Lift Fitness
Back to homepage

Privacy Policy

Version 1.3. Effective from 20 October 2026.

This policy describes the personal data processed by the Lift Fitness Lagos app. The current version is available at www.liftfitness.pt.

1. Who is responsible

Associação Desportiva Lift Fitness, Rua Palos de La Frontera, Lote 13, 5P, 8600-707 Lagos.
Contact: privacidade@liftfitness.pt.

2. What data we collect and why

2.1 Account

Name, email, date of birth, sex and password, without which an account cannot be created; mobile phone number and Portuguese tax identification number (NIF), which are optional; membership number and account identifier; and acceptance of the Terms and Conditions and Privacy Policy. These are used to manage your account and membership, apply age requirements, issue invoices and demonstrate that you accepted the Terms.

To protect your account, we record the email and a pseudonymised version of the network address during first-access attempts, and the IP address and device type for each session. To provide a record of each change, we log who changes data in the app, what they change and when.

2.2 Facial photograph

Taken using the front-facing camera, this allows staff at the entrance to check that the person using the code is its holder. It is mandatory unless the camera cannot be used.

2.3 Entry, classes and use of the club

The entry QR code; entries and exits; bookings, waiting lists, cancellations, missed classes and attendance; personal training and Time System balances; time spent at the club; videos watched in Lift Academy; and optional challenges and badges. These are used to control entry, manage bookings and balances, and identify who has watched mandatory videos.

2.4 Payments and invoices

Amounts due and paid, dates, payment method, receipts, invoices, billing details (the holder’s name, NIF, address and email) and the steps of each payment in the app, together with the device type and language. These are used to collect payments, issue invoices and identify where a payment failed.

2.5 Training

Workouts, exercises, sets, weights, personal records, attendance, goals and your training plan, to show your progress and allow your trainer to support you.

2.6 Nutrition

The foods, supplements and water you log, quantities, goals and your prescribed meal plan, to monitor your nutrition. The nutritionist can only view your log with your “Nutrition” consent (section 4).

2.7 Physical assessments and questionnaires

Weight, body composition, body measurements, skinfolds, posture, mobility, strength, heart rate, estimated maximum oxygen uptake (VO2 max) and exercise stress tests; your health and fitness history (injuries, limitations, habits and goals); the nutrition questionnaire (medical conditions, allergies, intolerances, pregnancy, medication and habits); the professional’s reports; and postural assessment photographs. These are used to adapt your training and nutrition. Requests to suspend a package due to illness or injury, including the reason, description and medical certificate, are used by management to decide on the request.

2.8 Conversations

The text and date of messages, your name and photograph and any files attached by staff, to communicate with staff and your class group. Each conversation is only visible to its participants; in class group conversations, which you join when booking a class in that group, these are the group’s members, instructor and staff. Reports of abuse (your name, the reason, the message and any comments you write) are sent to management to prevent abuse.

2.9 Family and minors

The name, photograph, date of birth and membership number of minors and household members linked to the parent or guardian; Kids bookings and payments; the relationship to the minor; and the parent or guardian’s authorisations. These are used to allow the parent or guardian to manage minors and enter with them.

2.10 Other people’s data

If you refer a friend, you provide their name and, optionally, their phone number, so that reception can introduce the club to them and we can award you credit when they join and pay. The sales team records the name, phone number, email and notes relating to people who visit the club, to respond to them and follow up on the enquiry.

2.11 Notifications and birthdays

A mobile device identifier, operating system and version, and your preferences, to send club notifications. On your birthday, if your membership is active, you receive an invitation with a guest pass. Apart from this invitation, the club only sends offers to people who enable them.

2.12 Guests of the partner hotel

Name, room number, date of birth, stay dates, acceptance of club rules, entries, username and PIN, to allow the guest to create an account and enter the club during their stay.

2.13 Club staff

In the app, we process their name, email, phone number and role; work schedule and personal calendar link, if used; a record of their actions; conversations with members; entries using the staff pass; and, for personal trainers, instructors and the nutritionist, the profile that members see (name, photograph, introduction and specialisms). These are used to organise work at the club and introduce professionals to members.

3. Legal basis

4. Health data

Health data includes assessments and questionnaires (section 2.7), the nutritionist’s plan and follow-up, and conversations with the personal trainer and nutritionist.

We only process this data with your explicit consent, separately from the contract. There are three independent consents: “Physical assessment”, “Nutrition” and “Conversations with the technical team”. Not giving them does not affect access to the club; for members with a personal trainer, “Physical assessment” is necessary for the trainer to record and view assessments and workouts.

You may withdraw each consent at any time in Profile, under “Health data consent”. Information already recorded is then retained solely to defend the club in a legal dispute, until the time limit in section 6, unless you request its deletion.

5. Who we share data with

Service providers that process data on the club’s behalf and according to its instructions:

Other recipients: the Portuguese Tax and Customs Authority, which receives invoices; other authorities where required by law.

When certain features are used, the phone connects directly to other services, which receive the IP address and technical data and follow their own policies: an image library, a public food database, the barcode-reading library (which also sends technical data about the phone and app to its manufacturer) and a video platform.

We protect data using encrypted connections and by limiting access to those who need it.

6. How long we retain data

Retention periods run from the end of the most recent active relationship with the club (membership, contract, session package or time credits).

Afterwards, the data is deleted or anonymised.

7. Minors

8. Your rights

You may access your data and receive a copy, correct it, request its erasure or restriction of processing, object to processing based on legitimate interests and receive the data in a commonly used format. You may withdraw consent at any time without affecting processing carried out beforehand.

You may exercise these rights in Profile, by emailing privacidade@liftfitness.pt or at reception. We respond within one month.

Deleting your account

In Profile, under “Delete account”, or, without the app, by emailing privacidade@liftfitness.pt or at reception. Guest accounts are deleted on request by email or at reception.

The club permanently deletes the account and associated data. Only data that must be retained by law (invoices bearing your name and NIF) and records of who changed your data, to allow the club to defend itself in a legal dispute, are retained, blocked from any other use, until the time limits in section 6.

Complaints

You may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) at www.cnpd.pt.

9. Phone permissions