Privacy Policy

Last updated: Sep 21, 2026

This Privacy Policy is issued by Calisthenics 101 (ABN 19185912293), operating calisthenics-101.co.uk (the “Site”), referred to as “we,” “us,” or “our.”

Because our audience is global — including visitors from the United States, United Kingdom, European Union, Canada, India, and Australia — this policy addresses the requirements of the Australian Privacy Act 1988, the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA) and other US state privacy laws, Canada’s PIPEDA, and India’s Digital Personal Data Protection Act, where applicable to you.

1. What Personal Data We Collect

a) Information you provide directly

Email address and name (when you subscribe to our list, opt in for a lead magnet, or purchase a product)
Payment and billing information (processed by our third-party payment processor — see Section 6; we do not store full card details ourselves)
Comments left on the Site, along with your IP address and browser user agent (for spam detection)
Any information you provide when contacting us directly

b) Information collected automatically

IP address, browser type, operating system, device type, and general location (country/region level) via our analytics and advertising providers
Cookies and similar tracking technologies (see Section 5)

c) Training and performance data
If you purchase our digital product, some are delivered to you through a cloud-based spreadsheet platform, hosted under our account and shared out to you individually. As part of this, we collect and can view:

Your name and email address (to identify and grant you access to your program)
The workout data you log within it — including reps, sets, exercises completed, and programming/progression choices

We collect this data because it is necessary to operate the product (our progression logic adapts based on what you log) and, separately, because we review this data — individually and in aggregate — to identify bugs, evaluate whether programming is working as intended, and improve future versions of the product. This is not medical or health data in a clinical sense, but we treat it with the same care: it is not sold, not shared with advertisers, and not used for marketing purposes. Access is limited to the business owner. See Section 9 (Retention) and Section 10 (Your Rights) for how long we keep it and how to request its deletion.

d) Gravatar
An anonymized hash of your email address may be shared with the Gravatar service if you comment, to check for and display an associated profile picture.

2. Why We Collect This Data

To deliver the free content, lead magnets, and paid products you request, and to operate the adaptive logic within our training program/s
To send you emails, including our newsletter, course content, and promotional/marketing emails (you can unsubscribe at any time)
To process purchases and provide customer support
To review product performance and usage patterns so we can fix issues and improve our programming
To operate, maintain, and improve the Site
To serve relevant advertising and measure Site/campaign performance
To detect and prevent spam or fraud

3. Legal Bases for Processing (EU/UK Visitors)

If you are located in the EEA or UK, we rely on the following legal bases under the GDPR/UK GDPR to process your personal information:

Consent — for example, when you opt in to our email list or accept non-essential cookies. You can withdraw consent at any time.
Performance of a contract — for example, processing your payment and account data to deliver a product you purchased, and using your logged training data to run the adaptive programming logic itself.
Legitimate interests — for example, using aggregated and individual training data to identify bugs and improve our programming, or using Site analytics to understand usage, where these interests do not override your rights and freedoms.
Legal obligation — for example, retaining purchase records for tax and accounting purposes.

4. Email Marketing

We use a third-party email marketing platform to manage our subscriber list and send emails. When you subscribe, your email address and name are stored in that platform’s systems.

You may unsubscribe at any time via the link in any email.
We do not sell or rent your email address to third parties.
Our email provider may process your data outside your home country; the safeguards that apply depend on the provider we use at the time, consistent with Section 8 below.

(We may change our email service provider from time to time. This policy applies regardless of which specific platform we use.)

5. Cookies and Do Not Track

We use cookies and similar technologies for:

Site functionality — e.g., remembering your comment details if you opt in (typically retained for up to 1 year)
Analytics — to understand aggregate Site usage
Advertising — our advertising and retargeting partners use first- and third-party cookies to serve and measure ads (see Sections 7 and 7a)

You can disable cookies through your browser settings. Disabling cookies may affect Site functionality, and disabling advertising cookies does not stop ads from displaying — it only makes them non-personalized.

Do Not Track: Most browsers offer a “Do Not Track” (DNT) signal. There is currently no unified industry standard for how businesses should respond to DNT signals, so at this time we do not respond to them. We will revisit this if a legal or industry standard is adopted.

6. Payment Processing

Purchases of our digital products are processed by a third-party payment processor (currently Stripe). We do not store your full payment card details on our servers — payment data is handled directly by our processor under its own privacy and security policies.

(We may change payment processors from time to time. This policy applies regardless of which specific processor we use at any given time.)

7. Advertising

We work with third-party advertising partners (currently including Mediavine) to manage interest-based advertising on the Site. These partners may use first- and third-party cookies and similar technologies to monitor interaction with ads and to target and optimize advertising.

Data collected for personalized advertising via these partners may include your IP address, operating system, device type, browser type, website language, and email (in hashed form).

You can learn more or opt out via:

California and other US state residents: this advertising activity may be considered a “sale” or “share” of personal information under applicable state law. You may opt out via the methods above, via a recognized Global Privacy Control (GPC) browser signal (which we honor), or by contacting us directly.

7a. Meta (Facebook/Instagram) Pixel and Conversions API

We use the Meta Pixel and, where applicable, Meta’s Conversions API, to track visitor behavior on this Site (such as page views, sign-ups, and purchases) and to measure and optimize our advertising on Facebook and Instagram.

This allows us to build custom and lookalike audiences, re-target visitors, and measure ad effectiveness. Data shared with Meta may include your IP address, device information, and (in hashed, non-reversible form) identifiers such as your email address. Meta processes this data under its own Privacy Policy and Business Tools Terms.

You can opt out via Facebook Ad Preferences or the opt-out tools listed in Section 7.

8. Who We Share Your Data With

We do not sell your personal data, and we do not collect personal information about you from third parties — the data we hold is what you provide us directly or what is generated through your use of our Services.

We share data only with:

Service providers who help us operate the business (e.g., our email platform, payment processor, the cloud platform that hosts and delivers our training program/s, analytics tools, and advertising partners)
Automated spam detection services (for comments)
Where required by law, regulation, or legal process

The specific providers we use may change over time; this policy applies to whichever providers are in use at any given time, all of which are bound by their own privacy obligations.

9. International Data Transfers

Because our service providers may process data outside your country of residence, your data may be transferred internationally, including to the United States. Where required (e.g., under GDPR), such transfers rely on appropriate safeguards, such as Standard Contractual Clauses, implemented by our providers.

10. Data Retention

Comments: retained indefinitely (so we can recognize and auto-approve follow-up comments), unless you request deletion.
Email/subscriber data: retained until you unsubscribe or request deletion.
Training/performance data: retained for as long as you have active access to the purchased program/s. If you request deletion of your account or data, or your access is revoked, we will delete your logged training data within a reasonable period, except where a de-identified/aggregated form is retained for product improvement purposes.
Purchase records: retained as required for tax, accounting, and legal obligations (typically 5–7 years under Australian tax law).

11. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data (“right to be forgotten”)
Object to or restrict certain processing
Data portability
Withdraw consent at any time (e.g., unsubscribe from emails)
Opt out of targeted advertising, sale, or sharing of your data, or profiling with legal effect (US state laws)
Non-discrimination for exercising your rights
Lodge a complaint with your local data protection authority (e.g., the OAIC in Australia, the ICO in the UK, a relevant DPA in the EU, or your state Attorney General in the US)

US residents: depending on your state (including but not limited to California, Colorado, Connecticut, Virginia, Utah, and others with applicable privacy laws), you may also have the right to obtain a list of categories or specific third parties we’ve disclosed data to, and to appeal a decision if we decline your request — appeals can be submitted via the contact details below.

To exercise any of these rights, contact us. We will verify your identity before actioning sensitive requests (e.g., data deletion) and will respond within the timeframe required by applicable law (e.g., 30 days under GDPR).

12. Children’s Privacy

This Site and our products are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Embedded Content

Articles or emails may include embedded content (e.g., YouTube videos). Embedded content behaves as if you visited the third-party site directly, and that site may collect data about you per its own privacy policy.

14. Data Security

We take reasonable technical and organizational measures to protect your data, including restricting access to your training/performance data to the business owner only. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

15. Changes to This Policy

We may update this Privacy Policy from time to time, including to reflect changes in the specific tools or providers we use. Changes will be posted on this page with an updated “Last updated” date. Material changes affecting your rights will be communicated via email or Site notice where required.

16. Contact Us

Calisthenics 101 (ABN 19185912293)
For questions about this Privacy Policy or to exercise your data rights, please contact us.