Privacy Policy | Kinetiq Performance Group
Last updated: October 2026
1. Who we are
Kinetiq Performance Group ('Kinetiq', 'we') is the data controller for personal data collected through this website and the Kinetiq OS platform. We operate from the Netherlands and serve customers within the European Union. Company details as published in this website's footer: registered name Kinetiq Performance Group, Chamber of Commerce (KvK) number as displayed in the footer, Netherlands. Our VAT identification number is published once registered and verified by our administrator. Contact: contact@kinetiqperformancegroup.com.
2. What personal data we collect
Depending on how you use the platform we may process: (a) Account data — name, email address, role, authentication records; (b) Athlete profile data — name, position, date of birth, height, weight, nationality, squad and team assignments; (c) Health-related and wellness data — wellness check-in scores, injury and treatment notes, return-to-play plans, screening results; (d) Performance data — training load, GPS and wearable metrics, test results; (e) Communication data — messages, form responses, support enquiries; (f) Usage data — pages and features used, device and browser type; (g) Billing data — organisation, plan, payment status (card details are processed by our payment provider and never stored by us).
3. Lawful bases for processing
We process personal data on the following bases: (a) Performance of a contract — providing the platform, accounts, and subscription billing; (b) Legitimate interests — securing the platform, service improvement, responding to enquiries; (c) Consent — non-essential cookies and tracking, marketing communications, and where required the processing of health-related data beyond what is necessary to deliver an agreed service; (d) Legal obligation — accounting, tax and regulatory record-keeping; (e) Vital interests — handling a medical emergency recorded through the platform. Where consent is the basis you may withdraw it at any time without affecting prior lawful processing.
4. Health-related and athlete data
Injury records, wellness scores, screening data and return-to-play information are special-category data under Article 9 GDPR. Access is restricted by role-based access controls: only authorised club staff (for example medical staff with an explicit athlete-level grant), the athlete's own account, and — where applicable — a linked parent or guardian can view an athlete's health data. Club administrators are responsible for determining who within their club may see this data; Kinetiq never uses it for advertising, and it is never shared with third parties for marketing.
5. Who we share data with
We share personal data only with: (a) Your club or organisation, as directed by your account role and your club's configuration; (b) Our platform hosting and infrastructure provider (Base44), which processes data on our instruction under a data processing agreement; (c) Our payment provider, which receives billing details needed to process payments; (d) Clinician or clinic partners, only when a referral is made with the appropriate consent in place; (e) Google, solely for advertising conversion measurement when you have accepted marketing cookies; (f) Public authorities, where legally required. We do not sell personal data.
6. International transfers
Our hosting and service providers may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and we assess each provider's transfer mechanisms as part of our processor due diligence.
7. Retention
We keep personal data only as long as necessary: account data for the life of the account and as long as needed for legal, accounting or defence-of-claims purposes; billing records for the statutory retention period under Dutch tax law (generally 7 years); athlete health and performance data for the duration of the athlete's club membership plus a period set by the club's retention policy, after which it is deleted or anonymised; support enquiries for up to 12 months after resolution. Exact periods may vary by club configuration; contact us for club-specific detail.
8. Children and young athletes
The platform supports clubs working with minors. Where a user is under the age at which they can consent to information-society services in their country (16 in the Netherlands), we require verification and consent of the holder of parental responsibility, and we provide guardian access through a dedicated guardian portal. Children's performance, location, health and personal data receive the same role-based protections as adult data, and are never used for advertising. Club administrators are responsible for obtaining and recording guardian consent for their minor athletes.
9. Your rights
Under the GDPR you have the right to: access your personal data; rectify inaccurate data; erasure ('right to be forgotten'); restriction of processing; data portability; object to processing based on legitimate interests or direct marketing; and withdraw consent at any time. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). We respond to requests within one month; complex requests may take up to three months with notice.
10. Deleting your account and data
You can request deletion of your account and personal data at any time: (a) through the deletion option in your account settings; or (b) by emailing contact@kinetiqperformancegroup.com. We may ask you to verify your identity before actioning a request. Some data may be retained where legally required (for example accounting records) or where it is necessary for the operation of a club account you belong to; in that case we restrict rather than delete where possible. Club administrators may also delete athlete records they manage.
11. Cookies and tracking
We use strictly necessary cookies and similar storage to operate the platform. Analytics and marketing cookies (including Google Ads) are only set after you consent through our cookie banner, and you can withdraw or change consent at any time via 'Cookie preferences' in the website footer. Full detail is in our Cookie Policy.
12. Marketing communications
We send marketing emails only where you have opted in or where permitted by law for our existing customers. Every marketing email contains an unsubscribe link, and we honour opt-outs promptly. Transactional messages (security alerts, billing receipts, service updates you need to run your club) are separate from marketing and are not optional while your account is active.
13. Security
We implement appropriate technical and organisational measures, including encryption in transit, role-based and row-level access controls, audit logging, and restricted staff access, to protect personal data — in particular athlete health data. No system is perfectly secure; we maintain an incident-response process and will notify affected parties and authorities as required by law.
14. Changes to this policy
We may update this Privacy Policy to reflect legal or service changes. The 'Last updated' date at the top of this page shows the current version; material changes affecting you will be communicated through the platform or by email.
15. Contact and privacy requests
For any privacy question, or to exercise your rights, contact contact@kinetiqperformancegroup.com. You do not need to, and should not, include sensitive personal information in unencrypted email — we will guide you to a secure route where needed.