Privacy Policy
Who controls your data
BB Gym Club (independent project) operates bbgym.club and is the data controller. Contact us through the public Contact page for privacy requests.
Data we process
The personal details you provide are your name and email address, plus any information you choose to type in a contact message. To operate your account, we also keep service data such as language, favourites, subscription status, workout results and progress. Guest workout history is linked to a random identifier. Standard technical data may be processed where necessary to secure and operate the service.
Why we process it
We use data to provide accounts, trainers, saved progress, security, fraud prevention, support, subscriptions and service diagnostics. Service delivery and requested payments rely on performance of a contract; security and product operation rely on legitimate interests; advertising and optional analytics rely on consent; billing records may be retained to meet legal obligations.
Service providers and transfers
We use service providers for hosting, transactional email, subscription payments and optional analytics. Stripe processes payment details; BB Gym does not store full card data. After analytics consent, Google Analytics may process device, visit and interaction data. Advertising providers such as Google may process advertising data only where required consent has been given. Providers may process data outside your country under applicable transfer safeguards.
Retention
Account and workout data is kept while the account is active or until deletion is requested, subject to backups and legal obligations. One-time login tokens expire quickly. Contact and security events are retained only as reasonably needed for support, abuse prevention and operations. Billing records may be retained for the period required by tax and accounting law.
Your rights
Depending on your location, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent at any time through Privacy settings. You may also complain to your local data protection authority. Use the Contact page to exercise these rights.
Children
The service is not directed to children under 16. A parent or guardian should contact us if a child submitted personal data.
Security and changes
We use HTTPS, signed HTTP-only authentication cookies and hashed one-time tokens. No system is completely secure. Material policy changes will update the date and may request consent again.