplete data.
– Deletion: You can request deletion of personal data, subject to legal and contractual limitations.
– Restriction: You can ask us to limit certain processing where applicable.
– Objection: You can object to processing based on legitimate interests or direct marketing.
– Data portability (EEA): You can request a copy of certain data in a machine-readable format.
– Consent withdrawal: Where processing is based on consent (such as health data or marketing), you can withdraw consent at any time.
To exercise your rights, contact info@liormurphy.com
with your name, contact details, and a clear description of your request. We may need to verify your identity before acting on it.
If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority. Israeli users can contact the Israeli Privacy Protection Authority.
Security
We take data security seriously and use technical and organizational measures such as:
– Encryption in transit (HTTPS) and, where appropriate, encryption at rest
– Hashed passwords and secure authentication
– Access controls and role-based permissions for staff
– Secure hosting on reputable cloud infrastructure
– Regular updates and security patches
– Internal policies and confidentiality obligations for staff and contractors
No system can be guaranteed 100% secure, but we work to reduce risks and respond promptly to incidents. If we believe a breach could affect your rights and freedoms, we will notify you and, where required, the relevant authorities.
Children’s privacy
The Services are intended for adults (18+). We do not knowingly collect personal data from individuals under 18.
If you believe a minor has provided us with personal information, contact info@liormurphy.com
and we will delete the data and, if applicable, close the account.
Cookies and tracking
We use:
– Essential cookies for login, sessions, and security
– Minimal, privacy-focused analytics without tracking you across other sites
You can manage cookies in your browser settings. Disabling essential cookies may prevent you from using some features.
Communications preferences
You will always receive transactional communications necessary to operate your account (class confirmations, reminders, important notices, security alerts).
Marketing and promotional communications are sent only if you have opted in. You can unsubscribe at any time using the link in the email or by contacting us.
SMS and WhatsApp communications (where used) are optional and can be stopped by changing your preferences or leaving the group. Standard carrier rates may apply.
Third-party services and links
Our Services may contain links or integrations with third-party services such as Zoom, payment providers, WhatsApp, and social networks.
Their privacy practices are governed by their own policies. We are not responsible for how those services handle your information. We recommend reviewing their policies before using them.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
– Update the “Last Updated” date above
– Notify registered users by email or a notice on the site
– Give advance notice where required by law
Your continued use of the Services after changes take effect means you accept the updated Policy.
Contact
For questions, concerns, or to exercise your rights, contact:
Email: info@liormurphy.com
Subject: Privacy Inquiry
We aim to respond within a reasonable time, usually within 30 days for rights requests.
Acknowledgment
By using the Services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your information as described, to the extent such consent is required by law.
If you do not agree, you should not create an account or use the Services.