PRIVACY
POLICY

BODY Active Wear ("BODY", "we", "us", "our") is an activewear brand based in the United Kingdom. We operate the website at body-activewear.com and all associated pages, including our online shop, fitness app, and careers/ambassador programme.

For the purposes of UK GDPR and the Data Protection Act 2018, BODY Active Wear is the data controller responsible for your personal information.

If you have any questions about this policy or how we handle your data, please contact us at privacy@body-activewear.com.

We collect information in two ways — information you give us directly, and information collected automatically when you use our site.

Information you give us:

• Name, email address, and password when you create an account
• Delivery address, phone number, and payment details when you place an order
• Your email address when you sign up to our newsletter
• Name, contact details, social media handles, photos, and application responses when you apply through our Work With Us page (model, ambassador, or athlete applications)
• Any messages or information you send us via our contact form

Information collected automatically:

• IP address, browser type, and device information
• Pages you visit, how long you spend on them, and how you navigate around the site
• Referring website (how you arrived at our site)
• Cookie data (see Section 6 for full cookie details)

Payment information: We do not store your full card details on our servers. Payment processing is handled securely by our third-party payment provider, and only tokenised references are retained.

We use the information we collect to:

• Process and fulfil your orders, including sending order confirmations, dispatching goods, and handling returns
• Create and manage your account
• Send you marketing emails, newsletters, and exclusive offers — only if you have opted in
• Respond to your queries or complaints
• Review and process applications submitted through our Work With Us programme
• Improve our website, products, and services based on how people use them
• Detect and prevent fraud or security issues
• Comply with legal obligations, such as tax records and consumer law

We will never use your data for purposes that are incompatible with the reasons listed above without first seeking your consent.

Under UK GDPR, we must have a lawful basis for processing your personal data. Depending on how we use your data, we rely on one or more of the following:

• Contract: Processing is necessary to fulfil an order you've placed or to provide services you've requested (e.g., account creation, order fulfilment).
• Legitimate Interests: We have a legitimate business interest in understanding how our site is used, preventing fraud, and improving our products — provided this doesn't override your rights.
• Consent: Where we rely on consent — such as sending marketing emails or processing ambassador application data — you can withdraw that consent at any time.
• Legal Obligation: Some processing is required to comply with UK law, including financial record-keeping and consumer rights obligations.

We do not sell, rent, or trade your personal data to third parties. We share your information only in the following limited circumstances:

• Delivery partners: We share your name and address with couriers (e.g., Royal Mail, DPD) solely to fulfil your order.
• Payment processors: Your payment details are processed by our payment provider. We do not store full card information.
• Firebase / Google: We use Firebase Authentication (provided by Google) for account management. Your email and account data is processed in accordance with Google's data processing terms.
• Email marketing platforms: If you've opted in to marketing, your email is stored with our email provider to send you communications.
• Legal requirements: We may disclose your data if required to do so by law, or to protect the rights, property, or safety of BODY, our customers, or others.

All third-party providers we work with are required to handle your data securely and only for the purposes we specify.

We use cookies and similar technologies to make our website work and to understand how you use it. Here's what we use:

• Essential cookies: Required for the site to function — keeping you logged in, remembering your cart, and securing your session.
• Analytics cookies: Help us understand which pages are popular, how long people browse, and where visitors come from — so we can improve the experience.
• Preference cookies: Remember your settings, such as your preferred size or currency.

We do not use cookies to serve you targeted advertising from third-party ad networks.

We retain your personal data only for as long as is necessary for the purpose it was collected, or as required by law:

• Account data: Kept for the duration of your account, plus up to 2 years after closure in case of disputes.
• Order data: Retained for 7 years to comply with UK tax and financial reporting requirements.
• Marketing data: Kept until you unsubscribe or withdraw consent, after which it is deleted within 30 days.
• Application data (Work With Us): Kept for up to 12 months after the application is reviewed, then securely deleted.
• Contact enquiries: Retained for up to 2 years in case of follow-up.

When data is no longer needed, we securely delete or anonymise it.

Under UK GDPR, you have the following rights regarding your personal data. You can exercise any of these by contacting us at privacy@body-activewear.com.

We will respond to all valid requests within 30 days. We may need to verify your identity before fulfilling a request.

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your information from unauthorised access, loss, or misuse. These include:

• HTTPS encryption across all pages of our website
• Secure, industry-standard payment processing
• Firebase Authentication for secure account management
• Restricted access to personal data within our team, on a need-to-know basis

While we take every precaution, no method of transmission over the internet is 100% secure. If you have concerns about a potential data breach, please contact us immediately at privacy@body-activewear.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we'll update the "Last Updated" date at the top of this page.

If we make any significant changes that affect your rights, we'll notify you by email (if you have an account) or by displaying a clear notice on our website.

We encourage you to review this policy periodically to stay informed about how we're protecting your information.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please get in touch:

• Email: privacy@body-activewear.com
• General Contact: Visit our Contact page

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) — the UK's independent data protection authority:

• Website: ico.org.uk
• Helpline: 0303 123 1113