This Privacy Policy explains how Saint-Tri GmbH, Höhenweg 15, 9042 Speicher, Switzerland ("we"), processes personal data when you visit smart.saint-tri.com, take our quiz or subscribe to SAINT-TRI Smart. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Contact for all privacy matters: info@saint-tri.com.
1. What data we collect
- Quiz & onboarding data: name, email, age, gender, location, race goals and dates, training experience, weekly availability, equipment — and, where you choose to tell us, health-related information such as past injuries. You provide this so that we can build and personalise your training plan.
- Purchase data: handled by our payment provider Stripe (we do not store card numbers); we receive order, amount, subscription status.
- Usage data: server logs and, where enabled and consented to, analytics/advertising identifiers (see Section 5).
2. Health-related data — explicit consent
Information about injuries or physical limitations is a special category of personal data (Art. 9 GDPR). We process it only with your explicit consent, which you give when you voluntarily enter it in the quiz and submit the form, and only to design safe, appropriate training recommendations. You may withdraw consent at any time by emailing us; we will then delete this data.
3. Purposes and legal bases
- Providing the Service and your plan — performance of a contract (Art. 6(1)(b) GDPR);
- Health-related quiz answers — explicit consent (Art. 9(2)(a) GDPR);
- Service emails about your subscription — performance of a contract;
- Marketing emails — consent, revocable at any time via unsubscribe link;
- Analytics/advertising — consent (see Section 5);
- Legal obligations (accounting, tax) — legal obligation.
4. Processors and recipients
We share data only with service providers that help us run the Service, under data-processing agreements:
- Stripe (payments; Stripe Payments Europe / Stripe Inc., USA),
- Airtable (lead & customer records; USA),
- Vercel (website hosting; USA/EU),
- Final Surge (delivery of your training plans; USA) — when we create your athlete account we share your name, email and plan details,
- Meta Platforms (advertising measurement — only if you consent to marketing cookies/pixels),
- Google (web fonts loaded from Google servers when pages render).
Where providers are located in the USA or other countries without an adequate level of data protection, we rely on the EU/Swiss Data Privacy Framework or EU Standard Contractual Clauses.
5. Cookies, analytics and advertising
The website works without tracking cookies. Where we use analytics or advertising technologies (e.g. Meta Pixel, Google Analytics), they are activated only after your consent via the consent notice, and you can withdraw consent at any time. Strictly necessary technologies (e.g. Stripe fraud prevention during checkout) are used on the basis of legitimate interest / contract performance.
6. Retention
Quiz data of non-customers: deleted or anonymised after at most 24 months of inactivity. Customer and billing data: kept for the duration of the contract and thereafter as long as statutory retention duties require (typically 10 years for accounting records in Switzerland). Health-related data: deleted upon withdrawal of consent or termination of the subscription, unless you ask us to keep it for a future return.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw any consent with future effect. Contact info@saint-tri.com. EU/EEA residents may complain to their local supervisory authority; in Switzerland, to the Federal Data Protection and Information Commissioner (FDPIC).
8. Security
All traffic is TLS-encrypted; payment data is handled exclusively by Stripe (PCI-DSS certified); access to customer records is restricted to authorised persons.
9. Changes
We may update this Policy; the current version is always available at smart.saint-tri.com/legal/privacy with its "Last updated" date.