Privacy Policy

1Introduction

This Privacy Policy outlines how UK GYMBO LIMITED ("we", "us", "our") collects, uses, discloses, and protects your personal data when you use our website https://gymbomain.vercel.app/ ("Website") or our services.

We are registered in England and Wales under Company Number 16453873, with our registered office in London, United Kingdom.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2What Information We Collect

We may collect and process the following categories of personal data:

• Identity Information: name, date of birth, gender.
• Contact Information: email address, phone number, location.
• Login Data: username, password (hashed), login activity.
• Fitness Profile: workout preferences, fitness goals, diet preferences, music tastes, and profession.
• Technical Data: IP address, browser type, operating system, device information.
• Usage Data: pages visited, features used, and interactions with the site.
• Payment and Verification Data: Stripe Identity verification results (if applicable).

3How We Use Your Information

We use your personal data to:

• Create and manage your Gymbo account.
• Provide personalized fitness and wellness features.
• Match you with users with similar interests or training goals.
• Ensure the security and integrity of our platform.
• Improve our services, website, and user experience.
• Respond to inquiries or support requests.
• Comply with legal obligations.

4Legal Basis for Processing

Under UK data protection law, we process your personal data based on the following legal grounds:

• Consent: where you have given clear consent.
• Contract: processing necessary for the performance of a contract.
• Legal obligation: processing necessary to comply with a legal requirement.
• Legitimate interests: such as improving our platform or ensuring safety and integrity.

5Sharing Your Data

We may share your data with:

• Service providers (e.g., Supabase, Stripe) to help operate our platform.
• Law enforcement or regulatory authorities where required.
• Other users (if you voluntarily share profile details or messages).

We do not sell your personal data to third parties.

6International Transfers

Where we transfer data outside the UK, we ensure appropriate safeguards are in place, such as using service providers that comply with UK data protection law or standard contractual clauses.

7Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for legal or reporting requirements. You may request deletion of your data at any time (see Section 9).

8Security

We use industry-standard security measures, including encrypted connections (HTTPS), secure password hashing, and role-based access control, to protect your data from unauthorised access, loss, or misuse.

9Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict how we use your data.
• Withdraw your consent at any time (where applicable).
• Request data portability.

To exercise these rights, please contact us at: business@gymbo.uk

10Cookies and Analytics

We use cookies to enhance your browsing experience and collect anonymised analytics data. You may disable cookies in your browser settings. For more details, please see our Cookie Policy.

11Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the Website or email.

12Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact: