Privacy Policy

Last updated: 4 August 2026

This Privacy Policy explains how Above Fitness ("we", "us", "our") collects, uses and protects your personal information when you visit abovefitness.co.uk, create an account, contact us, or place an order. This page is maintained by Above Fitness and applies to our website and online store only.

1. Information we collect

We only collect information we need to run our business:

• Contact enquiries: your name, email address, the product you are interested in, and your message.
• Account details: first name, last name (optional), email address, and a securely hashed password.
• Order details: name, email, phone number, delivery address (address, city, postcode), items ordered, delivery or pick-up choice, payment option, and order totals.
• Technical data: basic information your browser sends automatically, such as IP address and device or browser type, used for security and to keep the site working.

We do not knowingly collect information from children, and we do not collect special category data.

2. How we use your information

• To process and fulfil your order, arrange delivery or pick-up, and take payment.
• To send you order confirmations, invoices and updates about your purchase.
• To reply to enquiries you send through our contact form or by email.
• To manage your account, saved checkout details and order history.
• To protect the site against fraud and abuse, and to meet our legal and accounting obligations.

We rely on performance of a contract (to fulfil your order), our legitimate interests (to run and secure our business and answer your enquiries), your consent where you have given it, and legal obligation (for tax and accounting records).

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

3. Payments

Card payments are handled by Stripe, our payment provider. Your card details are entered directly into Stripe's secure checkout and are never stored on our own systems. We receive only a payment confirmation and the order reference. Stripe processes your payment data as its own controller under Stripe's privacy policy.

4. Service providers we use

We share information only with the providers needed to operate this site:

• Lovable - our website hosting, database, authentication and email-sending platform. Account, order and enquiry data is stored on Lovable's managed infrastructure.
• Stripe - payment processing.
• Delivery partners - your name, address and phone number where needed to deliver your order.

These providers may process data outside the UK. Where that happens, transfers are covered by appropriate safeguards such as UK/EU approved contractual clauses. We may also disclose information where required by law.

5. Security

Access to customer data is restricted to authorised Above Fitness administrators. Data is transmitted over encrypted connections (HTTPS), passwords are stored hashed by our authentication provider, and database access is controlled by row-level security rules so that customers can only see their own records. No online service can be guaranteed completely secure, but we review our setup regularly.

6. Cookies

We use only the cookies and local browser storage needed for the site to function - for example to keep you signed in and to remember the contents of your basket. We do not use advertising cookies. You can clear or block cookies in your browser, but some features (sign-in and checkout) will not work.

7. How long we keep your data

• Order records: retained for up to 6 years to meet UK tax and accounting requirements.
• Account details: kept while your account is active, and deleted on request.
• Contact enquiries: kept for up to 24 months so we can follow up on your query.

8. Your rights

Under UK data protection law you have the right to access a copy of your data, to have inaccurate data corrected, to request deletion, to restrict or object to certain processing, to data portability, and to withdraw consent where processing is based on consent. You can also edit most of your details yourself in your account area at any time.

To make a request, email abovefitness.info@gmail.com. We will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ico.org.uk).

9. Changes to this policy

We may update this policy as our business or the services we use change. The latest version will always be published on this page with an updated date.

10. Contact us

Above Fitness, United Kingdom. Email: abovefitness.info@gmail.com.