PRIVACY POLICY

Effective Date: 30/10/25
Last Updated: 30/10/25

1. Introduction

Welcome to Fitness Fusion

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website and purchase products from us.

Our website is built on Wix and operated from the United Kingdom, but we sell fitness products to customers within the European Union via dropshipping.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For EU-based customers, we also comply with the EU GDPR where applicable.

2. Data Controller

The data controller responsible for your personal data is:

Fitness Fusion
United Kingdom
Contact: via our website contact form

3. Personal Data We Collect

When you interact with our website, we may collect and process the following personal data:

a. Information You Provide Directly

Name
Email address
Shipping and billing address
Payment details (processed securely through third-party providers)
Order details and purchase history
Any messages or inquiries you send through our contact form

b. Automatically Collected Data

When you visit our website, certain data is automatically collected, including:

IP address
Browser type and version
Device type and operating system
Referring website and pages viewed
Time spent on pages and navigation data

This data helps us analyze website performance and improve your experience.

4. Use of Cookies

Our website uses cookies and similar technologies to enhance your browsing experience.
Cookies may be used to:

Remember items in your cart
Improve website functionality and analytics
Enable secure payment processing

You can manage or disable cookies through your browser settings. For more details, please refer to our Cookie Policy (if applicable).

5. How We Use Your Data

We process your personal data for the following purposes:

To process and fulfill your orders
To communicate order updates and customer support
To manage payments and refunds
To comply with legal and tax obligations
To improve our products and website functionality
To detect and prevent fraud or unauthorized activity

6. Third-Party Service Providers

We share limited personal data with trusted third parties who assist us in operating our business:

Wix – our website hosting platform, which stores certain customer and transaction data securely.
Credit card processors – to process customer payments securely.
Modaylist – a third-party dropshipping supplier responsible for product creation, fulfillment, and shipping. Customer order details (such as name, address, and ordered products) are shared only as necessary for delivery.

Each provider processes personal data in compliance with applicable data protection laws.

7. Legal Basis for Processing (GDPR Compliance)

We process your personal data under the following lawful bases under the UK GDPR and, where applicable, the EU GDPR:

Contractual necessity – to fulfill your purchase.
Legal obligation – for tax and accounting compliance.
Legitimate interests – to operate and improve our services.
Consent – for optional marketing communications.

8. Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy or as required by law.

Order and transaction data are typically retained for up to 6 years for accounting and tax purposes.
Marketing data is retained until you withdraw consent.

When data is no longer needed, it will be securely deleted or anonymized.

9. International Data Transfers

Your personal data may be transferred outside the United Kingdom and the European Economic Area (EEA).
Where transfers occur, we ensure adequate protection through:

The UK International Data Transfer Addendum (IDTA) or Standard Contractual Clauses; or
Adequacy regulations recognised by the UK Government.

Transfers to the EEA are permitted under current UK adequacy decisions.

10. Your Rights Under the GDPR

Under the UK GDPR (and the EU GDPR, where applicable), you have the following rights:

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
To exercise these rights, please contact us via the website contact form.

11. Right to Lodge a Complaint

If you believe your data has been mishandled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Telephone: +44 (0)303 123 1113

If you reside in the EU, you may also lodge a complaint with your local supervisory authority.

12. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
This includes:

Encrypted connections (HTTPS)
Secure payment gateways (Credit card processors)
Limited access to personal data by authorized personnel only

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any significant changes will be posted on this page with an updated “Last Updated” date.

14. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us through our website contact form.