The purpose, legal basis, recipients and retention criteria should be clear at collection.
Applicable rights can include access, correction, deletion, restriction, portability and objection.
FitYourself does not use the AI planning experience to make solely automated decisions with legal or similarly significant effects.
Roles and scope
FitYourself acts as controller for platform accounts, directory administration, support, security and its own marketing. A marketplace seller is normally a separate controller for information it receives to fulfil an order or enquiry. Specific notices may explain any joint or processor role.
Information we use
- Identity, contact, account and authentication information
- Orders, payments status, refunds, delivery and support records
- Seller, converter, verification and business-claim evidence
- Projects, guides, forum or listing content submitted for publication
- Device, session, consent, security and diagnostic information
- Messages and evidence supplied to resolve a report or dispute
Purposes and legal bases
Depending on the activity and applicable regime, processing may be necessary to perform a contract, take requested pre-contract steps, comply with legal obligations, pursue proportionate legitimate interests such as security and service improvement, or act on consent for optional technologies and marketing. Consent can be withdrawn without affecting earlier lawful processing.
International transfers
Where personal data moves outside the UK or EEA, the transfer must use an applicable adequacy decision, approved contractual safeguard or another lawful mechanism. Additional technical and organisational safeguards may be used according to risk.
Retention
Retention is set by purpose rather than an indefinite default. Criteria include account activity, contract and warranty periods, tax and accounting law, fraud prevention, safety or recall needs, dispute limitation periods, consent status and the need to establish or defend legal claims. Data is deleted or anonymised when no longer required.
Your rights
Subject to applicable conditions and exceptions, you may request information, access, correction, deletion, restriction and portability, object to certain processing, withdraw consent and complain to a competent supervisory authority. Identity may be verified before a request is fulfilled.
- Direct marketing objections are honoured without a fee.
- Deletion is not absolute where retention is legally required or needed for claims.
- A response is normally provided within the legal period; complex requests may require a permitted extension.
Security and account responsibility
FitYourself uses access controls, encrypted transport, monitoring, backups and supplier controls appropriate to the service. No system is risk-free. Keep account credentials confidential, use available multi-factor protection and report suspected compromise promptly.
Children and public content
The commercial marketplace is not directed at children. Public project, guide and community content should not include unnecessary personal information, precise home locations, identity documents or information about children without a lawful basis and appropriate authority.
Official guidance
Primary sources for further reading. National rules and the specific contract can add requirements.
Continue with FitYourself
Keep support, business claims and build decisions connected to the right account and company record.