Privacy Policy

Last updated: 15 September 2026

This policy explains what personal data we collect through idoona.fit, why we collect it, how long we keep it, and the rights you have over it. We collect very little. At present the only personal data most visitors give us is an email address.

1. Who we are

iðoona is a brand of Suryudey AM Inc, Dover, Kent County, Delaware 19901, United States. For the purposes of the UK GDPR and the EU General Data Protection Regulation, Suryudey AM Inc is the data controller for personal data collected through this website.

For any question about this policy, or to exercise any of the rights described in section 7, write to hello@idoona.fit.

2. What we collect

Information you give us

• Email address. Collected only when you submit the signup form to join our mailing list.

Information collected automatically

• Analytics data, and only if you accept analytics cookies. This covers pages viewed, approximate location at city level, referring website, device type and browser. IP addresses are anonymised before storage.
• Server logs held by our hosting provider for security and reliability. These may briefly include your IP address.

We do not collect payment details, we do not ask for your name, address or phone number, and we do not knowingly collect data from anyone under 16.

3. Why we use it, and on what legal basis

We will not use your email address for anything other than the purpose you gave it for. We do not sell, rent or trade personal data, and we do not share it with advertisers.

4. Who processes data on our behalf

We use a small number of third party services. Each acts as a processor under contract and may only handle your data on our instructions.

5. International transfers

We are established in the United States and several of our processors are too. Where personal data is transferred out of the United Kingdom or European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework, depending on the provider.

6. How long we keep it

• Email addresses are kept until you unsubscribe or ask us to delete them, and are removed within 30 days of that request.
• Analytics data is retained for 14 months, then deleted automatically.
• Server logs are typically kept for up to 30 days by our host.

7. Your rights

Under the UK and EU GDPR you have the right to:

• Access the personal data we hold about you
• Rectify it if it is inaccurate or incomplete
• Erase it, sometimes called the right to be forgotten
• Restrict how we process it
• Port it, receiving a copy in a machine readable format
• Object to processing carried out under legitimate interests
• Withdraw consent at any time, which does not affect processing carried out before you withdrew it
• Complain to a supervisory authority

To exercise any of these, email hello@idoona.fit. We will respond within one month. There is no charge.

To unsubscribe, use the link at the foot of any email we send. To change your cookie choice, use the Cookie settings link in the site footer.

8. Complaints

If you are in the United Kingdom you may complain to the Information Commissioner's Office at ico.org.uk. If you are in the European Economic Area you may complain to the supervisory authority in your country of residence. We would appreciate the chance to address your concern first.

9. Security

The site is served over HTTPS. Form submissions are transmitted over an encrypted connection. Access to the mailing list is limited to the people who need it. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable technical and organisational measures appropriate to the small amount of data we hold.

10. Changes to this policy

If we change this policy we will update the date at the top of this page. If the change is significant and affects people already on our mailing list, we will tell them by email.