Qi Walking

Privacy Policy

Last updated: September 28, 2026

ABOUT US

Our Service (“Service” means our website https://qiwalking.com, subscription platform, and the personalized tai chi walking programmes we provide by email, together with related content, communications, and materials) is owned, managed, and operated by the Company (“we”, “us”, “our” or the “Company”), operating under the Qi Walking brand at qiwalking.com. We can be contacted by email at [email protected]. At Qi Walking, we are committed to helping people feel confident and well through personalized, step-by-step plans. We believe in the importance of transparency, privacy, and accountability in handling personal data. When you use our Service, we may collect, store, and process personal data. This Privacy Policy explains: what data we collect, why and how we process it, how long we keep it, with whom it may be shared, your rights under GDPR and other applicable data protection laws. We act as a data controller of your personal data under the General Data Protection Regulation (GDPR) and other relevant laws. By using our Service, you acknowledge that you have read and understood this Privacy Policy. IF YOU DO NOT ACCEPT THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT USE OUR SERVICE.

YOUR DATA COLLECTED BY US

We collect personal data in three main ways: Data you provide directly: Name, surname. Email address (for delivery of Plans, account setup, and communication). Payment details (processed by third-party payment providers, not stored by us). Wellness preferences, goals, or experience level you voluntarily provide (e.g., “complete beginner,” “want short daily sessions,” “prefer low-impact movement”). Data collected automatically when you interact with our website: IP address, browser type, operating system. Device information. Website usage statistics (pages visited, actions taken, referring URLs). Data collected via cookies and similar technologies: We use cookies to improve your experience, remember your preferences, and analyze traffic. More details are in our Cookie Policy.

WHY WE PROCESS YOUR DATA

We process your data for several purposes, including: To deliver your Plans. Preparing and emailing your personalized plan materials. To provide customer support. Responding to your questions via email. To improve our Service. Analyzing how users interact with our website and subscription service to improve features. To process transactions. Managing payments and sending invoices. To send important communications. Such as updates, subscription confirmations, or renewal reminders. To personalize offers. With your consent, we may send promotional emails, discounts, or special offers. To comply with legal obligations. For accounting, tax, or regulatory requirements.

LEGAL BASIS FOR PROCESSING

We process your personal data under the following legal bases: Legal Basis Purpose of Processing Example Contract To perform our obligations under the subscription contract. Delivering your plan materials by email. Consent For optional processing such as marketing emails or analyzing optional data you choose to share. Sending you a discount code or processing voluntary information about your wellness goals. Legitimate interest To improve our website, detect fraud, or respond to inquiries. Using analytics tools to optimize website performance. Legal obligation To comply with applicable laws and regulations. Keeping records for tax purposes.

SENSITIVE DATA (SPECIAL CATEGORIES)

Our quiz collects health-related information about you — including body metrics (such as your height, weight, age, goal weight, and body-composition goals), your activity level, your fitness, mobility, and weight goals, and any health conditions, physical limitations, dietary restrictions, or lifestyle details (such as your daily routine, sleep, or eating habits) you choose to share — so that we can generate your personalized tai chi walking programme. This is “special-category” (sensitive) personal data concerning your health under Article 9 of the GDPR. We do not use it for advertising or profiling; we process it only to prepare, personalize, and deliver your plan and related support. Our legal basis is your explicit consent under Article 9(2)(a) GDPR, which you give by choosing to enter these answers in the quiz and submit them. As explained in Section 12 of our Terms and Conditions, your quiz inputs (including body metrics) may be processed by third-party AI providers, on our behalf and on our instruction, solely to generate and refine your plan. You can withdraw your consent at any time by contacting us at [email protected]; withdrawing consent does not affect processing carried out before you withdrew it, and once withdrawn we will stop processing this data and delete it unless we are legally required to keep it.

PAYMENTS

Payments are processed securely by our third-party payment provider, Stripe. We do not collect or store your card details. Your payment information is handled by the payment provider under their Privacy Policy. Example: Stripe Privacy Policy.

DATA RETENTION

We retain personal data only as long as necessary for the purposes for which it was collected: Account and subscription data: kept while your subscription is active. Transaction and tax records: retained as required by law (usually up to 10 years). Marketing data: retained until you withdraw consent. Health / special-category quiz data: kept only as long as needed to deliver and support your plan, and deleted on account deletion or when you withdraw consent (unless we are legally required to keep it).

SHARING OF YOUR DATA

We may share your data with: Service providers (payment processors, email service providers, analytics tools, hosting services). Marketing providers (only if you have consented to receive marketing communications). Advertising partners — Meta (Facebook/Instagram) and OpenAI (ChatGPT Ads) — to measure and improve our ads, based on your consent to analytics and advertising cookies (given in our cookie banner, as explained in our Cookie Policy). For example, we send OpenAI events such as signing up with your email, starting checkout, or completing a purchase, together with the ChatGPT ad click identifier, a SHA-256 hash of your email address (and of your phone number, if you gave one), a hashed pseudonymous visit identifier, your country, IP address, browser information, the address of the page where the event happened, the time of the event, the products or plan involved, and the order value and currency. We send these from our servers (OpenAI’s Conversions API) and may also send them from your browser (OpenAI’s Measurement Pixel). Legal authorities (where disclosure is required by law or to protect rights, safety, or prevent fraud). Aggregated/anonymized data recipients (we may share statistics that do not identify individuals). We do not sell your personal data.

DATA STORAGE & CROSS-BORDER TRANSFERS

Your data is primarily stored within the European Union (EU). Some of our providers, including our advertising partners Meta and OpenAI, may process data outside the EU (for example, in the United States). If we transfer data outside the EU, we ensure appropriate safeguards (e.g., Standard Contractual Clauses). By using the Service, you consent to such transfers if necessary.

SECURITY

We take data security seriously and implement measures such as: SSL encryption (HTTPS) for all interactions. Secure servers with restricted access. Data minimization and pseudonymization where possible. Monitoring and prevention of unauthorized access. In case of a personal data breach, we will notify you and the relevant supervisory authority as required by GDPR.

YOUR RIGHTS

Under GDPR and other applicable laws, you have the following rights: Access: Request a copy of your data. Rectification: Correct inaccurate or incomplete data. Erasure (“Right to be Forgotten”): Request deletion of your data. Restriction: Ask us to limit processing. Portability: Request your data in a machine-readable format. Objection: Object to certain types of processing (e.g., direct marketing). Withdraw consent: For processing based on consent (e.g., marketing, sensitive data). File a complaint: With the State Data Protection Inspectorate of Lithuania or your local authority. To exercise your rights, contact us at [email protected].

CHILDREN’S PRIVACY

Our Service is not intended for children under 16 years in the EU (or under the local legal minimum age). If we become aware of data collected from children without parental consent, we will delete it promptly. Parents can contact us at [email protected] for concerns.

HOW TO MANAGE YOUR DATA

You may manage your data by contacting us at [email protected]. Requests will typically be handled within 30 days. For identity verification, we may request additional information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Updates will be posted at https://qiwalking.com, with the “last updated” date revised. If changes are material, we may notify you by email.

PRIVACY NOTICE FOR CALIFORNIA RESIDENTS (CCPA)

While our company is based in the EU, if you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA): We do not sell your personal information. You have the right to know what categories of data we collect, how we use it, and with whom it is shared. You may request deletion of your data. You may request access to your data twice per year free of charge. To exercise these rights, contact us at [email protected] with the subject “California Privacy Rights Request.”

PRIVACY NOTICE FOR VIRGINIA, COLORADO, CONNECTICUT, UTAH, NEVADA RESIDENTS

If you reside in these states, local privacy laws (VCDPA, CPA, CTDPA, UCPA, NPL) may apply. We do not sell personal information. You may opt out of targeted advertising — including the advertising measurement we share with Meta and OpenAI — by choosing “Essential only” in the cookie preferences on our Cookie Policy page, by turning on Global Privacy Control, or by emailing us. You may request access, correction, deletion, or data portability. Requests should be sent to [email protected].

CONTACT

If you have any questions or concerns about this Privacy Policy or your personal data, contact us at: Qi Walking (qiwalking.com). Email: [email protected]