Data Protection (GDPR)

1. Data Controller

Jollof Fit acts as the data controller for personal data processed through the Services. For data protection inquiries, you can contact us using the details at the bottom of this page.

2. Lawful Bases for Processing

We process personal data only where we have a lawful basis to do so.

• Consent — for example when you connect health devices or opt into communications.
• Contract — to provide the Services you request.
• Legitimate interests — to secure, operate and improve the Services.
• Legal obligation — to comply with applicable laws.

3. Special Category Data

Health and body composition data is considered special category data under the GDPR. We process such data only with your explicit consent or another valid legal basis, and apply enhanced safeguards to protect it.

4. Your GDPR Rights

• Right to access your personal data.
• Right to rectification of inaccurate data.
• Right to erasure ('right to be forgotten').
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with a supervisory authority.

5. International Data Transfers

Where we transfer personal data outside the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to ensure your data remains protected.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in our Privacy Policy or as required by law, after which it is deleted or anonymized.

7. Data Security

We apply technical and organizational measures — including encryption in transit, access controls and ongoing monitoring — designed to protect personal data against unauthorized access, alteration or loss.

8. Exercising Your Rights

To exercise any of your rights or ask questions about how we handle your data, contact us using the details below. We will respond within the timeframes required by applicable law.