This policy explains what personal data I collect when you visit adelelbiltagy.com or work with me, why I collect it, how long I keep it, who I share it with, and the rights you have. I have written it in plain language on purpose. If anything is unclear, message me and I will explain.

1. Who is responsible for your data

The data controller is Adel El Biltagy, an individual coach operating from the Arab Republic of Egypt and offering online coaching worldwide.

You can reach me for anything in this policy:

  • WhatsApp: +20 103 367 2644
  • Instagram: @adellelbiltagy

I do not have a company, a data protection officer or an office address that I publish. I answer every privacy request personally.

2. The laws this policy follows

I process personal data in line with the Egyptian Personal Data Protection Law (Law No. 151 of 2020) and its executive regulations. Where you live elsewhere, I also respect the rights that your own law gives you, including the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the California Consumer Privacy Act as amended by the CPRA. If any of those laws gives you a stronger right than this policy describes, the law wins.

3. What this website collects

The website is a static site. It has no accounts, no login, no comment system and no contact form. Here is everything it touches:

Server logs. The site is hosted by Vercel Inc. (United States). When your browser requests a page, Vercel's edge network records technical data needed to deliver it securely: your IP address, the time of the request, the page requested, your browser type and the referring page. Vercel keeps these logs for a limited period for security, abuse prevention and service reliability. Legal basis: my legitimate interest in running a secure, working website (GDPR Article 6(1)(f)).

Browser storage. The site stores two small values in your browser only: your language choice ("lang") so the site opens in the language you picked, and a one-session flag ("ab-intro") so the opening animation plays once per visit. Neither value identifies you, neither leaves your device, and neither is used for tracking or advertising. They are strictly necessary for the site to behave as you expect, so no consent banner is required for them.

Analytics and advertising. At the date above, the site runs no analytics, no advertising pixels and no third-party tracking. If I add an analytics tool later, I will update this policy first and, where the law requires it, ask for your consent before anything non-essential loads.

The calculators. The calorie and body fat calculators on the Tools page run entirely inside your browser. The numbers you type are never sent to me or to any server. If you tap the WhatsApp button under a result, your device opens WhatsApp with a draft message containing your numbers. You can edit or delete that draft before you send it. Nothing is transmitted until you press send.

4. What I collect when you message me

Every conversation with me happens on WhatsApp. When you message me, I receive your phone number, your WhatsApp profile name and photo, and whatever you write or send. WhatsApp is operated by WhatsApp LLC and Meta Platforms, and your use of it is also governed by their own terms and privacy policy. Messages are end-to-end encrypted in transit; I store conversations on my own devices.

If we go on to work together, I ask for the information I need to coach you properly. Depending on your goal this can include:

  • your name, age, sex, country and time zone;
  • height, body weight, body measurements and progress photos;
  • training history, current program, injuries and limitations;
  • sleep, stress, work schedule and dietary habits;
  • blood test results, medications and supplements you choose to tell me about;
  • payment confirmation details (never your card number, which I never see).

Much of this is health data, which the law treats as a special category. I process it only with your explicit consent, which you give by sending it to me after reading this policy, and only to deliver the coaching you asked for (GDPR Articles 6(1)(b) and 9(2)(a)). You can withdraw that consent at any time, in which case I will stop using the data and delete it, although I may then be unable to continue coaching you.

I never ask for, and you should never send, government identification numbers, bank credentials or passwords.

5. Why I use your data

  • To answer your message and tell you whether and how I can help.
  • To design, adjust and track your program.
  • To keep a record of our work so I can pick it up where we left off.
  • To process and account for payments you make.
  • To comply with legal obligations, for example tax records.
  • To establish, exercise or defend legal claims, if that ever becomes necessary.

I do not use your data for profiling, automated decision-making with legal effects, marketing lists, or anything you would not expect from a coach.

6. Results photos and testimonials

The results page shows photos and first names of clients. Every one of them appears with the written consent of the person in the photo, given after the result, never as a condition of coaching. If you are one of those clients and you change your mind, message me and I will remove your photo from the site within 14 days. I never post a client's photo, name, numbers or messages anywhere without that written consent.

7. Who I share data with

I do not sell personal data, and I do not share it with advertisers or data brokers. The only parties that process data on my behalf, or alongside me, are:

  • WhatsApp LLC and Meta Platforms, Inc., which carry our messages (United States and Ireland).
  • Vercel Inc., which hosts the website and processes server logs (United States).
  • Instagram (Meta), if you contact me there instead.
  • Payment providers you choose to pay through. They process your payment details under their own policies; I only see confirmation that payment was made.
  • Professional advisers or authorities, only where the law requires it or where I need to defend a legal claim.

Each of these parties acts under its own legally binding terms, and I share only what the purpose requires.

8. International transfers

I am based in Egypt. If you are in the European Economic Area, the United Kingdom or another country with transfer rules, your data is transferred to Egypt when you message me, and to the United States through the providers above. Egypt is not currently the subject of an EU adequacy decision. The transfer to me is necessary to perform the contract you have asked for (GDPR Article 49(1)(b)), and you make it knowingly by choosing to contact me. The providers above rely on their own safeguards, including Standard Contractual Clauses, for transfers to the United States.

9. How long I keep data

  • Enquiries that do not become coaching: deleted within 90 days of the last message.
  • Coaching data: kept for the duration of our work and for up to 24 months after it ends, so we can resume without starting from zero and so I can answer any question about the work. Deleted earlier on request.
  • Blood test images and progress photos: deleted on request at any time, and in any case under the 24-month rule above.
  • Payment records: kept for as long as tax and accounting law in Egypt requires, currently five years.
  • Server logs: kept by Vercel for its standard retention period.

When data is deleted it is removed from my devices and from backups as they cycle.

10. How I protect data

I keep client data on devices protected by full-disk encryption, strong passcodes and two-factor authentication. Access is limited to me. I do not store client files in shared or public folders. No method of storage or transmission is perfectly secure, and I cannot promise absolute security, but I treat your health data with the seriousness it deserves. If a breach ever affects your data, I will notify you and any required authority without undue delay.

11. Your rights

Depending on where you live, you have the right to:

  • access the personal data I hold about you and receive a copy;
  • correct data that is inaccurate or incomplete;
  • delete your data ("right to be forgotten");
  • restrict or object to processing in certain circumstances;
  • port data you gave me to another provider in a usable format;
  • withdraw consent at any time, without affecting what was done before;
  • not be discriminated against for exercising any right (California);
  • know that I do not sell or share personal data for cross-context behavioural advertising (California);
  • complain to a supervisory authority. In Egypt that is the Personal Data Protection Center. In the EU it is the data protection authority of your country, in the UK the Information Commissioner's Office, and in California the California Privacy Protection Agency or Attorney General.

To exercise any right, message me on WhatsApp. I will confirm your identity through the number we already talk on, and respond within 30 days, free of charge. If I need longer for a complex request, I will tell you why.

12. Children

Coaching is for adults aged 18 and over. The website is not directed at children and I do not knowingly collect data from anyone under 18. If I learn that a minor has sent me personal data, I delete it. If you believe a child has contacted me, please tell me.

13. Links to other sites

The site links to Instagram, WhatsApp and the sources cited in articles. Those sites have their own privacy practices, which I do not control. Read their policies before sharing anything there.

14. Changes to this policy

I will update this policy when my practices or the law change. The date at the top is the date of the current version. For a change that affects how I use data you have already given me, I will tell you on WhatsApp before it applies.

15. Contact

Questions, requests or complaints about privacy: WhatsApp +20 103 367 2644. I answer them myself.