Privacy Policy

Go Grow Connect LTD ("we", "our", "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Connected fitness business management platform ("Service").

We are registered in England and Wales (Company Number: 16696746) and act as both a data controller and data processor depending on the context of data processing.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We use your personal information for the following purposes:

Under UK GDPR, we process your personal data based on the following legal bases:

• Contract Performance: Processing necessary to provide our services and fulfill our contractual obligations
• Legitimate Interests: Service improvement, security, fraud prevention, and analytics
• Consent: Marketing communications and optional features (withdrawable at any time)
• Legal Obligations: Compliance with financial, tax, and regulatory requirements
• Vital Interests: Emergency situations involving health and safety

We implement comprehensive security measures to protect your personal data:

• Encryption: Data encrypted in transit (TLS) and at rest
• Access Controls: Role-based access with multi-factor authentication
• Regular Security Audits: Ongoing monitoring and vulnerability assessments
• Secure Infrastructure: AWS and Vercel's enterprise-grade security
• Data Minimization: We collect only necessary information
• Staff Training: Regular privacy and security training for our team

While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of data transmitted over the internet.

We retain personal data only as long as necessary:

• Account Data: Until account deletion plus 30 days for backup recovery
• Payment Records: 7 years for tax and accounting purposes
• Health Data: As required by healthcare regulations or until consent withdrawal
• Analytics Data: 24 hours (automatically deleted by Vercel Analytics)
• Communication Records: 3 years for customer service purposes
• Legal Hold: Extended retention when required by legal proceedings

After retention periods expire, we securely delete or anonymize personal data.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Remove consent for consent-based processing

To exercise these rights, please contact us at info@gogrowconnect.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.

Your data may be processed outside the UK/EEA by our service providers (AWS, Stripe). These transfers are protected by:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection laws
• Service providers' compliance with international privacy frameworks
• Additional safeguards and encryption measures

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we discover we have collected such information, we will delete it immediately.

For gym memberships involving minors, parental consent and participation are required as determined by individual gym policies.

Our Service uses minimal cookies and tracking:

• Essential Cookies: Required for authentication and security
• Preference Cookies: Remember your settings (theme, language)
• No Tracking Cookies: We do not use third-party tracking cookies
• Analytics: Vercel Analytics operates without cookies

You can control cookies through your browser settings, though disabling essential cookies may affect Service functionality.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will:

• Post the updated policy on our website with a new "Last updated" date
• Notify you by email for material changes
• Provide notice through our Service interface
• Maintain previous versions for reference

Continued use of our Service after updates constitutes acceptance of the revised Privacy Policy.

For any questions about this Privacy Policy or our data practices, please contact us:

You can also contact us through our contact form for privacy-related inquiries.

Information Commissioner's Office (ICO)
If you have concerns about our data handling that we cannot resolve, you can contact the UK data protection authority: