PRIVACY POLICY
Effective date:30/11/25
1. Data Controller
FitFusion Gear
Email: fergusonmatthew030@gmail.com
Phone: 07368674785
We are the data controller responsible for determining the purpose and means of processing your personal data.
2. Personal Data We Collect
We may collect and process the following categories of personal data when you use our website or make a purchase:
a. Information You Provide
-
Identity Data: Name, surname
-
Contact Data: Email address, phone number, billing/shipping address
-
Payment Data: Limited payment information (handled securely by third-party processors; we do not store full card details)
-
Order Information: Products ordered, order history
b. Automatically Collected Data
When you use our website, we automatically collect:
-
IP address
-
Device information
-
Browser type
-
Referring URLs
-
Pages viewed
-
Usage data
c. Cookies and Tracking Technologies
We use cookies and similar technologies to:
-
Enable website functionality
-
Improve site performance
-
Personalise user experience
-
Facilitate analytics and marketing
You can manage cookie preferences via your browser settings.
3. How We Use Your Personal Data
We process personal data for the following purposes:
-
To process and fulfil your orders
-
To send order confirmations, shipping updates, and support messages
-
To provide customer service
-
To manage your account (if created)
-
To improve website functionality and user experience
-
To detect and prevent fraud or unauthorised transactions
-
To comply with legal obligations
Our lawful bases for processing include: contractual necessity, legitimate interests, legal compliance, and your consent (when applicable).
4. Third-Party Service Providers
We may share your personal data with trusted third parties who help us operate our business:
a. Website Platform
-
Wix.com Ltd. – Hosts our website and provides essential site functionality.
b. Payment Processors
-
PayPal – Handles secure payment processing
-
Credit/Debit Card Processors – Managed through Wix's integrated providers
These providers process information according to their own privacy policies.
c. Dropshipping Suppliers
To ship your order directly to you, we may share:
-
Your name
-
Shipping address
-
Contact details
Suppliers use this information solely for fulfilling your order.
d. Analytics and Marketing Tools
-
Tools that help us understand website performance and optimise marketing (e.g., cookies, tracking pixels)
All third parties are required to safeguard your data under GD PR-compliant agreements.
5. International Data Transfers
Because we use service providers such as Wix (Israel) and certain suppliers located outside the EU/UK, your personal data may be transferred internationally.
When data is transferred outside the EU/UK, we ensure appropriate safeguards such as:
-
Adequacy decisions
-
Standard Contractual Clauses (SCCs)
-
Other lawful mechanisms under GDPR
-
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
-
Legal, tax, and accounting requirements
-
Order processing and customer support
Retention periods typically include:
-
Order records: up to 7 years
-
Account information: until you request deletion
-
Marketing data: until you withdraw consent
-
7. Your Rights Under the GDPR
-
As an EU or UK resident, you have the right to:
-
Access your personal data
-
Rectify incorrect or incomplete data
-
Erase your personal data (“right to be forgotten”)
-
Restrict processing of your data
-
Object to processing based on legitimate interests
-
Data portability – receive your data in a structured format
-
Withdraw consent at any time
-
Not be subject to automated decision-making without human involvement
To exercise any of these rights, contact us at fergusonmatthew030@gmail.com.
8. Complaints to a Supervisory Authority
If you believe your data has been processed unlawfully, you have the right to lodge a complaint with your local supervisory authority:
EU:
Find your Data Protection Authority:
https://edpb.europa.eu/about-edpb/about-edpb/members_en
UK:
Information Commissioner’s Office (ICO)
https://ico.org.uk
We encourage you to contact us first so we can address your concerns.
9. Security of Your Information
We implement appropriate technical and organisational measures to protect your personal data, including:
-
Encrypted website connections (HTTPS)
-
Secure payment processing through verified providers
-
Restricted access to data
-
Monitoring for vulnerabilities
Despite these safeguards, no online system is 100% secure.
10. Changes to This Privacy Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The updated version will always be posted on this page with a revised “Last Updated” date.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your personal data, contact us at:
📧 Email: fergusonmatthew030@gmail.com
📞 Phone: 07368674785