Privacy Policy
Gymnastics Growth Limited ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our websites (including nickruddock.com, gymnasticsos.com, gymnasticsid.com, gymnasticsleaders.com, gymnasticscongress.com and gymnasticswebinar.com, together with any associated subdomains), register for or claim a GymnasticsID™, download resources, register for webinars, purchase standalone digital products, purchase or access Gymnastics Growth Academy ("GGA"), Gymnastics Leaders ("GL") or GymnasticsOS™, join our launch lists or waiting lists, use our web or mobile platform, or otherwise engage with us as an individual or as part of a club or organisation. References to "Programme" in this Policy have the meaning given in the applicable Membership Terms where such terms apply. This Policy is issued in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
WHO WE ARE
Gymnastics Growth Limited is a company incorporated in England & Wales with company number 13031738 and registered office at Third Floor, 207 Regent Street, London, W1B 3HH. ICO registration: ZB248126. Contact email: support@nickruddock.com. For the purposes of data protection law, we may act as either Data Controller or Data Processor depending on how you engage with our services.
OUR PLATFORM AND SITES
GymnasticsOS™ is our umbrella platform, operated by Gymnastics Growth Limited, under which our paid content, courses and memberships sit — including Gymnastics Growth Academy ("GGA"), Gymnastics Leaders ("GL") and the GymnasticsOS™ platform itself. A GymnasticsID™ is the free, personal account you create to register for and access GymnasticsOS: a unique handle tied to a single email address that belongs to you. nickruddock.com is our personal-brand and content site, and our other sites (such as gymnasticscongress.com and gymnasticswebinar.com) support our events, webinars and related activities.
You must be aged 18 or over to register a GymnasticsID, and registration is open internationally in any territory where we make it available. Where you purchase or access GGA, GL or other products, the applicable Membership Terms or Terms of Sale also apply. This Policy explains what we do with the personal data you provide across all of the above.
WHEN WE ACT AS DATA CONTROLLER
We act as Data Controller where we determine the purposes and means of processing personal data. This includes GymnasticsID registration, GGA memberships (single-user licences), direct purchases by individuals, lead magnet downloads, webinar registrations, marketing communications, certification issuance, platform analytics used to improve our services, billing and subscription management, launch list and waiting list signups, and responding to enquiries. In these circumstances we are responsible for complying with UK GDPR in relation to that processing.
WHEN WE ACT AS DATA PROCESSOR (GYMNASTICS LEADERS / GYMNASTICSOS)
Where a Member Club purchases a Gymnastics Leaders or GymnasticsOS™ organisational licence and uses the platform to manage or monitor authorised users, we may process personal data on behalf of that Member Club. In such cases, the Member Club is the Data Controller and Gymnastics Growth Limited acts as Data Processor. Processing in this context is governed by the Data Processing Addendum forming part of the Membership Agreement. We process such personal data only on documented instructions from the Member Club and do not use it for our own independent purposes.
CATEGORIES OF PERSONAL DATA
Depending on how you interact with us, we may collect: Identity and Contact Data including name, email address, country of residence, telephone number, job title, club or organisation name and billing address; Account and Platform Data including your GymnasticsID handle, username, encrypted password, programme access history, certification status, CPD tracking records, engagement metrics, login activity and usage data; Financial Data including transaction history and subscription status (payment card details are processed by secure third-party providers and are not stored by us); Marketing and Lead Data including lead magnet registrations, webinar registrations, launch list and waiting list signups, referral codes and referral activity, scorecard or assessment submissions, email engagement data, SMS engagement data and marketing preferences; and Technical Data including IP address, device type, browser type, time zone, cookie identifiers and website usage data. We do not intentionally collect special category data unless expressly required and lawfully permitted.
HOW WE COLLECT DATA
We collect personal data when you claim a GymnasticsID, register for or purchase a Programme, download a free resource, complete an assessment or scorecard, are enrolled by a Member Club as an authorised user, join one of our launch lists or waiting lists, use our platform, interact with our website through cookies and analytics technologies, book a discovery or sales call, or engage with us through CRM, booking and email systems used to manage enquiries and marketing.
IMPORTED LEGACY DATA AND ACCOUNT CONSOLIDATION
We hold historic purchase and account records that we are migrating from a previous system. As part of bringing your history into GymnasticsOS™, we may link your GymnasticsID and email address to this imported legacy purchase data so that your past purchases appear in one place. You may also add and verify additional or previously used email addresses to your GymnasticsID in order to consolidate purchases made under different email addresses into a single account. We only link records where there is a reasonable match to you, and you can ask us to unlink or correct any record you believe has been associated with you in error.
PURPOSES AND LAWFUL BASES
We process personal data only where lawful. We rely on Contract where processing is necessary to deliver GymnasticsID registration, Programme access, certifications, subscriptions and platform functionality; Legitimate Interests to operate and improve our services, consolidate your historic records, monitor engagement, prevent misuse, analyse performance and communicate relevant offerings, balancing those interests against your rights; Consent where required for marketing emails, SMS messages or non-essential cookies (which may be withdrawn at any time); and Legal Obligation where processing is required for tax, accounting or regulatory compliance.
SMS COMMUNICATIONS
Where you provide your phone number and tick the separate SMS consent checkbox at signup, we may send you SMS messages relating to your account or our services. For the GymnasticsOS launch list specifically, this includes (i) a confirmation message when you join, (ii) occasional position-update notifications when your referral count crosses defined milestones, and (iii) a reminder when our product cart opens. SMS frequency is low — typical recipients receive between one and six messages over the duration of the launch period. All messages identify GymnasticsOS as the sender and include the instruction to reply STOP to unsubscribe at any time. Standard message and data rates from your carrier may apply. We do not share phone numbers with third parties for their own marketing purposes.
DISCOVERY AND SALES CALLS
Where you book a call with us (e.g. via our scheduling system), we may record the call and use automated transcription services to generate notes. Recording is disclosed in the booking confirmation and confirmed verbally at the start of each call. Recordings and transcripts are used to follow up on the conversation, to improve our products and services, and for our internal records. You may request deletion of any recording or transcript at any time by emailing support@nickruddock.com. Where applicable, this processing is performed under legitimate interest, balanced against your right to be informed and your right to object.
AI ASSISTANCE TOOLS
We use AI-powered tools, including automated transcription services and large language model assistants, to draft notes, summarise meetings and support internal productivity. Where these tools process documents or recordings containing personal data, we use enterprise or business-tier accounts operating under a data-processing agreement consistent with UK GDPR, with model training on our data disabled. We do not feed personal data into AI tools that operate on consumer terms without such safeguards.
ORGANISATIONAL REPORTING (GYMNASTICS LEADERS / GYMNASTICSOS)
Where a Member Club holds a Gymnastics Leaders or GymnasticsOS™ organisational licence, we may provide reporting and analytics relating to authorised users, including engagement, participation, usage, certification status and activity levels. Such reporting is provided for the internal professional development and performance management purposes of the Member Club. Authorised users acknowledge that such reporting forms part of the organisational licence structure.
DATA SHARING
We share personal data only where necessary and with appropriate safeguards. This may include payment processors, hosting and database providers, cloud storage providers, email marketing platforms, transactional email providers, SMS gateway providers, push notification providers, live-chat and customer-support platforms, video conferencing and meeting-transcription providers, scheduling platforms, CRM systems, webinar platforms, workflow automation tools, AI-assistance providers, analytics tools and assessment platforms. Where we engage third-party processors, we ensure appropriate contractual safeguards are in place in accordance with UK GDPR. We may disclose personal data where required by law, in connection with legal proceedings, or in the event of business restructuring. We do not sell personal data.
INTERNATIONAL TRANSFERS
Some service providers may operate outside the United Kingdom. Where personal data is transferred internationally, we rely on appropriate safeguards including UK adequacy regulations, UK-approved Standard Contractual Clauses and additional contractual and technical safeguards where appropriate.
DATA RETENTION
We retain personal data only for as long as necessary for the purposes for which it was collected, including financial records for a minimum of six years, active membership data for the duration of membership plus a reasonable archive period, marketing and SMS data until you unsubscribe, and processor data (GL / GymnasticsOS organisational accounts) in accordance with contractual arrangements. Discovery-call recordings and transcripts are retained for a maximum of twelve months unless required for an active customer relationship or required by law.
Claimed but dormant GymnasticsIDs. Where you have claimed a GymnasticsID but no product or membership is attached to it, we retain the identity record — your name, email address, chosen handle and registration details — for as long as your GymnasticsID remains active, so that your handle stays reserved to you and is ready when the platform opens. You can ask us to delete a dormant GymnasticsID at any time.
Retention after deletion. If you delete your account or ask us to erase your GymnasticsID, we retain a limited core record of your identity (such as name, email address and the fact an account existed) for six years afterwards. We keep this for legal, financial, tax, audit and dispute-resolution purposes, after which it is securely deleted or anonymised. We want you to know this before you register: deleting your account removes your active profile and stops ongoing processing, but a minimal record is retained for the period described above.
SECURITY
We implement appropriate technical and organisational measures proportionate to the risk, including secure hosting, encrypted connections, role-based access controls and restricted internal access. While we take commercially reasonable steps to protect personal data, no system can guarantee absolute security.
YOUR RIGHTS
Under UK GDPR you have the right to access your personal data, rectify inaccurate data, request erasure, restrict or object to processing, request data portability, withdraw consent (including marketing email, SMS or call-recording consent) and lodge a complaint with the Information Commissioner's Office (ICO). Requests may be made to support@nickruddock.com. The ICO can be contacted at www.ico.org.uk.
CHILDREN'S DATA
Our services, including GymnasticsID registration, are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18, and we do not knowingly collect personal data from children under 13 in any circumstances. If you believe someone under 18 has provided us with personal data, please contact support@nickruddock.com and we will remove it.
COOKIES
We use cookies and similar technologies to operate our website, improve user experience, analyse traffic and support marketing activities. Strictly necessary cookies (including those needed to register and secure your GymnasticsID) are used without consent; all other categories are set only with your prior consent. You may control cookies through our cookie banner and settings, or your browser settings. See our Cookies Policy for full detail.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The latest version will always be available on our website.