ENNL Waiting list

Privacy policy

Last updated on 20 October 2026

Who processes your data

FD96 BV, trading as Timon Dhaeze, Vrijdagmarkt 61 box 101, 9000 Ghent, company and VAT number BE 1042.266.978, represented by Timon Dhaeze, hello@timondhaeze.com. The company is the controller for everything you share with me through this website, my free tools, the app and my coaching. Questions about your data go to that email address.

When you visit the website

My hosting partner processes the technical data your browser sends (IP address, browser type, requested page) to display and secure the site. Legal basis: my legitimate interest in offering a working and secure website.

When you send a form on this site, that same partner first checks invisibly that you are a person and not an automated program. To do so it looks at technical characteristics of your browser and your connection, without setting cookies and without using that data for advertising. Only after that check does your data reach me. Legal basis: my legitimate interest in protecting the forms and your data against abuse and spam.

I also measure visitor numbers without cookies and without recognising you as a person: I see how many people view which page and from which country, never who. Fonts are hosted on my own domain. Header videos come from my own video hosting.

If you accept the Analytics category in the consent panel, two things happen. My CRM software measures your visit (pages, duration, source, device type) under a random visitor number that can be linked to your contact details if you later submit a request. Google Analytics, by Google Ireland Limited, measures which pages you view, how long you stay, how you arrived and which steps you take, such as sending a form. Google Analytics does not store IP addresses. Google may transfer data to Google LLC in the United States, under the EU-US Data Privacy Framework. Legal basis: your consent, which you withdraw in the cookie policy.

If you accept the Marketing category, the pixel of Meta Platforms Ireland Limited, the company behind Facebook and Instagram, loads. It sets a cookie that lets Meta see which visits come from my ads and which pages you viewed afterwards. If you then send a form, book a call or complete a purchase, I also report that directly from my own server to Meta, alongside the report from your browser. I pass on an irreversibly encrypted version of your email address, your phone number and your name, plus your IP address and your browser identifier. For a purchase the amount is included. Meta uses this to determine whether your request came from an ad. Your actual data never reaches it in readable form. Both reports carry the same identifier so they count as one event. If you say no in the consent panel, none of this happens, not even from my server. Legal basis: your consent, which you withdraw in the cookie policy.

For collecting and passing on this data, Meta and I are joint controllers. That arrangement is set out in Meta's Controller Addendum (facebook.com/legal/controller_addendum). For what Meta then does with the data itself, including for its own purposes such as improving its ads, Meta alone is responsible under its own privacy policy (facebook.com/privacy/policy). Meta may transfer data to Meta Platforms Inc. in the United States, under the EU-US Data Privacy Framework. You exercise your rights towards Meta directly with Meta. If you send them to me, I pass your request on.

When you send me a message

Messages through the chat on the site, Instagram, Facebook or WhatsApp end up in my customer software or in the app of that network. I use them to reply to you and to follow up on your question. Legal basis: my legitimate interest in replying to people who contact me. If you are a client, it is the performance of our contract. If you share something about your health in such a message, I only use it to reply to you. As a client, please share sensitive information in the chat of the app.

Instagram, Facebook and WhatsApp are services of Meta. For what Meta itself does with messages on those networks, Meta's privacy policy applies.

When you fill in the application form

I process your first name, surname, email address, phone number, your goal, the type of coaching you want and whatever you write yourself. I use this to answer your application, suggest an intro call and start your program if you become a client. Legal basis: the steps needed to enter into a contract. If you write something about your health, such as an injury or a condition, I only use it to answer your application. For that I ask your explicit consent with the required checkbox on the form. Your details go into my customer software, from which I send you a confirmation and a few follow-up emails about your application. You only receive my newsletter if you tick the box for it. To stop the follow-up, one email to hello@timondhaeze.com is enough.

When you take the free health check

The questions cover your strength training, nutrition, sleep, daily movement and recovery, the time you have to train and what has held you back so far. To show your report, send it to you by email and email you once about it, I process your first name, your surname if you fill it in, and your email address, your answers, your age group, sex and main goal (until 13 October 2026 also your work and family situation), your Health Score, your scores per pillar, your Biggest Win and your plan for this week. I keep your answers as a readable note on your contact record in my CRM, so I can prepare a call or a follow-up program without you having to fill everything in again.

After the last question you first see your Health Score, your scores per pillar and your Biggest Win. To calculate them, your answers go to my server, which sends back only the result. I ask your explicit consent for this with a checkbox before the calculation. At that point you have not given a name or email address, and your answers are not stored on my server or in my CRM. They are only stored as described above if you then leave your email address to receive your plan for this week.

Because this data says something about your health and lifestyle, I ask for your explicit consent through the first checkbox on the form. If you also want my tips and offers by email afterwards, you tick the second box. That is a separate consent, which you withdraw through the unsubscribe link at the bottom of those emails or with one email to hello@timondhaeze.com.

Your scores and your profile are calculated automatically from your answers. They only serve to create your report and to prepare a possible call. No decision depends on them: I decide myself, after a call, whether you can become a client.

Your answers also stay stored in your own browser until you delete them. You can withdraw your consent or have your data deleted at any time with one email, after which I delete it within a month. If the check does not lead to working together, I keep your name, email address and your results (your Health Score, your scores per pillar, your Biggest Win, your plan for this week and your profile data) for at most twelve months after our last contact. I delete the note with your individual answers to the questions within those same twelve months. If you become a client, the retention periods for clients apply.

The health check is meant for adults. If you are under eighteen, please do not fill it in. Important: the health check is a practical lifestyle and structure assessment, not a medical examination. It makes no diagnoses and does not replace a doctor.

When you book an intro call

The booking calendar on the Intro call page is my own picker. It processes your name, email address, phone number, your answers to the short questions beforehand and the time you choose. That data goes to my customer software to fix the appointment and send you a confirmation with the link to the video call. Legal basis: the steps needed to enter into a contract. For anything you tell me about your health beforehand, I ask your explicit consent with the checkbox on the form. You only receive my newsletter if you tick the box for it. How I handle a recording of the call is described below.

When I record a call

I only record an intro call, a review call or another video call if I ask you beforehand and you agree. If you decline, the call goes ahead without a recording. Legal basis: your consent, which you can withdraw at any time with one email. For health data that comes up during the call, it is your explicit consent.

For the recording I use a call recording service that works as a processor for me and processes data in the United States, on the basis of the standard contractual clauses of the European Commission or the EU-US Data Privacy Framework. That service produces a recording, a transcript and a summary of the call. I use them to take notes and to prepare your follow-up.

I also use sentences from calls internally, to learn which questions and words people care about and to align my explanations and my content with them. I only take those sentences over without your name and without any other data by which someone could recognise you. Legal basis for that internal use: my legitimate interest in improving my explanations. You can always object to it. A recognisable sentence, your name, your voice or your image never appears in public without your separate consent, as described under Results and testimonials.

I keep the recording, the transcript and the summary until twelve months after your coaching ends. For an intro call without working together, it is twelve months after the call, the same as your lead data. After that I delete them.

When you sign up for the newsletter

I use your email address for the newsletter if you choose it yourself: by signing up directly, with the box on a form or with the second box of the health check. Legal basis: your consent. If you are a client, I also send you tips and offers about similar services on the basis of my legitimate interest. You can always object to that free of charge. Every newsletter has an unsubscribe link at the bottom and you can also unsubscribe with one email to hello@timondhaeze.com.

When you comment on a blog article

Under every blog article you can leave a public comment. For that I process the first name or name you fill in yourself and your comment. Both are visible on the site to anyone who reads the article, so do not include anything you would not want to see in public. I do not ask for an email address. To stop spam, my system keeps an irreversibly encrypted version of your IP address, from which I cannot recover your address, together with the language you wrote in. Legal basis: your consent, which you give by posting your comment. Comments with a link or abusive language come to me first before I release them. Comments stay up for as long as the article is online. To have your comment removed, email hello@timondhaeze.com with the title of the article and your name. I will then take it down. At the top of every article you see how often it has been read and liked. For that my system keeps the same irreversibly encrypted version of your IP address for one day, so that a reload does not count twice. For a heart it keeps an equally encrypted identifier for as long as you leave the heart in place. There is no profile, no cookie and no external counter behind it.

When you vote on the topic of the next email

Under every blog article and on the vote page linked from my weekly email you can pick a topic for the next email and leave your own question. From the blog your vote is anonymous: my system keeps an irreversibly encrypted version of your IP address for one week, so one visitor counts once, together with your choice and the question you type. From the weekly email the link carries a random code that belongs to your subscription. I use it to record your choice and your question on your contact record in my customer software, so I can answer you personally. The code reveals nothing about you to anyone else. Legal basis: my legitimate interest in asking my readers what to write about, and for the email version your consent, which you give by confirming your vote on the page. Questions you type help me decide what to research next and may end up in an article or email without your name. Votes and questions stay stored for twelve months. To have yours removed, email hello@timondhaeze.com.

When you become a client

For your coaching I process your identification and contact details, your billing details and health data: height, weight, body composition, injuries, conditions, medication, allergies, sleep, stress, energy, eating pattern and supplements, plus progress photos, technique videos and your training and nutrition logs. If you connect the app to Apple Health or Health Connect, only the data listed in the app section below is added. Your data is stored in my coaching software, where you can view it yourself. Legal basis: the performance of our contract. For the health data, it is the explicit consent you give in the intake form. I use it only to make your coaching safe and suitable and share it only with the service providers listed further on in this policy.

When you contribute to the crowdfunding

When you contribute to Coach Timon, you choose at checkout whether you appear on the supporters wall on the crowdfunding page: with your name, as Anonymous or not at all. Legal basis: your consent (article 6.1.a GDPR), which you give with that choice.

On the wall I show the name you chose or "Anonymous", your amount, your message once I have approved it, and the date. If you contribute as a company with a VAT number, I also show the company name and, after my approval, the company logo you send me.

The payment runs through Stripe, your contact details and your contribution go to my customer system (GoHighLevel), and the wall runs on Cloudflare. Your billing details go to my accountant, as with every invoice.

You can withdraw your consent at any time by emailing hello@timondhaeze.com. I then take you off the wall. I keep the wall details until 12 months after the end of the campaign, or until you withdraw your consent, whichever comes first.

When you use the app

This privacy policy also applies to the Coach Timon app on iPhone and Android. In the app I process your account (name, email address and password), your training and nutrition logs, including photos of your meals and the products you scan, your habits, your check-ins, your progress photos and your messages with me. The app runs on the platform of a software provider that works as a processor for me. Who that is, is stated in the legal notice. Legal basis: the performance of our contract. For the health data, it is your explicit consent.

If you give permission in the app, it reads only this data from Apple Health on iPhone or Health Connect on Android: your steps, your active calories, your sleep, your heart rate and your recorded workouts and activities. You choose yourself which of those categories you share. You withdraw your permission in the settings of your phone or of the app.

Strict limits apply to that data. I use it only to coach you and adjust your coaching. I never use it for advertising or marketing and never to build an advertising profile. I never sell it. I never use it to assess your creditworthiness or to decide on a loan or insurance. I pass it on to no one, except to the processors needed to run the app and the coaching, when the law requires me to or when you ask for it yourself. I read it myself, because that is the core of the coaching you asked for. During my absence, the replacement mentioned in the security section can also read it. My use of data from Health Connect follows Google's Health Connect Permissions policy, including the Limited Use requirements.

Artificial intelligence tools

My coaching software includes an AI assistant that I use in my work within that software. The software provider runs that assistant partly through subcontractors outside the European Union, including in the United States. Which subcontractors those are and which safeguards they work under is set out in that provider's privacy policy. Who the provider is, is stated in the legal notice.

Whatever an AI tool suggests, I check myself. Every assessment and every piece of advice about your coaching comes from me. There is no automated decision-making within the meaning of Article 22 of the GDPR. Legal basis: the performance of our contract. For health data, it is the explicit consent you give in the intake form.

AI support for your weekly review

To prepare your weekly review, I have your log data from the past week (nutrition, sleep, steps, weight and training), your check-in and your messages in the app summarised by Claude, an AI service of Anthropic PBC in the United States. Anthropic works as a processor for me for this, under a data processing agreement with the standard contractual clauses of the European Commission as the safeguard for the transfer to the United States. Anthropic does not use your data to train its models. The summary is a tool for me: I write and check your review and every piece of advice myself. Legal basis: the performance of our contract. For the health data, it is the explicit consent you give in the intake form.

Deleting your account

In the app you delete your account yourself, via Profile and My account. Your account and your data in the app are then permanently deleted after thirty days. Within those thirty days you can still undo the deletion. If you no longer have the app, request the deletion by email to hello@timondhaeze.com from the email address of your account.

Outside the app I keep your contact details, my notes on your coaching and the recordings of our calls until twelve months after your coaching ends. If you want me to delete that data straight away too, say so in your email. I then delete it within a month, except what I am legally required to keep. I keep invoices and accounting records for ten years. Everything is summarised on the page Delete your account.

Deleting your account does not end your coaching agreement. Cancelling works as set out in the terms and conditions.

Results and testimonials

Photos, figures, quotes or recognisable sentences from clients only appear on the site or on social media after a separate, explicit consent. You can withdraw that consent at any time, after which I take the material offline. Sentences without a name and without recognisable data I only use internally, as described under When I record a call.

Who I share data with

I never sell your data. It is stored with service providers I need to work: website hosting and security, customer and email software, coaching software and the app, calendar and video calls, a call recording service, the AI services described above, video hosting, payments, accounting and software for my administration and communication. I have data protection agreements with these providers. My accountant receives invoices and accounting records. Some providers process data in the United States, under the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission. Others are based in the United Kingdom, for which the European Commission has adopted an adequacy decision: your data enjoys the same protection there as in the European Union. You get an overview of which provider falls under which safeguard and a copy of those safeguards on simple request at hello@timondhaeze.com.

How long I keep data

If you ask for deletion earlier, I delete your data within a month, except what I am legally required to keep. After the period ends, I delete or anonymise the data.

How I secure your data

I have access to your file. During my absence, a replacement I choose myself can also view your file, to the extent needed to take over your follow-up. That replacement is bound by the same confidentiality, as Article 21.2 of the terms and conditions describes. My service providers only have access to the extent technically needed to provide their service. My devices are encrypted, my accounts protected with strong, unique passwords and I never share client data through public links.

Minors

My services, the app and the health check are meant for adults aged eighteen or over. If you are younger, do not fill in any form and do not create an account. If I find that I hold data of a minor, I delete it.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Email hello@timondhaeze.com and you will get an answer within a month. You can also delete your account in the app yourself.

You can withdraw any consent at any time. That applies to the future: what I did before with your consent remains lawful.

You can always object, without giving a reason, to the use of your data for my newsletter or my offers. I then stop immediately.

For an application or a call I need your name, your email address and your phone number to be able to answer you. Without your health data I cannot coach you safely and your program cannot start.

If you are not satisfied, you can contact the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, dataprotectionauthority.be. If you live in the Netherlands, you can also contact the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Cookies

Which cookies and embedded services this site uses and how you control them yourself is explained in the cookie policy.

Applicable law

Belgian law applies to this policy, to the health check and to my terms and conditions. The controller and your contracting party is FD96 BV, a private limited company under Belgian law, Vrijdagmarkt 61 box 101, 9000 Ghent, company and VAT number BE 1042.266.978, Register of Legal Entities Ghent, trading as Timon Dhaeze. If you are a consumer in another country, you keep the protection that the mandatory rules of your own country give you.

Changes

If my way of working or the law changes, I update this policy. The date at the top shows when that last happened.