Privacy Policy

Last updated: 2026-04-07

Introduction

Motivya (hereinafter "the Platform") operates in compliance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and applicable Belgian legislation. This policy describes how we collect, use, store, and protect your personal data.

Data Controller

The data controller is the company operating Motivya. For any questions regarding your personal data, you can contact us via the email address provided on the platform.

Data Collected

We collect the following categories of data:

• Identity data: name, email address
• Authentication data: hashed password, OAuth identifiers (Google, Facebook)
• Role data: your role on the platform (athlete, coach, accountant, administrator)
• Payment data: processed by Stripe; we do not store your card details
• Coach data: enterprise number (BCE/KBO), specialties, biography, geographic zone
• Booking data: booked sessions, amounts paid, statuses
• Technical data: IP address, browser type, language preference

Purpose of Processing

Your data is processed for the following purposes:

• Account management and authentication
• Processing bookings and payments
• Communication regarding your bookings and account
• Compliance with our legal obligations (invoicing, VAT, anti-money laundering)
• Platform and user experience improvement

Legal Basis

The processing of your data is based on the following legal grounds: contract performance (bookings, payments), consent (non-essential cookies), legal obligations (Belgian invoicing, PEPPOL), and legitimate interest (platform security, service improvement).

Data Retention

Your personal data is retained as long as your account is active. Invoicing data is retained for 7 years in accordance with Belgian accounting legislation. You may request deletion of your account at any time.

Your Rights

Under the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing

To exercise your rights, contact us via the platform's email address. You also have the right to lodge a complaint with the Belgian Data Protection Authority (DPA).

Third-Party Sharing

Your data may be shared with the following third parties:

• Stripe — payment processing and coach account management (Stripe Connect)
• Hosting provider — secure data storage on EU-based servers
• Google — if you use Google OAuth login

Cookies

The platform uses essential cookies for site operation (session, CSRF token, language preference). No advertising tracking cookies are used.

Security

We implement appropriate technical and organisational measures to protect your personal data, including password encryption, HTTPS connections, and two-factor authentication for sensitive roles.

Changes

We may update this privacy policy. Any changes will be published on this page with a revised update date.