Privacy Policy

GYMFITLAB / PRIVACY

Your information, explained.

This notice explains how GymFitLab uses personal information through GymFitLab.co.uk and customer enquiries. For privacy questions or to exercise your rights, email info@gymfitlab.co.uk.

Information we use and why

• Enquiries: your name, email and message help us answer questions and resolve problems. We rely on our legitimate interest in providing customer support, or steps you request before entering a contract.
• Orders: contact details, delivery and billing addresses, items, order history and payment status are needed to fulfil the purchase and provide after-sales support. The legal bases are contract performance and applicable legal obligations, including accounting and consumer-law duties.
• Accounts: if you create an account, we use the details you provide to maintain it and show your orders. An account is not required for guest checkout.
• Website security: technical details such as IP address, browser information, timestamps and security logs can help operate and protect the store. We rely on our legitimate interest in preventing misuse and keeping the service secure.
• Reviews: if you submit a review, your chosen display name, rating, comments and any submitted images may appear publicly. Your email is not displayed with the review. Review moderation supports our legitimate interest in running a useful and trustworthy store.

Please only give us information needed for your enquiry. Do not include payment-card numbers, medical records or other sensitive information in emails or public reviews.

Marketing and measurement

Advertising pixels for Meta, TikTok and Google are not currently configured as active store integrations. WooCommerce campaign attribution is disabled while privacy controls are being prepared. Store administration can still use order totals and sales reports held within WooCommerce.

If we introduce optional advertising or consent-based analytics, we will explain the providers and purposes and obtain the required choice before activating those technologies. Buying equipment does not automatically subscribe you to marketing. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.

Who may receive information

Information is available to people who need it to operate GymFitLab and to service providers performing relevant functions, such as website hosting, technical maintenance and email delivery. When shipping orders, we share the necessary recipient, address and contact information with the selected delivery service, currently Royal Mail. Payment information is processed by Stripe and the payment method provider selected at checkout. Please do not send payment-card details by email.

Professional advisers and public authorities may receive information where needed for legal duties, legitimate claims or fraud prevention. We do not sell customer information.

External services and transfers

Links to another website take you to a separate service with its own privacy information. External resources used by the website, such as content delivery services, receive the technical information needed to deliver those resources.

Where a provider processes personal data outside the UK, the transfer must be supported by an applicable adequacy arrangement or another lawful safeguard. Contact us for information about the providers and safeguards relevant to your enquiry.

How long information is kept

We retain information for its relevant purpose and review whether it is still needed. Order and accounting records are retained for the applicable tax, accounting and legal-claims periods. Support records are kept while an enquiry, return, complaint or related claim remains relevant. Account information is kept while the account is maintained, subject to records we must retain by law.

Published reviews remain while they are relevant to the product and can be reviewed on request. Technical logs are retained for operational and security needs, with longer retention where necessary to investigate a specific incident. We do not keep data indefinitely simply because storage is available.

Your rights

Depending on the circumstances, you can request access to your information, correction, deletion, restriction or transfer of it, object to processing based on legitimate interests, and withdraw consent. The right to object to direct marketing is absolute. Some records may need to be retained despite a deletion request because of legal obligations or claims.

We may need proportionate information to verify your identity before acting. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Training and nutrition tools

The meal planner and macro arithmetic tool run in your browser without sending your entries to GymFitLab. Entries are not saved to an account and clear on reload; you can download your meal plan. Before introducing tools that collect or store personal training or nutrition inputs on our servers, we will explain how those inputs are processed. Do not send health information simply to buy equipment.

Cookies and updates

See our Cookie Policy for shop cookies and browser choices. We update this notice when the way we use information changes.

Last updated: 6 October 2026.