Skip to content
Home: FilipposLight Kick Academy
← Back to home

Privacy policy

Last updated: 23 October 2026

Protecting your details and your child's details matters to us. This page explains in plain words what we collect, why, where we keep it, and how you can see, correct or delete it.

This policy covers the website filipposlkacademies.com, our forms on Facebook and Instagram, and all our communication with you. We follow the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018.

1. Who we are

The controller of your data is Filippos Light Kick Academy, Nicosia, Cyprus.

2. What we collect

We only collect what we need to arrange a trial class and run the classes:

  • Trial booking on the website: parent's full name, phone number, child's first name and age, the location and time you chose, your language, and whether you want updates by WhatsApp or SMS.
  • Facebook and Instagram forms: what you fill in on the form, usually name and phone and, if asked, email, area and child's age.
  • When you call or write to us (phone, WhatsApp, Instagram, Facebook): your name and number and what you write. We keep short notes of our calls so we know what was discussed.
  • Once your child enrols: the child's full name and date of birth, school and class, attendance, monthly fee payments, coaches' notes, and the contact details of parents or guardians.
  • Technical data: when you send the form, your IP address is used only to stop spam and is deleted within two days. It is not stored with your details.

We never ask for card details on the website or in our forms.

3. Facebook and Instagram ad forms

When you fill in a form in one of our Facebook or Instagram ads (Meta Lead Ads), Meta Platforms Ireland Ltd sends us the form's details. They go automatically into the academy's management system so that we can call you. We only receive what you wrote on the form, when you sent it and which ad or platform it came from — not your profile, friends or photos.

We use these details only to contact you about classes. We do not sell them or give them to other advertisers.

How Meta itself uses your data on Facebook and Instagram is covered by the Meta Privacy Policy.

4. Why we use it

We use your details:

  • To answer your request and arrange the trial class — steps before entering a contract (GDPR Article 6(1)(b)).
  • For classes, attendance and fees after enrolment — performance of a contract (Article 6(1)(b)).
  • For payment reminders and confirmations and announcements about classes — our legitimate interest in running the academy properly (Article 6(1)(f)). You can stop them at any time.
  • For other updates, only if you agreed — consent (Article 6(1)(a)).
  • For our accounting and tax obligations — legal obligation (Article 6(1)(c)).
  • To keep the website secure and protect it from spam — legitimate interest (Article 6(1)(f)).

We do not make automated decisions about you and we do not build profiles.

5. WhatsApp and SMS messages

After enrolment, parents automatically receive messages only about the monthly fee: a reminder 3 days before, on the due day, if it is 5 days late, and a confirmation once paid. They may also receive announcements about classes (e.g. a time change or holiday) and, when we book a trial, a confirmation SMS.

Automatic messages are sent by SMS through GT Digital (Golden Telemedia Ltd, Cyprus). To stop them, tap the link at the end of every SMS or tell the coach. To start again, tell the coach.

Your replies to our messages are saved in the parent's history so the academy can see them.

6. Children's data

Children's details are given to us by their parent or guardian. Our forms are for parents: if you are under 14, please ask your parent to contact us.

A child's details are seen only by the coaches of their school and the academy's management.

7. Who sees your details

Only the academy team members who need your details see them: management, the enrolment team (for enquiries) and the coaches of your school — each coach sees only their own school.

We also use these providers, who process data only on our behalf and under a data processing agreement:

  • Hetzner Online GmbH (Germany): hosting of the website and the management system, on servers in the European Union.
  • Golden Telemedia Ltd — GT Digital (Cyprus): sending SMS.
  • Meta Platforms Ireland Ltd (Ireland): WhatsApp, our forms and our pages on Facebook and Instagram.
  • Resend (USA): sending notification emails to our team.

We do not sell your details and we do not give them to anyone for advertising. We give them to a public authority only when the law requires it.

8. Transfers outside the European Union

Resend may process data in the USA. These transfers use the safeguards set by the GDPR: the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

9. How long we keep it

  • Enquiries that did not enrol: their details are anonymised 24 months after the enquiry is closed.
  • WhatsApp and SMS message texts: deleted after 24 months. We keep only the fact that a message was sent and what it cost.
  • Students: while they are members of the academy and for as long as needed afterwards for any questions. You can ask for deletion at any time.
  • Payments: as long as Cyprus tax and accounting law requires.

10. Cookies and tracking

Our website does not use tracking or advertising cookies, the Meta Pixel, Google Analytics or any other statistics tool. The only thing stored on your device is the language you chose, so the page opens in your language next time.

Links to WhatsApp, Instagram and Google Maps take you to those services, where their own terms apply.

11. Security

The website and the management system only work over an encrypted connection (HTTPS). Only our team can sign in to the system, each with a personal account, and everyone sees only what they need for their work. Passwords are never stored in readable form, and we make a backup every night.

12. Your rights

You have the right:

  • to see what details we hold about you and get a copy
  • to correct them
  • to ask for them to be deleted
  • to restrict or object to their use (e.g. to stop messages)
  • to receive them in electronic form to give to someone else
  • to withdraw your consent at any time

Write to us at filipposloxias93@gmail.com or call +357 99 252242. We will reply within one month, free of charge. We may ask you to confirm it is you, e.g. from the phone number you gave us.

If you believe we have not handled your details correctly, you can complain to the Commissioner for Personal Data Protection (1 Iasonos Street, 1082 Nicosia, commissioner@dataprotection.gov.cy).

13. Deleting your data

To have your details deleted — from the website, from a Facebook or Instagram form, or from our messages:

  • Email filipposloxias93@gmail.com with the subject “Delete my data”, or send a WhatsApp message to +357 99 252242.
  • Include your full name and the phone number you gave us (and your child's name, if they are a student).
  • Within 30 days we delete or anonymise your details and confirm it to you. We keep only what the law requires, e.g. payment records.

Data that Meta itself holds about you is managed in your Facebook or Instagram account settings.

14. Changes to this policy

If we change this policy, we will update this page and the date at the top. For important changes we will also inform the parents of our students.