GYMHOOD
0

Privacy policy

Last updated: 27 September 2026

Who is responsible for your information

Inkon LTD, trading as GYMHOOD, is the controller for the personal information we use to run GYMHOOD and The Forge. We are registered in England and Wales, company number 16237982, at 14 Stork Close, Thornton-Cleveleys, FY5 3FB, United Kingdom. For privacy questions or requests, email contact@gymhood.co.uk.

Information we use and why

  • Shopping and orders: your contact and delivery details, selected products, order and payment status, returns and support correspondence. We use these to take steps at your request and perform our contract with you. Payment providers process payment credentials; do not send card details to us by email.
  • The Forge: the first name and surname initial you enter, printed initials, design choices, creation date, design identifiers and the information needed to save and resume a design. We use these to provide the design experience you request. Draft access credentials and local basket information can be stored in your browser; server-side records allow the experience to resume.
  • Support and enquiries: the details you send through forms or email. We use these to answer you and manage requests, on the basis of our contract with you or our legitimate interest in providing customer service.
  • Marketing: your email address, signup purpose and subscription preferences. We use consent where required to send the emails you request, including GYMHOOD X launch news. You can unsubscribe using the link in an email or by contacting us. Service messages about orders are separate from marketing.
  • Website use and security: device, browser, IP address, usage and transaction information. Necessary processing supports shopping, fraud prevention, security and reliable operation, on the basis of our legitimate interests and relevant legal obligations. Optional analytics and advertising technologies use consent where required.
  • Business records: information needed for accounting, tax, disputes and other legal requirements is retained and used to meet those obligations or establish, exercise or defend legal claims.

We receive information directly from you, automatically as you use our services, and from service providers involved in a transaction or website interaction. If you do not provide information required for an order or design function, we may be unable to provide that function.

Design links and QR pages

A published design or story link, including a QR destination, may be viewable by anyone who has the link and may show design choices and personalisation. Do not put confidential information into content intended to be shared. Asking search engines not to index a page does not make it private. Draft access credentials should be kept private. Contact us if you need help with a saved design or removal request.

Service providers and recipients

We share relevant information with the providers needed to operate the service:

  • Shopify hosts the store and supports checkout, customer accounts, forms and store operations. Payment services and delivery providers receive the information necessary for payment and delivery.
  • Printful receives relevant order, delivery and print information to produce and fulfil products.
  • Cloudflare provides hosting, security, database and file storage for The Forge.
  • Google Analytics and Google & YouTube services support website measurement and connected marketing features, subject to applicable consent choices.
  • Email and other technical providers support communications and operations. Professional advisers and authorities may receive information where required for legal, accounting or regulatory purposes.

Shopify also processes some information for its own purposes, including through enhanced features that can use interactions across Shopify merchants. Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for the rights Shopify handles directly. External social platforms have their own privacy notices when you follow our links.

Cookies and browser storage

Necessary cookies and storage support features such as the basket, checkout, security and resuming a requested Forge draft. Optional analytics, personalisation and marketing technologies are controlled through the store's consent interface where applicable. Use Cookie preferences in the store footer to review or change your choice. Withdrawing consent does not affect processing that was lawful before withdrawal.

Clearing browser storage can remove local Forge resume credentials and basket information; it does not automatically erase server-side records. Contact us to request deletion of personal information we hold.

Retention and international processing

We keep information for as long as reasonably needed for its purpose: providing and supporting orders or saved designs, maintaining your requested subscription, meeting record-keeping obligations and handling disputes. The period depends on the record and applicable obligations. Saved drafts do not currently have a guaranteed automatic deletion date. We assess deletion requests and explain where a legal obligation requires us to retain particular information.

Our providers can process information outside the UK. Where a restricted international transfer takes place, applicable safeguards can include an adequacy decision or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum. Contact us for information about relevant safeguards.

Your rights

Subject to the conditions and exceptions in data-protection law, you can request access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests and to direct marketing, and withdraw consent where processing relies on it. We may need to verify your identity before acting. We normally respond within one month; if the law permits an extension, we will explain it.

Email contact@gymhood.co.uk to exercise your rights or raise a concern. You can also complain to the Information Commissioner's Office, the UK data-protection regulator.

Security, children and updates

We use appropriate measures to protect personal information, but no system is risk-free. Keep account and design access details private. The store and Forge are not directed at children; contact us if a child has supplied personal information and you want us to review its removal.

We update this notice when our processing changes, show the revision date here and provide additional notice where required.