Privacy Policy

Last Updated: November 11, 2025

1. Introduction

Welcome to Fitness Depot (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.fitnessdepot.store and make purchases from our online store.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information You Provide to Us

We collect personal information that you voluntarily provide to us when you:

Create an account: Name, email address, password, date of birth
Make a purchase: Billing address, shipping address, payment information (processed securely through our payment provider)
Contact us: Name, email address, phone number, message content
Subscribe to our newsletter: Email address, name (optional), preferences
Participate in surveys or promotions: Survey responses, competition entries
Leave product reviews: Name (or username), review content, rating

2.2 Information Automatically Collected

When you visit our website, we automatically collect certain information about your device, including:

Log and Usage Data: IP address, browser type, operating system, access times, pages viewed, referring website addresses
Device Data: Device type, unique device identifiers, mobile network information
Location Data: General location information based on IP address
Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 5)

2.3 Information from Third Parties

We may receive information about you from third parties, such as:

Payment processors (transaction completion confirmations)
Delivery partners (shipping status updates)
Social media platforms (if you connect your account)
Analytics providers (aggregated usage statistics)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Fulfill Orders and Provide Services

Process and complete your transactions
Manage your account and orders
Send order confirmations and shipping updates
Provide customer support
Handle returns and refunds

3.2 To Improve Our Services

Analyze website usage and customer behaviour
Improve our product offerings and website functionality
Develop new products and services
Conduct market research and testing

3.3 To Communicate With You

Send you marketing communications (with your consent)
Respond to your inquiries and customer service requests
Send administrative information (policy updates, security alerts)
Request feedback and reviews

3.4 To Ensure Security and Prevent Fraud

Monitor and prevent fraudulent transactions
Protect against malicious or illegal activity
Enforce our terms and conditions
Comply with legal obligations

3.5 To Personalize Your Experience

Recommend products based on your purchase history
Customize website content and advertisements
Remember your preferences and settings

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on the following lawful bases:

Contract Performance: Processing necessary to fulfill our contract with you (e.g., completing orders)
Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, analytics)
Consent: Processing based on your explicit consent (e.g., marketing communications)
Legal Obligation: Processing required to comply with legal requirements (e.g., tax records)

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small data files placed on your device when you visit our website. We use cookies to improve your browsing experience and analyze site usage.

5.2 Types of Cookies We Use

Essential Cookies: Necessary for website functionality (shopping cart, account login)
Performance Cookies: Help us understand how visitors use our site (Google Analytics)
Functional Cookies: Remember your preferences and settings
Advertising Cookies: Deliver relevant advertisements based on your interests

5.3 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality. To learn more about cookies and how to manage them, visit www.allaboutcookies.org.

6. How We Share Your Information

We may share your information in the following circumstances:

6.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

Payment processors (Stripe, PayPal, etc.)
Shipping and fulfillment partners (Royal Mail, DPD, etc.)
Email service providers (for newsletters and transactional emails)
Web hosting and cloud storage providers
Analytics providers (Google Analytics)
Customer service platforms

6.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Valid legal processes (subpoenas, court orders)
Government or regulatory requests
Protection of our rights, property, or safety
Prevention of fraud or illegal activity

6.4 With Your Consent

We may share your information with third parties when you provide explicit consent.

We do not sell your personal information to third parties.

7. International Data Transfers

Your information may be transferred to and processed in countries outside the UK/EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)
Adequacy decisions recognizing equivalent data protection standards
Other legally approved transfer mechanisms

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law.

Typical Retention Periods:

Account information: As long as your account is active, plus 2 years after closure
Purchase records: 7 years (for tax and accounting purposes)
Marketing data: Until you unsubscribe, plus 2 years for compliance
Website analytics: 26 months (Google Analytics default)
Customer service records: 3 years after last interaction

After the retention period expires, we will securely delete or anonymize your personal information.

9. Your Data Protection Rights

Under UK GDPR, you have the following rights:

9.1 Right to Access

You can request a copy of the personal information we hold about you.

9.2 Right to Rectification

You can request that we correct any inaccurate or incomplete information.

9.3 Right to Erasure (“Right to be Forgotten”)

You can request that we delete your personal information in certain circumstances.

9.4 Right to Restriction of Processing

You can request that we limit how we use your information.

9.5 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format.

9.6 Right to Object

You can object to our processing of your information for marketing purposes or based on legitimate interests.

9.7 Right to Withdraw Consent

If we process your data based on consent, you can withdraw that consent at any time.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not handled your data properly.

To exercise any of these rights, please contact us at:

Email: tamaryn@fitnessdepot.store

We will respond to your request within 30 days.

10. Security of Your Information

We implement appropriate technical and organizational security measures to protect your personal information, including:

Encryption of sensitive data (SSL/TLS certificates)
Secure payment processing (PCI-DSS compliant providers)
Regular security audits and vulnerability assessments
Access controls and authentication procedures
Staff training on data protection
Secure backup and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Children’s Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

12. Marketing Communications

12.1 Email Marketing

With your consent, we may send you marketing emails about:

New products and promotions
Special offers and discounts
Health and fitness tips
Company news and updates

12.2 Opting Out

You can unsubscribe from marketing emails at any time by:

Clicking the “unsubscribe” link in any marketing email
Updating your preferences in your account settings
Contacting us at privacy@fitnessdepot.store

Note: Even if you opt out of marketing emails, we will still send transactional emails related to your orders and account.

13. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

14. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

Posting the updated policy on our website
Updating the “Last Updated” date at the top of this policy
Sending an email notification (for significant changes)

Your continued use of our website after changes are posted constitutes acceptance of the updated privacy policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Fitness Depot

Email: tamaryn@fitnessdepot.store

UK Information Commissioner’s Office (ICO): If you wish to make a complaint about how we handle your personal data, you can contact the ICO:

Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

16. Specific Data Processing Activities

16.1 Payment Processing

We use secure third-party payment processors (such as Stripe and PayPal) to handle all payment transactions. We do not store full credit card information on our servers. Payment processors comply with PCI-DSS standards.

16.2 Email Service Providers

We use third-party email service providers to send transactional and marketing emails. These providers have access to your email address and name for the purpose of sending emails on our behalf.

16.3 Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to our site. We use this information to improve our website and services.

16.4 Delivery Partners

We share your name, address, and phone number with our delivery partners to fulfill your orders. Our delivery partners are contractually obligated to protect your information and use it only for delivery purposes.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.