Privacy Policy

1. Who we are

This website is operated by Gym Near Me Cyprus (the data controller). For privacy-related requests you can reach us at gymnearmecyprus@gmail.com.

2. What data we collect

We may collect and process the following:

• Contact and enquiry data — Name, email, phone, and any message you send when adding a gym, claiming a gym listing, contacting us, or using our contact or advertise forms.
• Account data — Email address and password (stored securely) when you sign up or log in to the owner dashboard, and any profile or gym management information you provide.
• Gym listing data — Information you submit about your gym (name, address, opening hours, amenities, photos, description, etc.) when listing or updating a gym on our directory.
• Usage data — Technical data such as IP address, browser type, device type, and pages visited, if we use analytics or similar tools.

3. How we use your data

We use your data to:

• Run and display the gym directory (including listings you submit or manage).
• Respond to your enquiries and manage gym claims, listings, and advertising requests.
• Manage your account and access to the owner dashboard.
• Improve our website and services and comply with legal obligations.

We process your data on the basis of your consent (e.g. when you sign up or submit a form), or where necessary for the performance of a contract or our legitimate interests (e.g. operating the directory and improving our services), in line with applicable data protection law (including the GDPR where it applies).

4. Cookies and similar technologies

We may use cookies and similar technologies for essential operation of the site (e.g. keeping you logged in), for analytics, and for third-party services such as security (e.g. captcha). You can control cookies through your browser settings. Blocking certain cookies may affect how the site or embedded tools work.

5. Third parties

We use trusted third-party services that may process your data on our behalf, including:

• Vercel — Hosting and (optionally) analytics. Their privacy policy applies to infrastructure and any analytics they provide.
• Supabase — Authentication and database storage for accounts and gym listings. Their privacy policy applies to their processing.
• hCaptcha — Bot protection on signup and forms. Their privacy policy applies when you complete a captcha.
• Payment providers — If you purchase featured listings or advertising, payment data is handled by our payment provider; their policy applies to that processing.

We choose providers that respect privacy and, where required, use agreements (e.g. data processing agreements) to protect your data.

6. How long we keep your data

We keep your data only as long as needed for the purposes above (e.g. running the directory, responding to you, managing your account, or complying with legal retention requirements). You can ask us to delete your data earlier where there is no overriding obligation to retain it.

7. Your rights

Depending on where you live (e.g. in the EU/EEA or UK), you may have the right to:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Ask us to correct inaccurate or incomplete data.
• Erasure — Ask us to delete your personal data in certain circumstances.
• Portability — Receive your data in a structured, machine-readable format where applicable.
• Object or restrict — Object to certain processing or request restriction in certain cases.
• Withdraw consent — Where we rely on consent, you can withdraw it at any time.
• Complain — Lodge a complaint with a supervisory authority (e.g. your local data protection authority).

To exercise these rights, contact us at gymnearmecyprus@gmail.com. We will respond within the time limits required by applicable law.

8. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No system is completely secure; we encourage you to use strong passwords and secure channels when sharing sensitive information.

9. International transfers

Your data may be processed in countries outside your residence (e.g. where our hosting or SaaS providers operate). Where we transfer data from the EU/EEA or UK, we ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) are in place as required by law.

10. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top will be revised when we do. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy where permitted by law.

11. Contact

For any questions about this privacy policy or your personal data, please contact us at gymnearmecyprus@gmail.com.