PRIVACY POLICY

SkipTheGym is operated by Vasil Shimbof, trading as SkipTheGym. Our website is skipthegym.fit. For any privacy-related questions, contact us at vasiltraktor89@gmail.com.

We collect only what we need to deliver and improve the service:

• Email address — when you purchase, to create your account and send your access link.
• Payment data — handled entirely by Stripe. We never see or store your card details.
• Progress data — which videos you have completed, stored against your account.
• Usage data — standard web server logs (IP address, browser type, pages visited) for security and performance.

• To create and manage your account
• To deliver the program you purchased
• To send transactional emails (account setup, password reset)
• To track and display your training progress
• To comply with legal obligations

We do not sell your data. We do not send marketing emails without your consent.

We process your data under the following lawful bases:

• Contract performance — processing your purchase and giving you access to the program.
• Legitimate interests — security, fraud prevention, improving the service.
• Legal obligation — maintaining records as required by UK law.

We use the following trusted third parties to operate the service:

• Stripe — payment processing. stripe.com/privacy
• Supabase — database and authentication. Data stored in EU data centres.
• Resend — transactional email delivery.
• Bunny.net — video hosting and delivery.
• Vercel — website hosting. vercel.com/legal/privacy-policy

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are legally required to retain it (e.g. financial records for 6 years under UK law).

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability

To exercise any of these rights, email us at vasiltraktor89@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (UK Information Commissioner's Office).

We use only essential cookies required to keep you logged in (authentication session cookies). We do not use tracking or advertising cookies. No cookie consent banner is required for essential cookies under UK PECR.

Your data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Payment data never passes through our servers. We take reasonable technical and organisational measures to protect your data.

For any privacy questions: vasiltraktor89@gmail.com