Last updated: 8 November 2026

Privacy policy

We collect as little as we can: your email address, and your first name when you download a resource. We use it to send you what you asked for. We never sell it.

1. Who we are

PhysioAdvance is run by physiotherapists Franjo Keškić and Kenan Gosto (“we”, “us”). The data controller for this website, physioadvance.com, is:

FIZIO KEŠKIĆ, obrt za usluge, vl. Franjo Keškić, Kaštel Sućurac, Ulica dr. Ante Starčevića 104
Croatia · OIB (tax number): 28801765646

For any privacy question, email physioadvance.eu@gmail.com.

2. What we collect and why

• Free resources: your first name and email address, so we can email you the download link and address you by name.
• Newsletter (optional): if you tick the box and confirm by email, we send you our weekly email. We keep a record of the exact wording you agreed to, when, and from which page.
• Waiting lists: your email address and the programme you chose (PhysioAdvance Community or 1:1 Mentorship), so we can tell you when it opens. We also keep a record of the consent text you saw.
• “Keep me posted” after a download: which programmes you are interested in.
• Where you came from: if you arrive through a link with campaign tags (for example utm_source, fbclid or gclid), we store those tags with your sign-up so we know which posts and ads work.
• Analytics and advertising (only with your consent): which pages you visit, how you found us and whether you signed up, collected by Google Analytics 4 and the Meta Pixel. See section 5.
• Technical data: a one-way scrambled (hashed) version of your IP address, stored with your consent record as proof of the sign-up and to stop spam. We do not store your IP address in plain form.

We do not collect payment details, health data or anything about your patients. Please do not send us patient information.

3. Our legal basis

• Sending a resource you requested: taking steps at your request.
• Newsletter and waiting lists: your consent, which you can withdraw at any time.
• Analytics and advertising cookies: your consent, given in the cookie banner.
• Spam protection, campaign tags and consent records: our legitimate interest in running the site safely, knowing what works, and being able to prove you agreed.

4. Who processes your data for us

We use a small number of providers. They only process your data on our instructions.

• Vercel: hosts this website.
• Turso: our database, hosted in the EU (Frankfurt).
• Brevo (France): sends our emails and stores our contact list.
• Cloudflare Turnstile: checks that a form is filled in by a person, not a bot.
• Google (Google Analytics 4): measures how the site is used. Only with your consent.
• Meta (Meta Pixel and Conversions API, Meta Platforms Ireland): measures our Facebook and Instagram ads and helps show them to the right people. Only with your consent.

Some of these providers are based in, or use services in, the United States. Where data leaves the UK or EEA, they rely on approved safeguards such as the EU Standard Contractual Clauses. We never sell your data or share it for anyone else’s marketing.

5. Cookies

Always on (strictly necessary): when you arrive with campaign tags in the link, we keep them in your browser’s session storage until you close the tab, so they can be sent with a form. Cloudflare Turnstile may set a cookie to check that you are human. These do not need your consent.

Only if you accept them in the cookie banner:

• Google Analytics 4 (cookies such as _ga): counts visits and shows which pages and resources are useful. We do not use it to identify you.
• Meta Pixel (cookies such as _fbp): tells us which Facebook and Instagram ads lead to sign-ups. When you sign up, our server may also send Meta the same event through the Conversions API, with your email address in hashed (scrambled) form, so the two can be matched. We only do this if you accepted these cookies.

Until you choose, these tools do not load. You can change your choice at any time using the cookie settings link at the bottom of the page, or by clearing cookies in your browser.

6. How long we keep it

• Contact details and sign-ups: until you unsubscribe or ask us to delete them, and no longer than 2 years after your last contact with us.
• Waiting lists: until the programme opens and for up to 12 months afterwards, so we can tell you about the next intake.
• Consent records: for as long as we keep your contact details, as proof that you agreed.
• Download links: stop working after 7 days.
• Google Analytics: 14 months. Meta: as set out in Meta’s own data policy.

7. Your rights

Under the UK GDPR and the EU GDPR you can ask us to: see the data we hold about you, correct it, delete it, restrict or object to how we use it, or send it to you in a common file format. You can withdraw consent at any time. Our newsletter has an unsubscribe link in every email. For anything else, just email physioadvance.eu@gmail.com. We reply within one month.

If you are unhappy with how we handle your data, you can complain to your data protection authority. Our lead authority is the Croatian Personal Data Protection Agency (azop.hr). In the UK you can also contact the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to sort it out with you first.

8. Security

Data is encrypted in transit, access to our admin area is limited to the people who run PhysioAdvance, and IP addresses are stored only in hashed form. No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority as the law requires.

9. Children

PhysioAdvance is for physiotherapists and physiotherapy students. It is not intended for anyone under 16, and we do not knowingly collect their data.

10. Changes

If we change how we use your data, we will update this page and the date at the top. For significant changes, we will also tell you by email.