Legal

Privacy Policy

How HeyGym collects, uses, shares and deletes your data — in plain language.

Last updated: October 2026
Jump to a section▾
1

Data we collect

Account data you give us (name, email, optional phone, password hash — never the password itself), content you create (reviews, reports, enquiries, trial requests, gym listings and documents), and first-party analytics events (page views, searches, enquiry submissions). We do not store IP addresses in analytics events.

2

How enquiries and trials are shared — only with your consent

When you send an enquiry or request a trial, you consent to us sharing the contact details you entered (name, phone number, message, preferred time) with that gym so it can respond. The moment of consent is recorded. We never sell personal data, and gyms receive nothing else about you.

3

Analytics

Our analytics are first-party: events are generated by the site itself to understand usage (e.g. popular localities). They carry no IP address and no third-party tracker is loaded for them.

4

Cookies and local storage

We use a strictly-necessary httpOnly cookie for the login session (refresh token), in-memory storage for the short-lived access token, and your browser's session storage for purely local, per-tab data such as compare lists (cleared when you close the tab). No advertising cookies.

5

Reviews and content rules

Reviews are shown publicly with shortened display names. Do not post spam, fake, abusive or off-topic content, or other people's personal data. We may hide content that breaks these rules and throttle accounts that abuse the platform.

6

Deletion and your rights

You can delete your account anytime from Account settings (password confirmation required): your name, email and phone are cleared, sessions revoked, and enquiries/trials anonymized, while reviews you wrote stay visible under “Deleted user”. You can also request deletion or a copy of your data by emailing support@example.com from your registered address.

7

Retention

Anonymized records (reviews, aggregated analytics) are kept for the service to function. Backups rotate and age out deleted personal data within 30 days.

Questions about your data?

Email us at support@example.com and we'll respond within a few business days.