+44 161 524 3548

[email protected]

Unit 5a & 5b Moss Lane, Byley, Middlewhich, United Kingdom, CW10 9NG

Privacy Policy

‌Effective Date: 9 October 2026‌

Welcome to the privacy policy of GYM SETS LTD, the operator of the e-commerce website www.gymsetsltd.com. This document is designed to inform you fully about how we collect, use, store, disclose and protect your personal data when you interact with our website, purchase our premium compact home and office fitness products, or engage with our services in any capacity. This policy is drafted in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025, to meet all legal transparency and data protection requirements that apply to all UK organisations processing personal data.

Our registered details are as follows:

  • Company Name: GYM SETS LTD
  • Registered Address: Unit 5a & 5b Moss Lane, Byley, Middlewhich, United Kingdom, CW10 9NG
  • Contact Telephone: +44 161 524 3548
  • Contact Email: [email protected]

1. Introduction

At GYM SETS LTD, we are a team of dedicated fitness professionals and equipment enthusiasts based in the United Kingdom, committed to delivering high-quality, durable, compact fitness tools perfectly suited for home, office, and small-space training scenarios. We take the protection of your personal data extremely seriously. This privacy policy sets out clearly all the terms governing our processing of your personal data, to ensure you have full visibility over how your information is handled, in line with the core UK GDPR principles of lawfulness, fairness and transparency.

This policy applies to all visitors, registered users, customers and any other individuals who access or interact with www.gymsetsltd.com. By browsing our website, creating an account, placing an order, signing up for our newsletter, or submitting any personal information to us, you acknowledge that you have read, understood and agree to the practices described in this policy. If you do not agree with any part of this policy, please refrain from using our website and submitting your personal data to us.

2. What Personal Data We Collect

We only collect the minimum amount of personal data that is strictly necessary to deliver our e-commerce services to you, in full alignment with the UK GDPR data minimisation principle. The categories of personal data we may collect include, but are not limited to:

  • ‌Identity Data‌: Your full name, username, and any other identifier you provide when creating an account or interacting with our customer support team.
  • ‌Contact Data‌: Your billing address, shipping address, email address, and contact telephone number, which we use to process your orders and communicate with you about your purchases.
  • ‌Transaction Data‌: Details of the products you have ordered, your payment records, purchase history, and information related to refunds, returns and order adjustments. This includes records of your interactions with our return policy, where we only accept unopened, unused items within 30 days for a full product refund.
  • ‌Technical Data‌: Your IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and device information collected automatically when you access our website through cookies and similar tracking technologies.
  • ‌Usage Data‌: Information about how you navigate our website, which product pages you view, search terms you enter, links you click, time spent on specific pages, and other actions you take while browsing our selection of fitness products including our Acupressure Massage Ball Set, Adjustable Length Jump Rope, Adjustable Resistance Bands, Bamboo Massage Ball, and other home workout gear.
  • ‌Marketing and Communications Data‌: Your preferences for receiving our promotional emails, newsletter updates about new fresh gear launches, fitness tips, and information about exclusive offers.

We will never collect any special categories of personal data (such as information related to your race, religion, health conditions or biometric data) unless you voluntarily provide it to us, and we will never process such data without establishing a valid lawful basis as required under UK GDPR.

3. How We Collect Your Personal Data

We collect your personal data through two primary channels:

  1. ‌Direct Information You Provide to Us‌: We collect data that you actively submit when you fill in forms on our website, create a user account, place an order, contact our customer support team with queries about delivery, product usage or returns, subscribe to our marketing newsletter, or leave a product review on our site.
  2. ‌Automated Collection Technologies‌: As is standard for almost every business website, we use standard tools including contact forms, booking features, newsletter sign-up widgets, analytics tools, and chat support functions to automatically collect technical and usage data when you visit our website. This data helps us optimize our site performance and deliver a better, more user-friendly shopping experience for you.

4. How We Use Your Personal Data

We will only ever process your personal data for specified, explicit, legitimate purposes that you have been notified of in advance, and we will never process your data in a way that is incompatible with these original purposes. All our processing activities are backed by one or more valid lawful bases under UK GDPR, including performance of a contract with you, compliance with our legal obligations, our legitimate business interests that do not override your data protection rights, and where applicable, your explicit consent.

The specific purposes for which we use your personal data are as follows:

  • To process, fulfill and deliver your orders for fitness equipment, including managing payment processing, arranging shipping, and sending you order tracking updates. For local UK orders, we will use your shipping details to ensure our standard 3 to 5 working day urban delivery service is completed smoothly.
  • To manage our contractual relationship with you, including processing your eligible 30-day returns for unopened products, handling refunds, and notifying you about changes to our service terms, website functionality or policy updates.
  • To provide you with responsive customer support, answering your queries about adjusting the tension of our resistance bands, safe usage guidance for beginners, information about our non-slip products that do not leave marks on wooden floors, or any other questions raised in our Frequently Asked Questions section.
  • To improve our website, products and user experience, using usage data to understand which of our fitness items are most popular, identify navigation issues, and optimize our product listings to make it easier for you to find the compact workout tools that fit your home, office or small-space training needs.
  • To send you optional marketing communications, including updates on new fresh gear launches, exclusive promotions, home workout tips, and fitness content, but only when you have given us explicit consent to receive these messages. You can opt out of marketing communications at any time, easily and free of charge, by clicking the unsubscribe link in any of our marketing emails or sending a request to our contact email.
  • To comply with our legal obligations, including maintaining accurate financial records for tax purposes, cooperating with regulatory authorities including the UK Information Commissioner’s Office (ICO) when required, and fulfilling all mandatory requirements under UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
  • To protect the security and integrity of our website, prevent fraudulent transactions, unauthorized access, cyberattacks and other illegal activities that could harm our business, our customers or our website visitors.

We will never share your personal data with any third parties for their own independent marketing purposes, and we will only disclose your data to third parties when it is strictly necessary to deliver our services to you.

5. Data Recipients of Your Personal Data

We may share your personal data with carefully selected third parties who act as our data processors on our behalf, under strict contractual agreements that require them to uphold the same high standards of data protection as required under UK GDPR. These third parties include:

  • Payment processing providers, who handle secure payment transactions for your orders, and are fully PCI DSS compliant to protect your payment record information.
  • Shipping and logistics partners, who use your shipping address and contact details to deliver your ordered fitness products to your designated location across the United Kingdom.
  • IT service providers, who host our website, maintain our website security systems, and provide analytics tools to help us understand website usage patterns.
  • Professional advisors including our accountants, lawyers and auditors, who we may share necessary data with to comply with our legal, accounting and regulatory obligations.
  • Regulatory authorities such as the ICO, where we are required by law to disclose your personal data as part of a formal investigation, to meet our legal compliance requirements.

All our third-party data processors are required to implement strict technical and organizational security measures to protect your personal data, and we will remain fully accountable for any processing they carry out on our behalf.

6. Data Retention Period

We will not keep your personal data for any longer than is strictly necessary to fulfill the exact purposes for which it was originally collected, in full compliance with the UK GDPR storage limitation principle. Typically, we will retain different categories of data for the following standard periods:

  • Order and transaction data: We retain this information for 7 years after your order is completed, to meet UK tax law requirements, resolve any potential post-order disputes, and handle any product warranty related queries.
  • User account data: We retain your account data for as long as you maintain an active account with us, and for a reasonable period after you request to delete your account, to resolve any outstanding order or return related matters.
  • Marketing preference data: We retain records of your marketing consent preference indefinitely until you request that we delete this information, so that we can respect your choice to opt in or out of promotional communications.
  • Website usage and analytics data: We anonymize or delete this data after 12 months, once we have completed our analysis to improve our website performance.

After the applicable retention period expires, we will securely delete or anonymize your personal data completely, ensuring that it can no longer be linked back to you as an identifiable individual.

7. Your Data Subject Rights Under UK GDPR

As a data subject residing in the United Kingdom, you hold a full set of legally enforceable rights over your personal data under UK GDPR and the Data Protection Act 2018. These rights include:

  1. ‌Right of Access‌: You have the right to request a free copy of all the personal data we hold about you, along with a full explanation of how we process that data, in line with the ICO’s transparency guidance.
  2. ‌Right to Rectification‌: If you find that any of the personal data we hold about you is inaccurate, incomplete or out of date, you have the right to contact us and request that we correct that information promptly, at no cost to you.
  3. ‌Right to Erasure (Right to be Forgotten)‌: Under specific circumstances, such as when your personal data is no longer necessary for the original purposes we collected it for, you have the right to request that we delete all your personal data from our systems, and notify any relevant third-party processors of your erasure request.
  4. ‌Right to Restriction of Processing‌: You have the right to request that we temporarily pause the processing of your personal data, for example while we verify the accuracy of your data or assess the legitimacy of your objection to our processing activities.
  5. ‌Right to Data Portability‌: You have the right to request that we provide you, or a third party you nominate, with your personal data in a structured, commonly used, machine-readable format, so that you can easily transfer that data between different service providers.
  6. ‌Right to Object‌: You have the right to object to our processing of your personal data at any time, on grounds related to your specific situation, when that processing is based on our legitimate business interests. You also have an absolute right to object to us processing your personal data for direct marketing purposes, at any time and for any reason.
  7. ‌Right to Withdraw Consent‌: Where you have previously given us your explicit consent to process your personal data for specific purposes, you have the right to withdraw that consent at any time, without affecting the lawfulness of any processing that we carried out before your withdrawal.

You can exercise any of these rights at any time by sending a clear written request to our contact email at [email protected]. We will respond to your request within one calendar month, as required by UK law. If for any reason we are unable to fulfill your request within that timeframe, we will contact you to explain the delay and the expected timeline for resolution, which will not exceed a maximum of three months in total.

If you are not satisfied with how we have handled your personal data or your rights request, you have the explicit right to lodge a complaint directly with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulatory authority.

8. Data Security Measures

We take appropriate, state-of-the-art technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, destruction, disclosure or misuse, as required by UK GDPR. All sensitive payment transaction data is encrypted using industry-standard SSL technology when it is transmitted between your browser and our servers. Our internal systems are protected by regular security updates, firewalls and password protection protocols, and only a strictly limited number of authorized staff who need access to your data to perform their duties have permission to view your personal information.

All of our team members complete mandatory annual data protection training to ensure they understand their responsibilities for protecting your data. In the unlikely event that we discover a personal data breach that poses a high risk to your rights and freedoms, we will notify the ICO within 72 hours of becoming aware of the breach, and we will notify you directly without undue delay if the breach is likely to result in a severe adverse impact on you.

9. Cross-Border Data Transfers

As a UK-based e-commerce business, we primarily store and process all your personal data on servers located within the United Kingdom. In the rare event that we ever need to transfer your personal data outside of the UK and the European Economic Area (EEA), we will ensure that appropriate safeguard measures are put in place to protect your data, in full compliance with UK GDPR cross-border transfer rules, to guarantee that your data protection rights are not undermined.

10. Children’s Data Protection

Our website and e-commerce services are intended for use by adults, and we do not knowingly collect any personal data from children under the age of 13. If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will immediately take steps to delete that information completely from all our systems. If you believe we may hold any data belonging to a child, please contact us immediately using our published contact details.

11. Changes to This Privacy Policy

We may occasionally update and revise this privacy policy to reflect changes to our business operations, new legal requirements introduced by updates to UK data protection legislation, or guidance issued by the ICO. When we make material changes to this policy, we will update the effective date at the top of this document, and we will publish a clear notification on the homepage of www.gymsetsltd.com to alert all visitors and customers about the changes. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.

12. Contact Information

If you have any questions, comments, concerns, or requests related to this privacy policy, our data processing practices, or your personal data rights, please do not hesitate to contact us using any of the following methods:

  • Postal Address: Unit 5a & 5b Moss Lane, Byley, Middlewhich, United Kingdom, CW10 9NG
  • Telephone: +44 161 524 3548
  • Email: [email protected]

We will respond to your enquiry as quickly as possible, to ensure all your data protection related concerns are addressed fully and transparently.