Privacy Policy
Last updated: July 2026
1. General Information
This Privacy Policy explains how Fit Busy Mum collects, uses and protects personal data when you use our website, buy digital content, create an account, sign up for emails, or contact us.
The data controller is:
KRYPTONUM sp. z o.o.
Żwirki i Wigury 15 / 9, 02-143 Warszawa, Poland
KRS: 0000738717
NIP: 9512465557
REGON: 380694040
Email: hello@fitbusymum.uk
(the “Controller”).
The Controller is a limited liability company registered in Poland.
2. Scope of Application
- This Privacy Policy applies to all users of the Fit Busy Mum website and online platform (the “Platform”), regardless of their country of residence.
- Personal data is processed in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), UK GDPR, the Data Protection Act 2018, and other applicable privacy laws where relevant.
3. Categories of Personal Data
The Controller may process the following categories of personal data:
3.1 Data provided by the user
– email address,
– first name and last name, where provided,
– billing and shipping details, where required for an order,
– user account details,
– purchase and order information,
– customer support messages and replies,
– marketing preferences, including newsletter sign-up and unsubscribe status,
– consent records, including the date and source of consent where this is available.
3.2 Data collected automatically
– IP address,
– device and browser information,
– cookie and consent preferences,
– statistical and analytical data,
– information about how users interact with the Platform,
– standard server logs, including when a user visits the Platform or clicks a link that passes through the Platform.
3.3 Payment data
Payments are processed by Stripe. The Controller does not store full payment card details.
4. How We Collect Personal Data
We collect personal data when you:
– place an order through WooCommerce checkout,
– create or use a Fit Busy Mum account,
– enter your email address in a newsletter or free resource sign-up form,
– sign up through an Omnisend pop-up form, including the Wheel of Fortune lead magnet form,
– start checkout and enter your email address but do not complete your order,
– contact us by email or reply to one of our messages,
– use the website while analytics, advertising or functional cookies are active.
5. Purposes and Legal Bases of Processing
Personal data is processed for the following purposes:
- Conclusion and performance of a contract
– processing orders,
– creating and managing user accounts,
– providing access to purchased digital content,
– sending order confirmations and account access emails.
Legal basis: Article 6(1)(b) GDPR. - Payment processing
– processing payments through Stripe,
– handling payment confirmation, failed payments, refunds and related support.
Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR. - Customer support
– responding to emails, questions, refund requests and support enquiries.
Legal basis: Article 6(1)(f) GDPR, the legitimate interest of helping customers and users. - Legal, tax and accounting obligations
– keeping records required by tax, accounting and consumer protection laws,
– issuing and storing invoices and order records where required.
Legal basis: Article 6(1)(c) GDPR. - Email marketing and free resources
– sending recipes, tips, product updates, offers and occasional newsletters,
– delivering free resources requested by the user,
– running automated welcome sequences after a user signs up for a free resource,
– recording consent and unsubscribe status.
Legal basis: Article 6(1)(a) GDPR where consent is required, and Article 6(1)(f) GDPR where we rely on legitimate interest or a permitted soft opt-in under applicable law. - Abandoned checkout emails
– sending reminder emails when a user starts checkout but does not complete the order,
– helping users return to their basket or checkout.
Legal basis: Article 6(1)(f) GDPR, the legitimate interest of helping users complete purchases and improving sales, subject to applicable email marketing rules and opt-out rights. - Analytics and website improvement
– understanding how users interact with the Platform,
– improving website performance, product pages, checkout and user experience.
Legal basis: Article 6(1)(a) GDPR where consent is required for non-essential cookies, and Article 6(1)(f) GDPR for basic website security and performance. - Advertising and remarketing
– measuring advertising performance,
– showing or improving advertising campaigns on platforms such as Google, Meta and TikTok.
Legal basis: Article 6(1)(a) GDPR where consent is required.
6. Email Marketing and Unsubscribe
- Email marketing is handled using Omnisend.
- Users may sign up for marketing emails through checkout, a website form, a pop-up form, or by requesting a free resource.
- Marketing emails may include recipes, tips, offers, product updates, free resources and reminders about unfinished checkout.
- Every marketing email includes an unsubscribe link. Users can unsubscribe at any time.
- Users may also contact us at hello@fitbusymum.uk to ask us to stop sending marketing emails.
7. Analytics, Advertising and Marketing Tools
The Platform may use the following tools:
– Google Analytics 4 (GA4) – for traffic and usage analysis,
– Google Ads – for advertising and remarketing,
– Meta Platforms (Facebook and Instagram) – for advertising, remarketing and conversion tracking,
– TikTok – for advertising and remarketing,
– Microsoft Clarity – for website usage analysis, heatmaps and session insights,
– PixelYourSite – for managing selected website tracking events,
– Omnisend – for email marketing, pop-up forms, customer segmentation and ecommerce email automations,
– WooCommerce – for order processing and customer account management,
– Stripe – for payment processing.
Non-essential analytics, advertising and remarketing tools are used only where required consent has been given through the cookie consent banner.
8. Cookies
- The Platform uses cookies and similar technologies to:
– make the website work correctly,
– remember cookie and consent choices,
– support checkout, account login and security,
– perform analytics,
– support advertising and remarketing,
– support email marketing forms and automations. - Cookie consent management is handled through Real Cookie Banner Pro.
- Omnisend may use cookies or similar technologies to recognise returning visitors, remember whether a user has already subscribed, and avoid showing the same pop-up form again where appropriate.
- Users may accept all cookies, reject non-essential cookies, or manage cookie preferences.
- Users may change their cookie settings at any time through the cookie banner or browser settings.
9. Payment Provider
Payments on the Platform are processed by Stripe.
The Controller does not store full payment card details. Payment data is processed in accordance with Stripe’s own privacy policy and security standards.
10. Data Sharing and Service Providers
We may share personal data with trusted service providers where this is necessary to operate the Platform, process orders, send emails, provide customer support, analyse website performance, process payments, comply with legal obligations, or protect the Platform.
These providers may include website hosting, ecommerce, payment, analytics, advertising, email marketing, accounting and technical service providers.
We do not sell personal data.
11. Transfer of Data Outside the EU and the UK
- Personal data may be transferred outside the European Union, the European Economic Area and the United Kingdom, including to the United States, where our service providers or their systems are located.
- Where required, such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses, adequacy decisions, or other mechanisms recognised by applicable data protection laws.
12. Data Retention Period
Personal data is retained:
– for as long as needed to provide the Platform, manage accounts and process orders,
– for as long as required by tax, accounting and legal obligations,
– for as long as needed to handle disputes, refunds, chargebacks or support issues,
– until consent is withdrawn, where processing is based on consent,
– until the user unsubscribes from marketing emails, subject to keeping a suppression record so we know not to contact them again.
13. User Rights
Users have the right to:
– access their personal data,
– rectify inaccurate data,
– request erasure of personal data,
– restrict processing,
– data portability,
– object to processing,
– withdraw consent at any time, where processing is based on consent,
– unsubscribe from marketing emails at any time,
– lodge a complaint with a competent supervisory authority.
To exercise these rights, please contact us at hello@fitbusymum.uk.
14. Children’s Data
- The Platform is intended exclusively for individuals aged 18 or over.
- The Controller does not knowingly collect or process personal data of children.
15. Data Security
The Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, misuse or unauthorised alteration.
16. Changes to This Privacy Policy
- The Controller may amend this Privacy Policy when needed, for example if the Platform, services, tools or legal requirements change.
- The current version of the Privacy Policy is always available on the Platform.