Privacy
Policy

Who We Are

SHRED-6 is operated by EvolveFit365 Ltd ("we", "us", "our"), a company registered in England and Wales (company number 17165943). Our registered office is 31 Hampton Road, London, E4 8NH. Our website is shred-6.com and you can contact us at enquiries@shred-6.com.

We are committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. EvolveFit365 Ltd is registered with the Information Commissioner's Office, registration reference C1959278.

What Data We Collect

When you use our website or purchase the SHRED-6 programme, we may collect:

• Your name and email address
• Billing address and payment information (processed securely by our payment provider -- we do not store card details)
• Order history and purchase details
• Your selected programme level (Foundation, Standard, or Athlete) and start type
• Communications you send to us
• Technical data including IP address, browser type, and device information
• Usage data about how you interact with our website (via cookies -- see Section 7)
• Fitness and body data you enter into the app, such as fitness assessment results, body measurements, workout and activity logging, and the metrics we calculate from these (including your Optimality Score and Body Age)

How We Use Your Data

We use your personal data to:

• Process your purchase and set up your SHRED-6 programme account
• Send your welcome email and programme access details
• Provide customer support and respond to your enquiries
• Send programme-related communications (including challenge reminders and updates)
• Send marketing emails if you have opted in -- you can unsubscribe at any time
• Comply with our legal obligations
• Improve our website and services using aggregated, anonymised analytics data
• Some of the information you enter into the app, such as body measurements and fitness assessment results, may be treated as data concerning your health, which is a special category of data under UK GDPR. Where this applies, we rely on your explicit consent to process it, which you give when you choose to enter this information into the app. You can withdraw this consent at any time by contacting us, although this will limit the programme's ability to track and personalise your progress. We do not share your fitness or body data with advertisers or any third party for marketing purposes.

Who We Share Your Data With

We do not sell your personal data. We share it only with trusted third parties who help us operate our business:

• Shopify Inc. -- our e-commerce platform, which processes orders and stores customer data. Shopify is GDPR-compliant. See their privacy policy at shopify.com/legal/privacy.
• Payment processors -- such as Stripe or PayPal, to handle payments securely.
• Email marketing provider (e.g. Klaviyo) -- to send welcome emails, programme communications, and marketing emails where you have opted in.
• Google Analytics -- to understand how visitors use our website. Data is anonymised and aggregated. You can opt out at tools.google.com/dlpage/gaoptout.
• Meta (Facebook Pixel) -- to measure the effectiveness of our advertising and, where you have consented, to show relevant ads. You can manage your preferences at facebook.com/settings.

All third-party processors are required to handle your data securely and in accordance with UK GDPR.

International Data Transfers

Some of our third-party providers are based outside the UK or the European Economic Area. Where this is the case, we ensure appropriate safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses, to protect your data.

How Long We Keep Your Data

We retain your data only for as long as necessary:

• Order and transaction records: 7 years (HMRC legal requirement)
• Customer account data: for the duration of your account plus 2 years
• Marketing preferences: until you unsubscribe or withdraw consent
• Analytics data: as set by the relevant provider (typically 26 months for Google Analytics)

Cookies

Our website uses cookies -- small text files stored on your device -- for the following purposes:

• Essential cookies: Required for the website and shopping cart to function. These cannot be disabled.
• Analytics cookies: Google Analytics uses cookies to collect anonymised data about how visitors use our site. These are only set with your consent.
• Marketing cookies: The Meta (Facebook) Pixel uses cookies to measure ad performance and enable personalised advertising. These are only set with your consent.

You can manage your cookie preferences via the cookie banner when you first visit the site, or by adjusting your browser settings at any time.

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at enquiries@shred-6.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Data Security

We take reasonable technical and organisational measures to protect your personal data against accidental loss, unauthorised access, and misuse. Our website operates over HTTPS and payment processing is handled by PCI-compliant providers. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect any changes. Where changes are significant, we will notify you by email or via a notice on the website. Continued use of our site after changes constitutes acceptance of the updated policy.