Privacy Policy

1. Who we are

FORZA is operated by INCEPTO Dev, who acts as the data controller for personal data processed through the service. Gym owners act as controllers for the data they enter about their own members; we process that data on their behalf to provide the service.

2. Data we collect

• Account data — name, email address, login credentials.
• Workspace data — gym name, address, contact details, logo.
• Operational data — member profiles, memberships, payment records and check-ins entered by gym staff or members.
• Support data — messages you send us.
• Usage and device data — IP address, device identifiers and basic usage/telemetry needed to run and secure the service.

Payment card and billing details for subscriptions are collected directly by Stripe (our payment processor) and are not stored by us.

3. Why we use it and legal basis

• Providing the service (account creation, workspace operation, member portal) — performance of a contract.
• Security and fraud prevention — legitimate interests.
• Product improvement and analytics — legitimate interests.
• Customer support — performance of a contract / legitimate interests.
• Legal obligations (accounting, tax records) — legal obligation.
• Marketing, where applicable — consent, which you can withdraw at any time.

4. Who we share data with

• Service providers / subprocessors — hosting, database and analytics providers that help us run the service.
• Stripe (payment processor) — for the sale of subscriptions, payment processing and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep personal data for as long as your account is active and as needed for legal, accounting and security purposes. When data is no longer needed it is deleted or anonymised.

6. Your rights

You have the right to access, rectify or erase your personal data, restrict or object to processing, request data portability, and withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority. We respond to requests within one month. To exercise any right, contact us at info@gymforza.com.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls and row-level isolation of each gym's data.

8. Cookies

We use essential cookies and storage required for sign-in and security. Where analytics or marketing cookies are used, you can manage your preferences through your browser settings.