Gymnastics Growth Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our websites (including nickruddock.com, gymnasticsleaders.com, gymnasticsos.com and associated domains), download resources, register for webinars, purchase standalone digital products, purchase or access Gymnastics Growth Academy ("GGA"), Gymnastics Leaders ("GL") or GymnasticsOS™, join our launch lists or waiting lists, use our web or mobile platform, or otherwise engage with us as an individual or as part of a club or organisation. References to "Programme" in this Policy have the meaning given in the applicable Membership Terms where such terms apply. This Policy is issued in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
WHO WE ARE Gymnastics Growth Limited is a company incorporated in England & Wales with company number 13031738 and registered office at Third Floor, 207 Regent Street, London, W1B 3HH. ICO registration: ZB248126. Contact email: support@nickruddock.com. For the purposes of data protection law, we may act as either Data Controller or Data Processor depending on how you engage with our services.
WHEN WE ACT AS DATA CONTROLLER We act as Data Controller where we determine the purposes and means of processing personal data. This includes GGA memberships (single-user licences), direct purchases by individuals, lead magnet downloads, webinar registrations, marketing communications, certification issuance, platform analytics used to improve our services, billing and subscription management, launch list and waiting list signups, and responding to enquiries. In these circumstances we are responsible for complying with UK GDPR in relation to that processing.
WHEN WE ACT AS DATA PROCESSOR (GYMNASTICS LEADERS / GYMNASTICSOS) Where a Member Club purchases a Gymnastics Leaders or GymnasticsOS™ organisational licence and uses the platform to manage or monitor authorised users, we may process personal data on behalf of that Member Club. In such cases, the Member Club is the Data Controller and Gymnastics Growth Limited acts as Data Processor. Processing in this context is governed by the Data Processing Addendum forming part of the Membership Agreement. We process such personal data only on documented instructions from the Member Club and do not use it for our own independent purposes.
CATEGORIES OF PERSONAL DATA Depending on how you interact with us, we may collect Identity and Contact Data including name, email address, telephone number, job title, club or organisation name and billing address; Account and Platform Data including username, encrypted password, programme access history, certification status, CPD tracking records, engagement metrics, login activity and usage data; Financial Data including transaction history and subscription status (payment card details are processed by secure third-party providers and are not stored by us); Marketing and Lead Data including lead magnet registrations, webinar registrations, launch list and waiting list signups, referral codes and referral activity, scorecard or assessment submissions, email engagement data, SMS engagement data and marketing preferences; and Technical Data including IP address, device type, browser type, time zone, cookie identifiers and website usage data. We do not intentionally collect special category data unless expressly required and lawfully permitted.
HOW WE COLLECT DATA We collect personal data when you register for or purchase a Programme, download a free resource, complete an assessment or scorecard, are enrolled by a Member Club as an authorised user, join one of our launch lists or waiting lists, use our platform, interact with our website through cookies and analytics technologies, book a discovery or sales call, or engage with us through CRM, booking and email systems used to manage enquiries and marketing.
PURPOSES AND LAWFUL BASES We process personal data only where lawful. We rely on Contract where processing is necessary to deliver Programme access, certifications, subscriptions and platform functionality; Legitimate Interests to operate and improve our services, monitor engagement, prevent misuse, analyse performance and communicate relevant offerings, balancing those interests against your rights; Consent where required for marketing emails, SMS messages or non-essential cookies (which may be withdrawn at any time); and Legal Obligation where processing is required for tax, accounting or regulatory compliance.
SMS COMMUNICATIONS Where you provide your phone number and tick the separate SMS consent checkbox at signup, we may send you SMS messages relating to your account or our services. For the GymnasticsOS launch list specifically, this includes (i) a confirmation message when you join, (ii) occasional position-update notifications when your referral count crosses defined milestones, and (iii) a reminder when our product cart opens. SMS frequency is low — typical recipients receive between one and six messages over the duration of the launch period. All messages identify GymnasticsOS as the sender and include the instruction to reply STOP to unsubscribe at any time. Standard message and data rates from your carrier may apply. We do not share phone numbers with third parties for their own marketing purposes.
DISCOVERY AND SALES CALLS Where you book a call with us (e.g. via our scheduling system), we may record the call and use automated transcription services to generate notes. Recording is disclosed in the booking confirmation and confirmed verbally at the start of each call. Recordings and transcripts are used to follow up on the conversation, to improve our products and services, and for our internal records. You may request deletion of any recording or transcript at any time by emailing support@nickruddock.com. Where applicable, this processing is performed under legitimate interest, balanced against your right to be informed and your right to object.
AI ASSISTANCE TOOLS We use AI-powered tools, including automated transcription services and large language model assistants, to draft notes, summarise meetings and support internal productivity. Where these tools process documents or recordings containing personal data, we use enterprise or business-tier accounts operating under a data-processing agreement consistent with UK GDPR, with model training on our data disabled. We do not feed personal data into AI tools that operate on consumer terms without such safeguards.
ORGANISATIONAL REPORTING (GYMNASTICS LEADERS / GYMNASTICSOS) Where a Member Club holds a Gymnastics Leaders or GymnasticsOS™ organisational licence, we may provide reporting and analytics relating to authorised users, including engagement, participation, usage, certification status and activity levels. Such reporting is provided for the internal professional development and performance management purposes of the Member Club. Authorised users acknowledge that such reporting forms part of the organisational licence structure.
DATA SHARING We share personal data only where necessary and with appropriate safeguards. This may include payment processors, hosting and database providers, cloud storage providers, email marketing platforms, SMS gateway providers, push notification providers, live-chat and customer-support platforms, video conferencing and meeting-transcription providers, scheduling platforms, CRM systems, webinar platforms, workflow automation tools, AI-assistance providers, analytics tools and assessment platforms. Where we engage third-party processors, we ensure appropriate contractual safeguards are in place in accordance with UK GDPR. We may disclose personal data where required by law, in connection with legal proceedings, or in the event of business restructuring. We do not sell personal data.
INTERNATIONAL TRANSFERS Some service providers may operate outside the United Kingdom. Where personal data is transferred internationally, we rely on appropriate safeguards including UK adequacy regulations, UK-approved Standard Contractual Clauses and additional contractual and technical safeguards where appropriate.
DATA RETENTION We retain personal data only for as long as necessary for the purposes for which it was collected, including financial records for a minimum of six years, active membership data for the duration of membership plus a reasonable archive period, marketing and SMS data until you unsubscribe, and processor data (GL / GymnasticsOS organisational accounts) in accordance with contractual arrangements. Discovery-call recordings and transcripts are retained for a maximum of twelve months unless required for an active customer relationship or required by law. Data is securely deleted or anonymised when no longer required.
SECURITY We implement appropriate technical and organisational measures proportionate to the risk, including secure hosting, encrypted connections, role-based access controls and restricted internal access. While we take commercially reasonable steps to protect personal data, no system can guarantee absolute security.
YOUR RIGHTS Under UK GDPR you have the right to access your personal data, rectify inaccurate data, request erasure, restrict or object to processing, request data portability, withdraw consent (including marketing email, SMS or call-recording consent) and lodge a complaint with the Information Commissioner's Office (ICO). Requests may be made to support@nickruddock.com. The ICO can be contacted at www.ico.org.uk.
CHILDREN'S DATA Our Programmes are intended for adult coaches and leaders. We do not knowingly collect personal data from children under 13.
COOKIES We use cookies and similar technologies to operate our website, improve user experience, analyse traffic and support marketing activities. You may control cookies through your browser settings or our cookie banner.
CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. The latest version will always be available on our website.