Privacy Policy
Last Updated June 2026
Contents
1. Introduction
2. Who We Are (Data Controller)
3. Information We Collect
4. How We Use Your Information
5. How We Share Your Information
6. Cookies and Tracking Technologies
7. Data Retention
8. Your Rights Under GDPR
9. Data Storage and International Transfers
10. Security of Your Data
11. Children’s Privacy
12. Third-Party Websites and Social Media
13. Marketing Communications
14. Automated Decision-Making and Profiling
15. Website Terms of Use
16. Changes to This Policy
17. Contact Us
1. Introduction
The Academy of Systematic Kinesiology in Ireland, trading as TASK Ireland and KinesiologyZone (“we”, “us”, “our”), is committed to protecting and respecting your privacy. This Privacy Policy sets out how we collect, use, store, and protect personal data in accordance with:
Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR)
The Data Protection Acts 1988–2018 (Ireland)
The European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 (Ireland’s ePrivacy rules)
Any other applicable Irish and EU data protection legislation in force from time to time
This policy applies to all information collected through our website (www.kinesiologyzone.com), our student hub (hub.kinesiologyzone.com), course booking systems, email communications, and any other services we provide.
Plain language: We collect only what we need, use it for clear purposes, and never sell your data to anyone.
2. Who We Are (Data Controller)
KinesiologyZone is the trading name of The Academy of Systematic Kinesiology in Ireland (TASK Ireland). We are the data controller for all personal data collected through our website and services. This means we are legally responsible for how your personal data is collected, stored, and used.
Contact for all data protection matters:
Email: info@kinesiologyzone.com
Post: TASK Ireland / KinesiologyZone, Lui na Greine, Sheeroe, Westport, Co Mayo, Ireland
We do not currently have a formal Data Protection Officer (DPO) as we are a small organisation that does not carry out large-scale systematic monitoring or special-category data processing. If this changes, we will update this policy accordingly and notify you.
Plain language: We are a small Irish education business. You can contact us directly with any privacy question and a real person will respond.
3. Information We Collect
3.1 Information You Provide Directly
Full name and email address – when you contact us, subscribe to our mailing list, register as a student, or make a course enquiry
Phone number and postal address – when you book a course or request a physical certificate
Payment information – when you purchase a course; we use a third-party payment processor and do not store card numbers
Health or professional background – if you voluntarily share this when applying for advanced courses (treated with heightened care)
Communications – emails, enquiry form submissions, and feedback you send us
Plain language: You choose what you share with us. We only ask for what we actually need to deliver our courses and services to you.
3.2 Information Collected Automatically
IP address and approximate location
Browser type, device, and operating system
Pages visited, time on site, and traffic source (via Google Analytics / similar tools)
Cookie identifiers (see Section 6 for full cookie details)
Plain language: This technical data helps us understand how our website is used so we can improve it. It does not identify you personally unless combined with other data.
3.3 Information From Third Parties
Social media interaction data if you engage with our Facebook, Instagram pages
Referral data if you arrive via a third-party link or partner website
Plain language: We do not buy lists of personal data or obtain data from data brokers.
4. How We Use Your Information
We use your personal data only for the purposes listed below, each supported by a lawful basis under GDPR Article 6:
| Legal Basis | Activities Covered |
|---|---|
| Contract Performance | Processing course bookings via Keap, issuing certificates, delivering course materials and student hub access |
| Legal Obligation | Maintaining financial records (7 years under Irish Revenue rules), responding to DPC requests, honouring unsubscribe requests |
| Legitimate Interests | Website security and fraud prevention, improving our educational content, Google Analytics reporting, direct email to past students about similar courses |
| Consent | Sending marketing emails via Keap (where no prior purchase), placing non-essential cookies (Google Analytics, Meta Pixel), testimonial publication, Facebook/Instagram ad retargeting |
We will never use your data in a way that is incompatible with the purpose for which it was originally collected without first notifying you and, where required, obtaining your consent.
Plain language: We use your data to teach you kinesiology, communicate with you about your courses, and occasionally let you know about relevant new offerings – nothing more.
5. How We Share Your Information
We do not sell, rent, or trade your personal data. We share data only with the specific third-party processors listed below, and only to the extent necessary to deliver our services. Each is subject to a data processing agreement and required to handle your data in accordance with GDPR.
Keap (Infusionsoft) – CRM, Email Marketing & Payment Processing
Keap is our primary CRM and email marketing platform. We use it to manage student and subscriber contact records, send course communications and newsletters, and process payments for course bookings.
- Data shared: name, email address, phone number, purchase history, course enrolment status, and email engagement data
- Data location: United States (Keap Inc.). Transfers are governed by EU Standard Contractual Clauses
- Privacy policy: www.keap.com/legal/privacy-policy
- Opt-out: use the unsubscribe link in any email, or contact us at info@kinesiologyzone.com
Google Analytics (Google LLC) – Website Analytics
We use Google Analytics to understand how visitors use our website, which pages are visited, how long people stay, and where traffic comes from. This helps us improve our content and user experience.
- Data shared: IP address (anonymised before storage), browser type, device, pages visited, session duration, referring URL
- We have enabled IP anonymisation (‘anonymizeIp’), your full IP address is never stored by Google
- Data location: United States (Google LLC). Transfers are governed by EU Standard Contractual Clauses and Google’s Data Processing Terms
- Google’s privacy policy: policies.google.com/privacy
- Opt-out: install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, or decline analytics cookies in our cookie consent banner
Meta Platforms (Facebook / Instagram) – Social Media & Advertising
We use Facebook (Meta) in two ways: we maintain a Facebook Page for KinesiologyZone (www.facebook.com/KinesiologyTraining), and we may use the Meta Pixel on our website to measure the effectiveness of any Facebook or Instagram advertising campaigns.
- Facebook Page: when you interact with our Facebook Page, Meta processes your data under Meta’s own privacy policy. We act as a joint controller for Page Insights data under the terms of Meta’s Page Controller Addendum
- Meta Pixel (if active): tracks actions on our website (such as visiting a course page or completing a booking) to help us understand how our advertising performs. This cookie is only activated if you consent via our cookie banner
- Data shared via Pixel: hashed email address (if you are logged into Facebook), IP address, browser/device data, pages visited, events triggered
- Data location: United States (Meta Platforms Inc.). Transfers are governed by EU Standard Contractual Clauses
- Meta’s privacy policy: www.facebook.com/privacy/policy
- Opt-out: decline marketing cookies in our cookie consent banner, or adjust your Facebook Ad Preferences at www.facebook.com/ads/preferences
- Other Recipients
Our web hosting provider for kinesiologyzone.com and hub.kinesiologyzone.com Website Hosting & IT Infrastructure - Where required by law, court order, or the Data Protection Commission Legal or Regulatory Authorities
- Accountants, lawyers, or insurers where necessary and subject to confidentiality obligations Professional Advisors
We do not share your personal data with any other third parties without your prior consent. If we add new tools in future, we will update this policy and notify you where required.
Plain language: Our three main tools are Keap (for contacts and email), Google Analytics (for website stats), and Facebook/Meta (for our social page and any ad campaigns). Everything is named above, no hidden sharing.
6. Cookies and Tracking Technologies
We use cookies on our website. A cookie is a small text file placed on your device. We use cookies to operate and improve our website, and to provide services you have requested.
We obtain your consent before placing any non-essential cookies via our cookie consent banner (provided by Complianz GDPR). You can change your cookie preferences at any time.
| Cookie Type | Details | Purpose / Legal Basis |
|---|---|---|
| Strictly Necessary | Session cookies, cookie consent record (Complianz) | Essential to operate the site; no consent required (ePrivacy Reg.) |
| Functional / Preference | Language, login state, student hub session | Needed to remember your choices; legitimate interest / consent |
| Analytics / Statistics | Google Analytics (_ga, _gid, _gat) — IP anonymised | Understand how visitors use our site; consent required |
| Marketing | Meta Pixel (Facebook / Instagram ad tracking) | Measure ad campaign effectiveness; consent required — only fires if you accept marketing cookies |
You can withdraw or change your cookie consent at any time by clicking the cookie settings link in our website footer, or by adjusting your browser settings. Note that disabling certain cookies may affect the functionality of some parts of our website.
Plain language: We use a consent-management tool so you can control which cookies you accept. Analytics and marketing cookies only fire if you say yes.
7. Data Retention
We keep personal data only for as long as necessary for the purpose it was collected, or as required by law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Student enrolment & contact details | 6 years after last activity | Legitimate interest; Irish contract law |
| Course completion & certificates | Indefinitely | Proof of qualification (student right) |
| Payment & transaction records | 7 years | Irish Revenue / tax compliance requirement |
| Marketing email lists | Until you unsubscribe or withdraw consent | Consent-based |
| Website analytics (Google Analytics) | 26 months (anonymised after 14 months) | Legitimate interest – site improvement |
| Cookie consent records | 3 years | Regulatory requirement under ePrivacy Regulations |
| Support enquiries & emails | 3 years | Legitimate interest — dispute resolution |
When data is no longer needed, we securely delete or anonymise it. You may request early deletion of your data at any time (subject to legal obligations).
Plain language: We don’t hang on to your data longer than we need to. Course certificates stay on record permanently so we can verify them if you ever need us to.
8. Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
| Right | What It Means | How to Exercise |
|---|---|---|
| Right of Access | Receive a copy of all personal data we hold about you | Email info@kinesiologyzone.com |
| Right to Rectification | Ask us to correct any inaccurate or incomplete data | Email us with the correction |
| Right to Erasure | Request deletion of your personal data (“right to be forgotten”) | Email us; we will action within 30 days |
| Right to Restrict Processing | Ask us to pause how we use your data | Email us with your request |
| Right to Data Portability | Receive your data in a structured, machine-readable format | Email us to request a data export |
| Right to Object | Object to processing based on legitimate interests or for direct marketing | Email us or use unsubscribe links |
| Right to Withdraw Consent | Withdraw consent at any time without affecting prior processing | Email us or use in-email links |
You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC) at any time:
| Contact Type | Details |
|---|---|
| Website | www.dataprotection.ie |
| Phone | +353 (0)761 104 800 |
| Address | Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 |
Plain language: Your data is yours. You can see it, fix it, delete it, or take it elsewhere. If you’re unhappy, the DPC is there to help.
9. Data Storage and International Transfers
Your personal data is primarily stored on servers located within the European Economic Area (EEA). Three of our third-party service providers – Keap (CRM and email), Google Analytics, and Meta (Facebook) – process data in the United States.
Where such transfers occur, we ensure that appropriate safeguards are in place, which may include:
EU Standard Contractual Clauses (SCCs) adopted by the European Commission
The provider’s participation in a recognised adequacy framework
Other GDPR-compliant transfer mechanisms as applicable
We no longer ask you to ‘consent’ to international transfers as a blanket condition of using our website. Instead, we rely on the above mechanisms.
Plain language: If your data goes outside the EU, we make sure the company handling it follows EU-approved safeguards.
10. Security of Your Data
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:
Encrypted data transmission (HTTPS / TLS) across all pages of kinesiologyzone.com
Password-protected access to student and administrative areas
Limited staff access on a need-to-know basis
Regular software updates and security patches for our website platform (WordPress)
PCI-DSS compliant payment processors — we never handle or store raw card data
No method of data transmission over the internet is completely secure. While we do everything reasonably practicable to protect your data, we cannot guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Data Protection Commission within 72 hours and, where required, notify you without undue delay.
Plain language: We use standard security practices appropriate for a small education business. If anything goes wrong, we follow legal reporting rules immediately.
11. Children’s Privacy
Our website and courses are directed at adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe we have inadvertently collected data about a child, please contact us immediately at info@kinesiologyzone.com and we will delete it promptly.
Plain language: Our kinesiology courses are for adults. We don’t collect data about children and will delete it immediately if we discover we have done so.
12. Third-Party Websites and Social Media
Our website contains links to external websites (including our Facebook, Instagram, and X/Twitter pages) and may provide access to third-party social sharing functionality. These third-party sites have their own privacy policies, which we do not control and for which we accept no responsibility.
When you click an external link or engage with social media features on our site, your data may be collected by those platforms under their own terms. We encourage you to review the privacy policies of any third-party site you visit.
Plain language: When you leave our site or interact with social media buttons, you’re under that platform’s privacy rules — not ours.
13. Marketing Communications
We send marketing and course update emails through Keap (our CRM platform). We will only contact you if you have:
- Explicitly subscribed to our mailing list via our website or at an event, or
- Previously purchased a course from us — in which case we may contact you about similar kinesiology courses and workshops (a limited ‘soft opt-in’ permitted under Irish ePrivacy rules)
Every marketing email we send through Keap includes a clear, one-click unsubscribe link. You can also opt out at any time by emailing info@kinesiologyzone.com with the subject line “Unsubscribe”, and we will remove you from all marketing lists within 5 working days.
We do not share your email address with third parties for their own marketing purposes. Keap processes your contact data on our behalf under a data processing agreement.
Plain language: We only email you if you signed up or bought from us. Every email has an unsubscribe link and we honour all opt-out requests within 5 working days.
14. Automated Decision-Making and Profiling
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you. Any decisions that affect your course access or eligibility are made by a human being.
Plain language: No algorithm decides whether you can access our courses – a real person does.
15. Website Terms of Use
By using our website, you agree to the following:
- You may access and print content from this website for personal, non-commercial use only
- Content may not be republished, redistributed, or reproduced without our prior written consent
- All intellectual property rights in website content are owned by KinesiologyZone or our licensors
- We make reasonable efforts to keep information current but cannot guarantee accuracy at all times
- We are not liable for loss or damage arising from use of or inability to use this website, to the maximum extent permitted by Irish law
- Links to third-party websites are provided for convenience only; we do not endorse their content
We aim to keep our website available 24 hours a day but cannot guarantee uninterrupted access. Planned or unplanned maintenance may occasionally affect availability.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data practices. We will post the updated policy on this page with a revised “Last Updated” date.
For significant changes, particularly those that affect how we use your data or your rights, we will notify existing subscribers by email at least 30 days before the change takes effect.
Plain language: We’ll keep this page current. For big changes, we’ll email you in advance.
17. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:
| Item | Details |
|---|---|
| Organisation | The Academy of Systematic Kinesiology in Ireland t/a TASK Ireland / KinesiologyZone |
| Contact Person | Siobhan Guthrie |
| info@kinesiologyzone.com | |
| Post | Lui Na Greine, Westport, Co Mayo, Ireland |
| Website | www.kinesiologyzone.com/privacy/ |
| DPC (Complaints) | www.dataprotection.ie | +353 (0)761 104 800 |
We aim to respond to all data protection enquiries within 5 working days and to resolve all formal data subject requests within one calendar month.