Privacy Policy
Last updated: 29 June 2026
Who we are
TheGymCrowd (“we”, “us”, “our”) operates the website at thegymcrowd.co.uk. We are the data controller for personal data collected through this website. Our contact address is hello@thegymcrowd.co.uk.
What data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | To notify you when investment opportunities go live on the platform | Consent (Article 6(1)(a) UK GDPR) |
| Name (optional) | To personalise communications if you choose to provide it | Consent (Article 6(1)(a) UK GDPR) |
| Referral source | To understand which channels bring people to the platform (internal analytics only) | Legitimate interests (Article 6(1)(f) UK GDPR) |
| Page view data | To understand how people use the site and improve it (Vercel Analytics — no cookies, no cross-site tracking) | Legitimate interests (Article 6(1)(f) UK GDPR) |
How long we keep your data
We keep your email address and name until you withdraw your consent or ask us to delete your data. If TheGymCrowd ceases to operate, all personal data will be securely deleted within 30 days.
Who we share your data with
We do not sell your data. We share it only with the following processors, who act on our instructions and are contractually bound to protect it:
- SupabaseStores registration data in the EU (Ireland, eu-west-1). Supabase Inc. is certified under the EU-US Data Privacy Framework.
- ResendDelivers transactional emails (e.g. your confirmation on sign-up). Resend Inc. processes data under Standard Contractual Clauses.
- VercelHosts the website. Vercel Inc. processes data under Standard Contractual Clauses. Analytics data is anonymised and contains no cookies.
Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Erasure — ask us to delete your data at any time
- Rectification — correct inaccurate data
- Withdraw consent — unsubscribe from communications at any time
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, email hello@thegymcrowd.co.uk with the subject line “Data request”. We will respond within 30 days.
Cookies
This website does not use tracking cookies. Vercel Analytics collects anonymised page view data using a privacy-first approach — no cookies are set, no cross-site tracking occurs, and no personal data is shared with third-party advertising networks.
Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
We may update this policy from time to time. We will update the “Last updated” date at the top of this page. Material changes that affect how we process your data will be communicated by email.