Privacy Policy

This Privacy Policy explains what information we collect when you use mygymbuild.com, why we collect it, and the choices you have.

Who controls your data

The data controller is TOPQLT S.R.L., registered in Romania under number RO49814478, registered office Gheorghe Doja 29 G. Contact us about anything in this policy at support@mygymbuild.com.

What we collect, why, and on what basis

• Account and purchases. Your email address and order details. We need these to deliver what you bought and to give you access to it. Legal basis: performance of our contract with you. Card payments are processed by Stripe — we never see or store your full card number.
• Quiz answers. Your training style, space size and budget. We use these to match you to a blueprint. Legal basis: performance of our contract, or your consent where you use the quiz without buying.
• Email opt-ins. If you ask for the free sample or a guide, we store the address you give us and may send you occasional product updates. Legal basis: your consent. You can withdraw it at any time using the unsubscribe link in any email.
• Analytics and advertising cookies. We use Google Analytics and the Meta pixel to understand how the site is used and to measure our advertising. Legal basis: your consent, given through our cookie banner. These scripts do not load at all until you accept. You can change or withdraw that consent at any time — Cookie Settings reopens the banner, and declining also clears the analytics cookies already stored in your browser.
• Partner referral cookie. If you arrive through a link from one of our affiliate partners, our affiliate-tracking provider Rewardful stores a random referral ID in a cookie for 30 days. It lets us credit the partner who sent you and apply your 20% partner discount at checkout. It holds no name or email address, and it is only set for visitors who arrive through a partner link. Visitors in the United States: the cookie is set when you arrive through the link, based on our legitimate interest in paying our partners correctly. Visitors everywhere else: it is set only after you accept cookies in our banner, and declining removes it. Discount codes typed at checkout work without any cookie.
• Accounting records. We keep records of transactions. Legal basis: compliance with our legal obligations under Romanian tax law.

Who we share it with

We do not sell your personal information. We share it only with the service providers that run the product:

• Stripe — payment processing
• Supabase — database and authentication hosting
• Google and Meta — analytics and advertising measurement
• Rewardful — affiliate referral tracking and partner commissions

Each acts under its own terms and, where it processes data on our behalf, under a data processing agreement with us.

Transfers outside the EEA

Some of these providers process data in the United States and elsewhere outside the European Economic Area. Where that happens, the transfer is covered by European Commission adequacy decisions where they apply, or by Standard Contractual Clauses. You can ask us for details of the safeguards in place.

How long we keep it

• Account and access data — for as long as your account is active, and for 12 months after you close it or ask us to delete it.
• Purchase and accounting records — for the period Romanian tax law requires, currently 10 years.
• Marketing email addresses — until you unsubscribe, or after 24 months of no engagement.
• Analytics data — according to the retention settings of the provider, generally no more than 14 months.

Your rights

Under the GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, where we have no overriding obligation to keep it;
• ask us to restrict how we use it;
• receive your data in a portable, machine-readable format;
• object to processing we carry out on the basis of legitimate interests;
• withdraw consent at any time, where we rely on consent — this does not affect processing already carried out.

To exercise any of these, email support@mygymbuild.com. We respond within one month.

If you think we have handled your data badly, you can complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at dataprotection.ro, or to the authority in your own country of residence.

Children

MyGymBuild is not intended for children. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, email us and we will delete it.

Automated decisions

The quiz matches you to a blueprint automatically based on the answers you give. It has no legal or similarly significant effect on you, and a person is always available at support@mygymbuild.com if you would like help choosing.

Changes

We may update this policy as the product evolves. Material changes will be announced on this page and reflected in the “last updated” date above.