PRIVACY POLICY

SkipTheGym is operated by Vasil Shimbof, trading as SkipTheGym. Our website is skipthegym.fit. For any privacy-related questions, contact us at vasil@skipthegym.fit.

We collect only what we need to deliver and improve the service:

• Email address — when you purchase, to create your account and send your access link.
• Payment data — handled entirely by Stripe. We never see or store your card details.
• Progress data — which videos you have completed, stored against your account.
• Usage data — standard web server logs (IP address, browser type, pages visited) for security and performance.
• Name and contact details — if you give them to us, for example when you enquire about coaching or email us.
• Training data — your workout logs, notes, profile details and any feedback or testimonial you choose to send.
• Coaching enquiry answers — if you ask about coaching, your name, Instagram handle and the answers you give (such as your goals and availability), used only to reply to you. Booking a call is covered separately under "Coaching Call Bookings" below.
• Reminder settings — if you turn on workout reminders, a technical address for your browser or device so we can send them. Nothing else about your device is stored.
• Error reports — if something breaks, technical details about the error (such as the page and browser) so we can fix it.

• To create and manage your account
• To deliver the program you purchased
• To send emails you need to use the service (access links, password resets, receipts)
• To send occasional emails about your programme and related SkipTheGym products, if you are a customer. Every one has an unsubscribe link
• To send workout reminders, only if you turn them on. You can turn them off at any time in your browser or device settings
• To reply to enquiries and arrange calls you ask for
• To track and display your training progress
• To comply with legal obligations

We do not sell your data. We only email people who are not customers if they have agreed to it, and you can unsubscribe from any non-essential email at any time without affecting your access.

• If you choose to save a calorie calculation, we store: sex, age, height, weight, activity level, goal, the calculated calorie target, and the date. This is health data, a special category under UK GDPR.
• We only store it if you tick the save box. That tick is your explicit consent (UK GDPR Article 9(2)(a)). If you don't tick it, the calculation runs in your browser and nothing is sent to us.
• We use it only to show you your own history and to remind you to recalculate every 4 weeks. Only you can see it. It is not shown in any coach or admin screen, not used for marketing, and not shared with anyone except Supabase, which stores our database.
• Withdraw consent at any time with "Delete my history" in the Nutrition Toolkit: it permanently deletes all saved results straight away. It is also deleted automatically if your account is deleted.
• The calculator gives general guidance, not medical advice.

When you book a free coaching call on our /coaching page:

• What we collect — your name, email address, phone number, Instagram handle, your answers to the two quiz questions (your goals, and what stopped you before) and the call time you choose.
• Why — to arrange the call, remind you about it, and prepare for it.
• Who receives it — Google (Google Calendar and Google Meet, to create the call), Resend (sends your confirmation and reminder emails) and Telegram (a private booking alert to Vasil). They only process it to provide that service to us.
• Lawful basis — taking steps at your request before entering a contract (UK GDPR Article 6(1)(b)).
• How long we keep it — 12 months, if you do not become a client. If you do, it is kept with your coaching records for as long as your account is active.
• Cancelling — use the cancel link in every booking email. Cancelling removes the call from the calendar. To have your details deleted, email us.

We process your data under the following lawful bases:

• Contract performance — processing your purchase and giving you access to the program.
• Legitimate interests — security, fraud prevention, fixing errors, improving the service, replying to enquiries, and emailing customers about their programme and related products (you can opt out at any time).
• Legal obligation — maintaining records as required by UK law.
• Explicit consent — for optional health data you choose to save in the Nutrition Toolkit (see Health Data above), for workout reminders you choose to turn on, and for the Meta Pixel advertising cookie (see Cookies below).

We use these service providers to run SkipTheGym. They only process your data to provide their service to us:

• Stripe — payment processing. stripe.com/privacy
• Supabase — database and authentication. Data stored in EU data centres.
• Resend — transactional email delivery.
• Bunny.net — video hosting and delivery.
• Meta Platforms Ireland — ad measurement via the Meta Pixel, only if you accept cookies. See "Cookies" below.
• Vercel — website hosting. vercel.com/legal/privacy-policy
• Error monitoring — a service that records technical error reports so we can fix problems.
• Internal notifications — a private messaging service our team uses to be alerted to new orders and enquiries. These alerts can include your name, email and enquiry answers.
• Call booking — coaching calls are booked on our site and created in Google Calendar and Google Meet. See "Coaching Call Bookings" above.
• Bot protection — a security check on some forms that confirms you are a person, not a bot.
• Rate limiting — a service that briefly stores your IP address to stop abuse, such as too many login attempts.
• Reminder delivery — if you turn on workout reminders, they are delivered through your browser or phone maker's push service.

Some of our providers process data outside the UK, for example in the EU or the USA. When that happens, the transfer is protected by UK adequacy regulations or approved contractual safeguards, such as the UK International Data Transfer Addendum.

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are legally required to keep it. Payment records are kept by Stripe for as long as the law requires. Saved nutrition results are kept until you delete them or your account. Coaching enquiry alerts stay in our private team chat until we delete them; ask us at any time and we will delete yours.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability

To exercise any of these rights, email us at vasil@skipthegym.fit. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (UK Information Commissioner's Office).

We use essential cookies and similar browser storage needed to keep you logged in and remember basic settings. These do not need your consent.

Meta Pixel (only if you accept). If you press Accept on our cookie banner, we load the Meta Pixel from Meta Platforms Ireland Limited, the company behind Facebook and Instagram. We use it to measure how well our ads perform. It sets cookies in your browser and sends Meta information about your visit: the pages you view, your IP address and browser details, a cookie identifier, and, when you start or complete a purchase, the value of your order. It does not receive your card details, your name or your email address. Meta may also use this information to improve its own services; see Meta's Privacy Policy. If you press Reject, or make no choice, the Meta Pixel is not loaded and nothing is sent to Meta. We do not use it in the members area.

The legal basis is your consent (UK PECR and UK GDPR Article 6(1)(a)). You can change your choice at any time with Cookie settings (also in the footer of every public page). Withdrawing consent stops the Pixel and removes its cookies from your browser.

Your data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Payment data never passes through our servers. We take reasonable technical and organisational measures to protect your data.

For any privacy questions: vasil@skipthegym.fit