Privacy policy

1. Data controller

Jérôme Devos, trading as BodyFitWithMe (Prime Meal service), company number BE 1023.085.724, rue Joseph Verhasselt 34, 1083 Ganshoren, Belgium. For any question about your data: contact@primemeal.be.

2. Data collected

We collect only the data we need:

• enquiry form: first name and surname, email or phone number, profile (athlete, parent, agent), sport, club and level, municipality, preferred frequency and, if you provide them, dietary requirements;
• consultation and follow-up: age, height, weight, body composition, training and match schedule, eating habits and preferences, allergies and intolerances;
• service delivery and invoicing: home address, access arrangements, billing details, payment history;
• browsing: no audience measurement data is collected without your consent (see our cookie policy).

3. Purposes and legal bases

Each processing activity rests on a specific legal basis:

• responding to your enquiry and arranging the consultation: pre-contractual steps taken at your request;
• drawing up the nutrition plan, carrying out the sessions and providing follow-up: performance of the contract;
• processing allergies, intolerances and health data: your explicit consent;
• invoicing and bookkeeping: legal obligation;
• improving our services and keeping the website secure: legitimate interest;
• audience measurement and advertising, if introduced: your consent.

Your data is never sold, rented or transferred for commercial purposes.

4. Health data

Information about your health (allergies, intolerances, medical conditions, body composition) is sensitive data within the meaning of Article 9 of the GDPR. It is processed only with your explicit consent, and solely to tailor your plan and prepare your meals safely.

It is accessible only to the nutrition consultant and the chef who cooks for you. You may withdraw your consent at any time; we will then no longer be able to guarantee the safety of certain dishes.

5. Minors

Prime Meal also works with young athletes. Where the athlete is under sixteen, their data is processed only with the consent of their legal representative, who remains our point of contact for any question relating to that data.

6. Recipients and processors

Your data is accessible only to those who need it:

• the Prime Meal nutrition consultant and chef;
• Netlify, Inc. (website hosting and form submissions);
• Easyhost (email service, Belgium);
• where applicable, the online booking tool and our accountant, within the limits of their role.

Every processor is bound by a confidentiality undertaking and by the obligations of the GDPR.

7. Transfers outside the European Union

Some technical providers, such as Netlify, may process data in the United States. These transfers are covered by the safeguards provided for by the GDPR, in particular the standard contractual clauses adopted by the European Commission or the EU-US Data Privacy Framework.

8. Retention periods

We keep your data only for as long as necessary:

• enquiries not taken further: a maximum of two years from the last contact;
• nutritional follow-up and health data: the duration of the collaboration, then two years, unless you request erasure;
• billing data: the statutory retention period for accounting records;
• cookie preferences: six months.

9. Security

We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), access restricted to the people concerned, password-protected accounts, and minimal sharing of health information.

10. Your rights

You may exercise the following rights at any time:

• right of access to your data;
• right to rectify inaccurate data;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw your consent, without affecting processing already carried out.

To exercise these rights, write to contact@primemeal.be. We respond within one month. Proof of identity may be requested where there is reasonable doubt.

11. Complaints

If you believe your rights have not been respected, you may lodge a complaint with the Data Protection Authority, rue de la Presse 35, 1000 Brussels (www.dataprotectionauthority.be).

12. Changes

This policy may change, in particular when a new service or tool is introduced. The date of the latest update appears at the top of this page.