Effective date: August 11, 2026
This policy explains what personal information Home Gym Shop collects when you use home-gym-shop.com, how we use it, who we share it with, and the choices you have. It is written to be read, not to be survived. If anything here is unclear, email support@home-gym-shop.com and a person will explain it.
Who we are
Home Gym Shop operates home-gym-shop.com, an online-only store selling compact home gym equipment to customers in the United States and Canada. We are the business responsible for the personal information described here — the data controller, in the language some laws use. For any privacy question or request, email support@home-gym-shop.com or use our contact form. We do not publish a postal address or phone number; email and the contact form reach us, and they keep your request, our reply and any photos in one thread.
What we collect
- Order information. Your name, email address, shipping address, the items you ordered and your order history.
- Account information. If you create an account: your email address, a hashed password (we never store the password itself) and any saved addresses.
- Marketing list information. If you opt in: your email address, the date and source of your consent, and whether you opened or clicked our emails.
- Product reviews. If you leave a review: the name you choose to display, your email address, your rating and your review text, plus any photo you attach.
- Support correspondence. Emails you send to support@home-gym-shop.com, messages sent through our contact form, and any photos or measurements you attach.
- Device and usage data. IP address, browser and device type, and the pages you view, collected through the cookies and similar technologies described in our Cookie Policy.
- Security records. Our security software logs IP addresses, failed login attempts and blocked requests. This is how we keep the store from being taken over, and it happens whether or not you have an account.
We do not collect or store your full card number at any point. See Payments below. We do not knowingly collect sensitive personal information — we do not ask for it, and none of it is needed to sell you a pair of dumbbells.
Why we use it
- To take, process, ship and support your order, and to handle returns and refunds.
- To run your account and let you log in, if you create one.
- To answer your questions and keep a record of the conversation.
- To publish product reviews you choose to submit.
- To send marketing email, but only if you have separately opted in.
- To understand how the store is used and to measure advertising, where you have consented to those cookies.
- To detect and prevent fraud, abuse and unauthorised access.
- To meet legal, tax and accounting obligations.
Payments
Payments are processed by Stripe. Card details you enter at checkout go directly to Stripe over an encrypted connection; we never see or store your full card number. We receive a payment confirmation and limited details such as the card brand and last four digits so we can manage your order and issue refunds. Stripe also uses information about your device and payment to detect fraud. Stripe’s handling of your data is described at stripe.com/privacy.
Who we share information with
We share the minimum each recipient needs, and only with these categories:
- Our overseas manufacturing and fulfillment partners and their carriers — your name, shipping address and order contents, so your order can be made, packed and delivered.
- Stripe — payment data, as described above.
- Our email provider — your email address and engagement data, to send order emails and, if you opted in, marketing email.
- Analytics and advertising providers (Google and Meta) — device and usage data, only where you have consented to those cookies.
- Our hosting and security providers — whatever passes through the servers that run the store.
- Authorities or advisers — where the law requires it, or to establish or defend a legal claim.
We do not sell your personal information for money, and we do not share it with anyone else. Note that sharing device and usage data with advertising partners can still count as a “sale” or “sharing” under California law even though no money changes hands — see Do Not Sell or Share below.
Where your information goes
Our fulfillment partners are outside the United States and Canada, so your name and shipping address are transferred to and processed in other countries in order to make and dispatch your order. Some of our technology providers also process data in the United States and elsewhere. We tell you this plainly because Canadian law expects it: while your information is in another country it is subject to that country’s laws, and it may be accessible to courts and authorities there under their legal processes. We share only what a partner needs to fulfil the order, and we require them to use it for that purpose alone.
Cookies and consent
Cookies that are strictly necessary — the ones that keep your cart working, keep you logged in and keep checkout secure — are always on, because the store cannot function without them. Analytics and advertising cookies are different: they are only set after you allow them in our cookie banner.
You can change or withdraw your choice at any time using the Cookie settings link in the footer of every page, and your browser settings let you block or delete cookies independently of anything we do. Withdrawing consent does not affect anything collected before you withdrew it. Our Cookie Policy lists the individual cookies, what each one is for and how long it lasts.
Analytics
We use Google Analytics 4 to understand how visitors use the store — which pages get read, where people drop out of checkout, whether a guide is doing its job. It sets cookies and similar identifiers and collects information such as pages viewed, device and browser type, and approximate location at city or region level derived from your IP address. IP anonymisation is switched on. You can opt out on all websites with the browser add-on at tools.google.com/dlpage/gaoptout, or simply decline analytics cookies in our banner.
Advertising
Where you consent, we use advertising tools from Google and Meta to measure our ads and to show relevant ads on their platforms. These tools share activity on our site — pages viewed, items added to cart, purchases — with those companies, which may match it with information they already hold about you. We also send our product catalogue to Google Merchant Center, which contains no personal information at all. You can manage Meta ad settings at facebook.com/adpreferences and Google ad settings at myadcenter.google.com, and you can decline advertising cookies in our banner at any time.
Product reviews
If you buy from us we may email you once, after delivery, to invite a review. That email is part of the order relationship rather than marketing, and it carries its own opt-out. If you submit a review, the display name you choose and your review text are published on the product page; your email address is not published and is used only to verify the review and to reply if there is a problem. You can ask us to remove a review you wrote at any time. We do not write, buy, incentivise or edit reviews, and we do not delete a review simply for being negative.
Marketing email, and why it is separate from your account
Creating an account is not consent to marketing. They are two different things and we keep them apart on purpose:
- Transactional email — order confirmations, dispatch and tracking notices, refund confirmations, password resets — is sent because you placed an order or hold an account. You cannot unsubscribe from these while you have an active order, because they are how we tell you what is happening with it.
- Marketing email — the 15% off first order signup, the weekly featured product, occasional small-space training notes — is sent only if you separately opt in, by entering your address in the popup, the footer form or the optional checkbox at checkout, and then confirming by clicking the link in the email we send you.
That confirmation step is deliberate. It means nobody can add your address to our list but you, and it gives us the record of consent that Canadian anti-spam law requires. Every marketing email carries a one-click unsubscribe link and we act on it immediately. Unsubscribing from marketing never affects your account or your order emails. Marketing emails also carry our postal address, because CAN-SPAM and CASL require it there — it is not published on this website.
The 15% welcome offer: notice of financial incentive
We offer 15% off your first order in exchange for joining our marketing email list. Under California law that is a “financial incentive”, and we have to describe it to you clearly before you take part. Here it is.
- What the incentive is. A single-use code for 15% off one order, sent to you by email.
- What personal information it involves. Your email address, and the date and source of your consent. Nothing else — we do not ask for your name, age or anything about your training.
- How to opt in. Enter your email address in the popup, the footer form or the checkbox at checkout, then click the confirmation link we email you. The code arrives after you confirm.
- How to withdraw. Click unsubscribe in any email we send, or email support@home-gym-shop.com. You can do this at any time, including immediately after claiming the code, and we will not withhold the discount or treat you differently for it.
- The material terms of the code. One per email address, valid for 30 days, single use, cannot be combined with another code, and not valid on items already reduced. The full terms are in our Terms of Use.
Our good-faith estimate of the value of your data, and how we reached it. The value of the offer to you is 15% of your first order — on a typical order at this store, roughly $6 to $12. We estimate the value of an email subscriber to us at a similar figure or less, calculated as the gross margin we expect from the additional orders an average subscriber places over a year, divided across all subscribers, and reduced by the cost of the discount itself and of running the list. In other words the exchange is close to even, and we are not making a hidden profit on your address. This estimate is made in good faith on the numbers available to a store at our stage; it is not a promise about any individual.
Taking part is entirely optional. Declining costs you nothing but the discount: prices, shipping, returns and support are identical either way.
How long we keep your information
Order records are kept as long as we need them to handle the 30-day return window and to meet tax and accounting obligations. Account information is kept until you delete your account or ask us to. Support correspondence is kept as long as it takes to resolve your request and to spot patterns worth fixing. Marketing list data is kept until you unsubscribe, after which we retain a minimal suppression record so we do not email you again by mistake; addresses that never confirm are deleted after 90 days, and subscribers who have not engaged for a year are deactivated. Consent records are kept for as long as we need to be able to show that consent was given. Security logs are kept for a short rolling period. Analytics and advertising data is retained by those providers under their own schedules.
Security
The site runs over HTTPS, passwords are stored hashed rather than in plain text, administrator accounts require two-factor authentication, and card data never touches our systems. Access to customer records is limited to the people who need it to fulfil orders and answer support. No system is perfect, so if you believe your account has been compromised, email support@home-gym-shop.com and change your password.
Your rights
Wherever you live, you can ask us to give you a copy of the personal information we hold about you, correct it, delete it, or tell you who we have shared it with. Email support@home-gym-shop.com from the address linked to your order or account and say what you want. We will respond within the timelines the applicable law sets — 45 days under California law, extendable once where the law allows, and promptly in every other case.
We may need to verify your identity first, usually by confirming details of an order you placed, and we may have to keep records the law requires us to keep, such as tax records for completed orders. An authorised agent may make a request on your behalf; we will ask for written proof that you authorised them and may still verify your identity directly. We never charge for a request and we will never treat you differently for making one. If we refuse a request, we will tell you why in writing, and you can ask us to reconsider by replying to that message — a different person reviews it.
California: Do Not Sell or Share My Personal Information
Under the CCPA as amended by the CPRA, letting advertising partners collect device and usage data through cookies may count as a “sale” or “sharing” of personal information even though no money changes hands. We do not sell personal information for money and we do not use it for cross-context behavioural advertising unless you have allowed advertising cookies.
To opt out, use the button below or the Cookie settings link in the footer of every page, and switch off Marketing (and Statistics, if you wish). That setting is remembered on this browser.
Global Privacy Control. If your browser or an extension sends a GPC signal, we treat it as an opt-out for that browser automatically — you do not need to do anything else. The same applies to a Do Not Track signal.
You can also email support@home-gym-shop.com with the subject “Do Not Sell or Share” and we will apply the opt-out to your account and email address, which covers every browser and device rather than just this one. California residents also have the right to know, correct, delete and limit the use of sensitive personal information — we do not collect any of the latter. We do not knowingly sell or share the personal information of anyone under 16.
Canada
For customers in Canada we handle personal information in line with PIPEDA: we collect, use and disclose it with your consent and only for the purposes described here, we keep it only as long as we need it, and you can request access to or correction of your information at any time. As set out in Where your information goes above, some of it is processed outside Canada. Our commercial email follows CASL — we send it only with express consent that you confirm by clicking a link, we identify ourselves clearly, we include our postal address, and every message contains a working unsubscribe mechanism that we act on immediately.
Children
Our store is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child under 13 has given us personal information, email support@home-gym-shop.com and we will delete it.
Changes to this policy
We may update this policy as the store, our tools or our legal obligations change. When we do, the new version is posted here with an updated effective date, and if the change is material we will say so at the top. The current version took effect on August 11, 2026.
Contact
Questions about this policy or about your data? Email support@home-gym-shop.com or use our contact form. A person reads it and a person replies.