Privacy Policy

NRS Innovations Limited t/a JTX Fitness - Privacy Policy

Last Updated: 04.03.25

1. Introduction

At JTX Fitness (a brand of NRS Innovations Limited), we take privacy seriously. This policy explains how we collect, use, store, and protect personal data in compliance with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

We are committed to safeguarding the privacy and security of our customers, employees, and business partners.

For any data-related inquiries, please contact our Data Protection Lead (DPL) via our Contact Page.

2. What Data We Collect

We may collect and process the following personal data:

• Identity Data: Name, title, date of birth.
• Contact Data: Address, email, phone number.
• Transaction Data: Orders, payment details (handled securely by third-party processors).
• Technical Data: IP address, browser type, device details, and interactions with our website.
• Marketing Preferences: Your opt-in choices for marketing communications.

3. Lawful Basis for Processing

We process personal data based on the following legal grounds:

• Contractual Obligations: To fulfil orders and provide customer service.
• Legal Compliance: To meet regulatory and tax obligations.
• Legitimate Interests: To improve our services and provide relevant offers.
• Consent: When you actively opt in for marketing communications or non-essential cookies.

You can withdraw your consent at any time (see Section 7).

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience and analyse website traffic.

Customers can manage their cookie preferences via our Cookie Consent Management Tool, where you can:

• Accept all cookies.
• Reject non-essential cookies.
• Customise cookie settings per category.

For full details, see our Cookies Policy.

5. How We Use Your Data

• Process and deliver orders.
• Provide customer support.
• Improve website functionality and user experience.
• Send marketing communications (if opted in).
• Prevent fraud and ensure website security.

We will never sell or trade your personal data.

6. Who We Share Your Data With

JTX Fitness works with trusted third-party service providers who process personal data strictly for operational purposes and in compliance with GDPR. These include:

Third-Party Provider	Purpose	GDPR Compliance Link
Magento 2	Website & order processing	Magento Privacy Policy
Xero	Accounting & financial transactions	Xero GDPR Compliance
BJS, DX	Courier services & order delivery	BJS Privacy / DX Privacy
Opayo, PayPal, Apple Pay	Payment processing	Opayo GDPR / PayPal GDPR / Apple Pay Privacy
Microsoft 365	Business communications	Microsoft GDPR

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct any inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data.
• Right to Object: Opt out of direct marketing.
• Right to Data Portability: Request a transfer of your data to another service.
• Right to Withdraw Consent: Change your preferences for marketing or cookies at any time.

To exercise your rights, contact our Data Protection Lead via our Contact Page.

8. Data Retention

We retain personal data for the following periods:

• Order & Transaction Data: 6 years (for legal and tax purposes).
• Marketing Data: Until you withdraw consent.
• Customer Support Records: Up to 2 years.

When no longer required, data is securely deleted or anonymised.

9. Data Security & Breach Notification

We implement strict security measures, including:

• Secure website encryption (HTTPS).
• Access control measures.
• Regular system monitoring.

In case of a data breach, affected individuals and the UK ICO will be notified as required.

10. Contact & Complaints

For any concerns, please contact:

JTX Fitness, Unit 3, Harbour Way, Shoreham-By-Sea, West Sussex, BN43 5HZ

Contact JTX Fitness

If unsatisfied, you can lodge a complaint with the ICO.

This Privacy Policy may be updated periodically.