Privacy Policy

1. General Information

This Privacy Policy sets out the rules for the processing of personal data of users of the Fit Busy Mum platform (the “Platform”).

The data controller is:
Richer Together sp. z o.o.
Grzybowska 87, 00-844 Warszawa, Poland
KRS: 0001163602
NIP: 5273157772
REGON: 541267106
Email: hello@fitbusymum.uk
(hereinafter referred to as the “Controller”).

The Controller is a limited liability company registered in Poland.

2. Scope of Application

1. This Privacy Policy applies to all users of the Platform, regardless of their country of residence.
2. Personal data is processed in accordance with:
   – Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR),
   – UK GDPR and the Data Protection Act 2018,
   – other applicable data protection laws.

3. Categories of Personal Data

The Controller may process the following categories of personal data:

3.1 Data provided by the user

– email address,
– first name (if provided),
– user account details,
– purchase-related information.

3.2 Data collected automatically

– IP address,
– device and browser information,
– statistical and analytical data,
– information about user activity on the Platform.

4. Purposes and Legal Bases of Processing

Personal data is processed for the following purposes:

1. Conclusion and performance of a contract
   – creation and management of user accounts,
   – processing purchases of digital content,
   – providing access to purchased content.
   Legal basis: Article 6(1)(b) GDPR.
2. Payment processing
   – handled via the Stripe payment system.
   Legal basis: Article 6(1)(b) GDPR.
3. Communication and customer support
   – responding to emails and enquiries.
   Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).
4. Analytics and statistics
   – analysing how users interact with the Platform,
   – improving functionality and service quality.
   Legal basis: Article 6(1)(a) GDPR (user consent).
   
5. Marketing and remarketing
   – conducting remarketing campaigns,
   – displaying personalised advertisements.
   Legal basis: Article 6(1)(a) GDPR (user consent).

5. Analytics and Marketing Tools

The Platform uses the following tools:

– Google Analytics 4 (GA4) – for traffic and usage analysis,
– Google Ads – for advertising and remarketing,
– Meta Platforms (Facebook, Instagram) – for advertising and remarketing,
– YouTube – for advertising and analytics,
– TikTok – for advertising and remarketing purposes.

These tools are used only after the user has given consent, expressed via the cookie consent banner.

6. Cookies

1. The Platform uses cookies in order to:
   – ensure proper functioning of the website,
   – perform analytics,
   – conduct marketing and remarketing activities.
2. Cookie consent management is handled via Cookiebot.
3. Users may:
   – accept all cookies,
   – reject non-essential cookies,
   – manage cookie preferences.
4. Users may change their cookie settings at any time.

7. Payment Provider

Payments on the Platform are processed via Stripe.

The Controller:
– does not process payment card details,
– does not store financial data of users.

Payment data is processed in accordance with Stripe’s own privacy policy.

8. Transfer of Data Outside the EU and the UK

1. Personal data may be transferred outside the European Union and the United Kingdom, in particular to the United States (e.g. Google, Meta, Stripe).
2. Such transfers are carried out using appropriate safeguards, including:
   – Standard Contractual Clauses (SCCs),
   – other mechanisms compliant with GDPR and UK GDPR.

9. Data Retention Period

Personal data is retained:
– for the duration of the contractual relationship,
– after its termination for the period required by applicable law,
– until consent is withdrawn, where processing is based on consent.

10. User Rights

Users have the right to:

– access their personal data,
– rectify inaccurate data,
– request erasure (“right to be forgotten”),
– restrict processing,
– data portability,
– object to processing,
– withdraw consent at any time,
– lodge a complaint with a competent supervisory authority.

11. Children’s Data

1. The Platform is intended exclusively for individuals aged 18 or over.
2. The Controller does not knowingly process personal data of children.

12. Data Security

The Controller applies appropriate technical and organisational measures to protect personal data against:
– unauthorised access,
– loss,
– destruction,
– unauthorised alteration.

13. Changes to This Privacy Policy

1. The Controller reserves the right to amend this Privacy Policy at any time.
2. The current version of the Privacy Policy is always available on the Platform.