Privacy Policy
Last updated: March 1, 2026
1. Information We Collect
GYMLIUM LTD ("we", "our", or "us") operates the Gymlium platform (gymlium.com). This Privacy Policy explains how we collect, use, and protect your information when you visit our website or use our services.
Personal Information
We may collect the following types of personal information:
- Account information (name, email address, password) when you create an account
- Business information (business name, subdomain) when you sign up as a trainer
- Contact information when you reach out to us via our contact form
- Usage data and analytics when you visit our website
- Technical information such as IP address, browser type, and device information
- Cookies and similar tracking technologies
2. How We Use Your Information
We use your personal information for the following purposes:
- To provide, maintain, and improve our platform and services
- To create and manage your account and trainer website
- To respond to your enquiries and provide customer support
- To process your subscription and billing
- To analyse usage patterns and optimise user experience
- To send important service updates and notifications
- To comply with legal obligations
- To protect our rights and prevent fraud
3. Legal Basis for Processing (GDPR)
Under the UK GDPR, we process your personal data based on the following legal grounds:
- Legitimate Interest: To improve our services and platform functionality
- Consent: When you voluntarily provide information or accept cookies
- Contract Performance: To provide services you have subscribed to
- Legal Obligation: To comply with applicable laws and regulations
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With your explicit consent
- To comply with legal obligations or court orders
- To protect our rights, property, or safety
- With trusted service providers who assist in operating our platform (under strict confidentiality agreements)
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
6. Your Rights (UK GDPR)
Under UK GDPR, you have the following rights regarding your personal data:
- Right of Access: Request copies of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
To exercise these rights, use our secure self-serve portal at /en/privacy-request, or download your data from your account settings when logged in. You can also contact us at the information provided below.
7. Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you cancel your subscription, we retain your data for a reasonable period to allow for account reactivation, after which it is securely deleted.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. Please refer to our Cookie Policy for detailed information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with UK GDPR.