Clear about your data.

1. Who this notice covers

GYMXP LTD is the controller of information collected through this website and waitlist. Contact us at privacy@thegymxp.com.

This notice currently covers the public website, waitlist, founder-profile questions and related emails. The GYMXP app is still in active development. Before public app use begins, we will publish additional information covering account, training and any health-related data used by the product.

2. Information we collect

• Waitlist details: first name, email address, platform preference, consent and acceptance records.
• Optional founder profile: training interests, experience and any answer you choose to provide.
• Communications: messages, requests and email engagement information supplied by our email provider.
• Visit context: page views and, when present, a referring website and campaign labels such as source, medium and campaign name.
• Technical information: routine server and security logs and the technical signals needed to prevent automated abuse.

3. How and why we use it

We will not use your information for an incompatible purpose without explaining the change and identifying a valid legal basis.

4. Who receives it

We use Cloudflare for website delivery, security and privacy-focused traffic measurement; Supabase for secure form and operations storage; Resend for email delivery; and Kit for waitlist subscription synchronisation.

Providers may only use information to provide the services we request. We do not sell or rent your personal information.

5. International transfers

Some suppliers may process information outside the United Kingdom, including in the United States. Where required, we rely on recognised safeguards such as an adequacy decision, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or approved contractual clauses.

6. How long we keep it

We keep waitlist information while you remain subscribed and while it is reasonably needed for testing or launch administration. We periodically review inactive records and normally delete or anonymise them within 24 months where there has been no meaningful interaction.

If you unsubscribe, we may retain the minimum information needed to honour that choice and meet legal or security obligations.

7. Your rights

Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase, restrict or object to use of your information, receive certain information in a portable form and withdraw consent.

Email us to exercise a right. We may need to confirm your identity, and we normally respond within one month.

8. Cookies, measurement and automated decisions

We use Cloudflare Web Analytics to understand page views, visits and website performance without placing analytics cookies or building advertising profiles. Cloudflare states that this service does not collect or use visitors’ personal data for analytics.

If you arrive through a campaign link, the supplied campaign labels, referring hostname and first landing path are held in session storage for that browser tab and attached to a form only if you choose to submit one. This helps us understand which launch activity led to genuine interest without creating a persistent cross-site profile.

Cloudflare Turnstile may process short-lived technical signals to distinguish genuine users from automated abuse. Essential hosting and security systems may also create technical logs. We do not use advertising cookies.

The personalised founder-card preview is a visual interaction only. We do not make legal or similarly significant decisions about you solely through automated processing.

9. Security and age

We use proportionate technical and organisational safeguards, limit access and choose providers with appropriate protections. No online service can promise absolute security.

The waitlist is intended for people aged 16 or over. Anyone under 18 should have permission from a parent or guardian before joining.

10. Contact and complaints

For privacy questions, requests or concerns, email privacy@thegymxp.com. You also have the right to complain to the Information Commissioner’s Office.

We may update this notice as GYMXP develops. Material changes will be highlighted on this page or communicated where appropriate.