Privacy notice
How we use your details
This page describes what happens to the details you give us on the LUX waitlist page and on our website. It is written for a UK audience under UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
Who we are
GYM LUX LTD (company number 16638660), registered office Flat 34 Gloucester Road, London N17 6LL (as shown on the Companies House register), is the data controller. LUX is a registered UK trade mark (UK00004246526) owned by our founder and used by GYM LUX LTD. Contact: gymluxbusiness@gmail.com. ICO registration: to be added once registered
What we collect and why
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Waitlist sign-up: email, first name (optional), your answers about section, pieces, colour, size, training and price expectation, the page you signed up on and any campaign tags, time of sign-up, and the version of the consent wording you saw | To decide what we make first and, if you ticked the box, to email you development updates and launch news | Consent | Until you unsubscribe or ask us to delete it; preference answers may be kept in aggregated, anonymised form |
| Name, email, delivery and billing address, phone, order details | To process and deliver an order, handle returns and provide customer service (once we sell anything) | Contract | 6 years after the order (tax and legal records) |
| Payment details | We do not take payments yet; this row will be updated before anything is sold | — | — |
| Email address for marketing | To send news and offers if you opted in, or if you are an existing customer and have not opted out (you can unsubscribe in every email) | Consent, or legitimate interests (existing customers under the soft opt-in) | Until you unsubscribe, or 2 years of inactivity |
| Website usage (cookies, analytics) | To run the site securely and, with your consent, to measure performance and advertising. The waitlist page sets no analytics or marketing cookies. | Legitimate interests (essential); consent (analytics/marketing) | See Cookie Notice to be published before any analytics are added |
| Customer-service correspondence | To answer you and keep a record | Legitimate interests | 2 years |
Who we share it with
Our website host and form provider (Netlify, Inc., USA, which serves the site and keeps standard access logs), our email and sign-up list provider (Klaviyo, Inc., USA — it stores your sign-up details and preference answers and sends our emails; UK transfers rely on the UK Extension to the EU-US Data Privacy Framework / IDTA), and later payment processors, delivery carriers and accountants, and authorities where required by law. Some providers process data outside the UK; where they do, we rely on the UK adequacy regulations or the International Data Transfer Agreement/addendum. We do not sell your details.
Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawing consent at any time. Email gymluxbusiness@gmail.com or reply "stop" to any email from us. You may complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Children
Our products and site are intended for adults (18+). We do not knowingly collect children's data.
Contact
GYM LUX LTD, company number 16638660, London. Email: gymluxbusiness@gmail.com.
Changes
Last updated: 13 October 2026. Draft prepared from the operations and legal draft notice (DRAFT C) in the business workspace.