Privacy policy

About this policy

GymPin (UK) Ltd (“GymPin”, “we”, “us” or “our”) operates this website and store. For applicable data-protection law, GymPin is the controller of personal information described in this policy, except where another organisation acts as an independent controller.

This policy explains how we collect, use, disclose and protect personal information when you browse, purchase, create an account, submit a review, contact us or otherwise use our services. “Personal information” means information that identifies you or can reasonably be linked to you. It does not include information that has been effectively anonymised.

Information we collect

The information collected depends on how you interact with GymPin and may include:

• Identity and contact information: name, billing and delivery addresses, email address and telephone number.
• Order and transaction information: products viewed, cart activity, purchases, returns, exchanges, cancellations, delivery and transaction history.
• Payment information: payment method, status and transaction identifiers. Complete card details are handled by payment providers rather than stored by GymPin.
• Account information: account identifiers, preferences, settings and authentication information.
• Communications: messages, support enquiries, returns information, photographs, reviews and other content you submit.
• Device and usage information: IP address, browser, device, network identifiers, cookie information and interactions with our website and communications.
• Inferences: preferences or likely interests inferred from purchases and website activity, where permitted by law.

Where information comes from

• Directly from you when you order, register, contact us, enter a promotion, request a return or submit content.
• Automatically from your browser or device through cookies, pixels, logs and similar technologies.
• From Shopify and service providers that support payments, delivery, analytics, fraud prevention, customer service, reviews and marketing.
• From advertising, social-media and business partners where lawfully permitted.

How and why we use information

Cookies, analytics and advertising

Cookies and similar technologies help operate essential storefront functions, remember settings, measure performance, understand how the site is used and—where permitted—support personalised marketing.

Non-essential technologies are used according to your consent choices where consent is required. You can revisit cookie preferences using the site’s privacy controls. Blocking some cookies may affect optional features, but essential store functions may still set strictly necessary cookies.

Depending on your location, you may have a right to opt out of processing described as “sale”, “sharing” or targeted advertising. Where supported, a Global Privacy Control signal may also be treated as an opt-out request for that browser or device.

How we disclose information

We disclose personal information only where needed for the purposes described in this policy, including to:

• Shopify, which hosts and provides our commerce platform.
• Payment and fraud-prevention providers that authorise transactions and protect customers and GymPin.
• Warehousing, delivery and returns providers that fulfil, track and return orders.
• Technology and professional providers supporting hosting, analytics, customer service, reviews, communications, accounting, legal services and security.
• Marketing and advertising partners where permitted by law and consistent with your choices.
• Authorities or other parties where required by law, to enforce rights, protect safety, prevent fraud or support a corporate transaction.

Providers acting on our behalf are expected to use information only for authorised purposes and protect it appropriately. Some recipients, such as Shopify or payment providers, may also act as independent controllers for particular processing and provide their own privacy notices.

Our relationship with Shopify

Shopify hosts the GymPin store and processes information about access to and use of the store to provide and improve its services. Information submitted through the store is transmitted to Shopify and relevant providers, which may operate in countries other than your own.

Some Shopify features use interactions across merchants to provide security, analytics, personalisation or advertising. For processing where Shopify acts as controller, Shopify is responsible for its own practices and privacy requests.

International transfers

GymPin and its providers may transfer, store or process personal information outside the country where you live. Where UK or EEA data is transferred to a country without an applicable adequacy decision, we use recognised safeguards where required, such as approved standard contractual clauses or the UK International Data Transfer Agreement or Addendum.

You may contact us for more information about safeguards relevant to your information.

How long we retain information

We keep personal information only for as long as reasonably necessary for the purpose collected, including providing accounts and services, meeting tax, accounting, warranty and legal obligations, resolving disputes, preventing fraud and enforcing agreements.

Retention varies by record type and applicable law. When information is no longer required, we delete, anonymise or securely isolate it, unless continued retention is legally permitted or required.

Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information. No internet transmission or storage system can be guaranteed completely secure, so please avoid sending sensitive information through unprotected channels and keep account credentials confidential.

If you believe your account or information has been compromised, contact us promptly.

Your privacy rights

Rights vary by location and are subject to legal conditions and exceptions. You may have the right to:

• request access to personal information and related processing information;
• correct inaccurate or incomplete information;
• request deletion in certain circumstances;
• restrict or object to particular processing;
• receive or transfer certain information in a portable format;
• withdraw consent where processing relies on consent;
• object to direct marketing at any time; and
• appeal a decision or complain to a data-protection authority.

We may need to verify your identity and authority before acting. Authorised agents may submit requests where permitted, subject to suitable evidence. We will not discriminate against you for exercising a privacy right.

Marketing choices

You can unsubscribe from promotional email using the link in any marketing message. We may still send service communications about orders, accounts, safety, returns or changes relevant to your relationship with GymPin.

You have the right to object to the use of your personal information for direct marketing at any time. You can also adjust cookie and targeted-advertising choices using the privacy controls linked on this page.

Children’s information

Our store is not directed to children and we do not knowingly collect personal information from children under the age required to consent in their jurisdiction. A parent or guardian who believes a child has provided information may contact us to request appropriate action.

Third-party websites and public content

Our services may link to websites, social platforms and tools controlled by others. Their privacy and security practices are governed by their own notices. Information posted in public reviews, social-media comments or other public areas may be visible and reused by others, so do not publish information you wish to keep private.

Questions and complaints

Please contact GymPin first if you have a concern so we can investigate. UK residents also have the right to complain to the Information Commissioner’s Office. Residents elsewhere may contact their local data-protection authority.

Changes to this policy

We may update this policy when our practices, services or legal obligations change. We will publish the revised version here, update the date above and provide any additional notice required by law.

Contact and controller details

For questions or to exercise a privacy right, email hello@gym-pin.co.uk.