Privacy Policy

1. Who We Are

The Gym Rack is a UK-based reseller of authentic premium gym wear. We operate through Vinted, a third-party marketplace platform. When you purchase from us, your transaction and payment data are handled by Vinted under their own privacy policy and security standards.

2. What Information We Collect

We collect only the information necessary to fulfil your order and communicate with you:

• Name and delivery address — provided by you through Vinted at checkout.
• Contact details — email and phone number for delivery and order updates.
• Purchase history — records of items bought for customer service and returns.
• Messages — correspondence through Vinted or our contact form.

We do not collect or store payment card details. All payments are processed securely by Vinted.

3. How We Use Your Information

We use your information solely to:

• Process and dispatch your orders.
• Communicate about your purchase, delivery, or returns.
• Respond to enquiries and provide customer support.
• Maintain records for legal and tax obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. How We Protect Your Data

We store customer data securely and limit access to only what is necessary. We rely on Vinted's secure payment infrastructure for all financial transactions. We do not retain payment card information on our own systems.

5. Cookies & Analytics

Our website may use basic analytics and essential cookies to understand how visitors use the site and to improve functionality. We do not use tracking cookies for advertising or profiling. You can manage cookie preferences through your browser settings.

6. Third-Party Services

We use Vinted as our primary sales platform. When you make a purchase, your data is also subject to Vinted's Privacy Policy. We recommend reviewing their policy to understand how they process your data.

7. Data Retention

We retain your order and contact information for as long as necessary to fulfil our legal and tax obligations, typically up to 6 years for UK tax records. After this period, your data is securely deleted or anonymised.

8. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data (where legally permitted).
• Object to or restrict certain types of processing.
• Complain to the Information Commissioner's Office (ICO) if you believe your rights have been breached.

To exercise any of these rights, contact us using the details on our Contact page.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the effective date.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please get in touch via our Contact page or message us on Vinted.