Legal

Privacy policy

How the Gymciety marketing website handles information.

Draft — pending owner/legal review. This policy describes the marketing site's actual data flows, but the legal entity name, contact address, jurisdiction and effective date have not yet been finalised. It is not yet final legal advice.

Effective date: [pending owner/legal review]

Who operates this site: [pending owner/legal review] ("we", "us"), operator of Gymciety.

Scope

This policy covers the public Gymciety marketing website (this site) and the demo / pilot-interest / contact inquiry form. It does not cover a gym's use of the Gymciety admin panel or member portal, where a gym is the controller of its own members' data.

Public browsing

You can browse this site without submitting any personal information. We do not use marketing analytics, advertising pixels, session-replay, social embeds, or third-party trackers, and we load no external fonts, scripts, or content-delivery networks.

Essential cookies

We use only strictly-necessary cookies: a session cookie and a CSRF-protection token that keep the site and its forms working securely. These are not used for tracking or advertising. There are no third-party or marketing cookies, so there is nothing non-essential to consent to.

Demo & contact inquiries

If you submit the inquiry form, we collect what you provide — typically your name, business email, and optionally your gym name, phone, role, coarse size ranges, areas of interest, and a short message. We also store a one-way salted hash of your IP address and browser user-agent to help prevent spam. We never store your raw IP address or user-agent.

We use this information only to respond to you personally. A person reviews each message. Submitting the form creates no account, gym, or login, and we send no automated email, SMS, or other message — there is no external marketing automation in this phase.

What not to send

Please do not submit sensitive or production data through this form — no member or staff lists, files or CSVs, financial, payment, banking, medical, or login details. The form is designed to reject content that looks like ID, card, bank, credential, or medical information.

Retention

Inquiries are retained for about 24 months from submission and then automatically purged. You may ask us to delete your inquiry sooner.

Access & sharing

Inquiries are visible only to authorised Gymciety platform administrators. They are not shared with any gym (tenant), are not turned into a gym's CRM lead, and we do not sell submitted information. We do not use third-party marketing or enrichment services on this data.

Tenant & member data

Data that gyms and their members enter into the Gymciety admin panel and member portal is separate from this marketing site and is governed by the agreement between Gymciety and each gym. This marketing site does not read or expose any tenant or member records.

Your choices & contact

To ask about, correct, or delete an inquiry you submitted, contact hello@gymciety.io. Because the specifics of data-subject rights depend on your location and the finalised legal terms, this section will be completed as part of owner/legal review.

Changes

We may update this policy; the effective date above will change when we do.