Privacy Policy
Last updated: 2026-05-18
This Privacy Policy explains how personal data is processed through the Gymverse website, preorder flow, contact features, product enquiries, and athlete waitlist/onboarding features.
Controller
The current controller is:
Monoverse Platforms SINGLE MEMBER PC
62 Vasilissis Sofias Avenue
Athens, 11528
Greece
VAT number: 802241782
Email: [email protected]
Gymverse is currently a brand/project operated by Monoverse Platforms SINGLE MEMBER PC. A future Gymverse company is expected to be established and may become controller or joint/independent controller for Gymverse operations after a lawful transfer.
Future Gymverse Company Transfer
Monoverse expects to transfer Gymverse-related operations, preorder relationships, and related personal data to a future Gymverse company.
This may include preorder data, customer data, payment-status data, refund records, athlete waitlist data, contact history, and product enquiry data.
The transfer will be based on contract performance, legitimate interest in business continuity/reorganization, legal obligation where applicable, and/or consent where required by law.
If the transfer requires additional notice, consent, or another legal step, Monoverse will take that step before or at the time of transfer.
Data We Collect
Preorders
Preorder data may include:
- company name, where provided;
- tax ID, where provided;
- first name and last name;
- email address;
- phone number;
- country;
- state/region where required;
- city;
- postal code;
- shipping address;
- buyer type, such as personal/home use or business/professional use;
- athlete waitlist preference;
- preorder PID/reference;
- payment status and Stripe session/payment identifiers;
- refund request information;
- terms/privacy acceptance timestamps;
- admin review status.
Athlete Waitlist / Onboarding
Athlete data may include:
- username;
- email address;
- preferred language;
- region;
- entry path / how you want to enter Gymverse;
- gender;
- age group;
- training level;
- training styles;
- update/marketing opt-in;
- waitlist ID/reference;
- opt-out status.
Contact And Product Enquiries
Contact and product enquiry data may include:
- name, email, phone, company, message, product of interest, and other information you submit by email or forms.
Technical And Security Data
The website may process technical data such as IP address, browser/device data, request timestamps, security logs, rate-limit data, and anti-spam verification data.
Cloudflare Turnstile may be used to protect forms from spam and abuse.
Why We Use Personal Data
We use personal data to:
- operate the website;
- process preorder requests and payments;
- review, approve, reject, cancel, or refund preorders;
- send transactional emails;
- manage Stripe payment status and reconciliation;
- respond to enquiries;
- manage athlete waitlist/onboarding;
- send marketing/product updates only where consent is given;
- prevent spam, fraud, misuse, and security incidents;
- comply with legal, tax, accounting, and consumer-law obligations;
- prepare for lawful transfer to the future Gymverse company.
Legal Bases
Depending on the activity, processing may be based on:
- performance of a contract or steps before entering a contract;
- legal obligations;
- consent, especially for marketing updates;
- legitimate interests, such as website security, preorder administration, customer support, abuse prevention, internal records, and business continuity/transfer.
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing already carried out before withdrawal.
Recipients And Processors
Personal data may be shared with:
- Stripe, for payment processing and payment-status management;
- hosting/server infrastructure providers and technical administrators;
- email/SMTP providers or mail infrastructure;
- Cloudflare Turnstile, where anti-spam protection is enabled;
- accountants, lawyers, auditors, and compliance advisers;
- shipping/carrier providers when fulfillment begins;
- the future Gymverse company, subject to applicable law;
- authorities where required by law.
International Transfers
Some service providers, such as Stripe or Cloudflare, may process data outside the EU/EEA. Where this happens, transfers should rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.
Retention
Personal data is kept only as long as necessary for the purposes described above.
Indicative retention criteria:
- preorder/order/payment/refund records: for the duration needed to manage the preorder and for legal, tax, accounting, and claim limitation periods;
- cancelled/rejected/failed preorder records: for dispute prevention, accounting, fraud prevention, and legal limitation periods;
- athlete waitlist data: until opt-out/removal, launch of the community, or when it is no longer needed;
- marketing consent records: while consent is active and for a reasonable period after opt-out to prove compliance;
- contact enquiries: for as long as needed to respond and maintain business records;
- security/rate-limit logs: for a short period needed for security and abuse prevention, unless a longer period is needed for investigation.
Your Rights
Subject to applicable law, you may have the right to:
- access your personal data;
- correct inaccurate data;
- request deletion;
- request restriction;
- object to processing;
- request portability;
- withdraw consent;
- lodge a complaint with the Hellenic Data Protection Authority or another competent data protection authority.
To exercise rights, contact:
Marketing
Marketing or product-update emails are sent only where the user has opted in or where another lawful basis applies.
Athlete waitlist users can opt out using the link provided in emails or by contacting [email protected].
Cookies
See the Cookie Policy for current cookie and tracking information.
Changes
This Privacy Policy may be updated as Gymverse evolves, especially when the future Gymverse company is established, additional providers are added, analytics are enabled, or the website becomes a full e-shop.