Privacy Policy

The EvolveFit365 app and the website at evolvefit365.com are operated by EvolveFit365 Ltd ("we", "us", "our"), a company registered in England and Wales (company number 17165943). Our registered office is 31 Hampton Road, London, E4 8NH. You can contact us at hello@evolvefit365.com.

We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. EvolveFit365 Ltd is registered with the Information Commissioner's Office, registration reference C1959278.

This policy explains how we handle your data when you use the EvolveFit365 app and evolvefit365.com, including any subscription you take out with us. If you purchased the SHRED-6 programme separately at shred-6.com, that purchase is also covered by the SHRED-6 privacy policy on that website.

When you use the EvolveFit365 app or evolvefit365.com, we may collect:

• Your name and email address
• Your account login details
• Details of the programmes and subscriptions you have access to
• Payment information for any subscription you purchase on evolvefit365.com (processed securely by our payment provider; we do not store your card details)
• Communications you send to us
• Technical data, including IP address, browser or device type, and app version
• Usage data about how you interact with the app and website
• Fitness and body data you enter into the app, such as fitness assessment results, body measurements, workout and activity logging, and the metrics we calculate from these (including your Optimality Score and Body Age)

We use your personal data to:

• Set up and manage your account and give you access to your programmes
• Provide and manage any subscription you take out
• Provide customer support and respond to your enquiries
• Send you service and programme communications, such as challenge reminders, updates, and (where relevant) subscription renewal reminders
• Send marketing emails if you have opted in, which you can unsubscribe from at any time
• Comply with our legal obligations
• Improve the app and our services using aggregated, anonymised analytics data

Some of the information you enter into the app, such as body measurements and fitness assessment results, may be treated as data concerning your health, which is a special category of data under UK GDPR. Where this applies, we rely on your explicit consent to process it, which you give when you choose to enter this information into the app. You can withdraw this consent at any time by contacting us, although this will limit the app's ability to track and personalise your progress. We do not share your fitness or body data with advertisers or with any third party for marketing purposes.

The legal bases we rely on are: performance of a contract (providing your programmes and subscription), legitimate interests (improving our services), legal obligation (compliance), and consent (marketing communications, non-essential cookies, and special category health data).

We do not sell your personal data. We share it only with trusted third parties who help us operate the app and our services:

• Our app platform provider, which hosts and runs the EvolveFit365 app and stores your account and app data.
• Payment processors, which handle subscription payments made on evolvefit365.com securely. We do not store your card details.
• Our email provider, which we use to send account, programme, and (where you have opted in) marketing communications.
• Analytics providers, which help us understand how the app and website are used, using aggregated and anonymised data.

All third-party processors are required to handle your data securely and in accordance with UK GDPR. Purchases of the one-off SHRED-6 programme made on shred-6.com are handled under the separate SHRED-6 privacy policy and involve that store's own providers.

Some of our third-party providers may be based outside the UK or the European Economic Area. Where this is the case, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses, to protect your data.

We retain your data only for as long as necessary:

• Subscription and transaction records: 7 years (HMRC legal requirement)
• Account and app data, including fitness and body data: for the duration of your account plus 2 years
• Marketing preferences: until you unsubscribe or withdraw consent
• Analytics data: as set by the relevant provider (typically up to 26 months)

The app and website use cookies and similar technologies for the following purposes:

• Essential cookies: required for the app and website to function and to keep you signed in. These cannot be disabled.
• Analytics cookies: used to collect anonymised data about how the app and website are used. These are only set with your consent.

You can manage your preferences via the consent banner shown when you first visit, or by adjusting your browser or device settings at any time.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at hello@evolvefit365.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take reasonable technical and organisational measures to protect your personal data against accidental loss, unauthorised access, and misuse. The app and website operate over secure connections, and payment processing is handled by PCI-compliant providers. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

The EvolveFit365 app and our programmes are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us at hello@evolvefit365.com and we will delete it.

We may update this Privacy Policy from time to time. The date at the top of this page will reflect any changes. Where changes are significant, we will notify you by email or through the app. Continued use of the app or website after changes constitutes acceptance of the updated policy.