Privacy Policy
Last updated: 2026
This policy explains what personal data FitnessForge (“we”, “us”) collects when you visit this website or buy FORGE — The Complete Body Blueprint, why, and what rights you have. We collect as little as possible. We are the “controller” (or “data fiduciary”) of this data.
1. What we collect and why
| Data | Why we use it | Legal basis (EU/UK GDPR) |
|---|---|---|
| Your email address | To deliver your download, send your order confirmation, and help you recover a lost link | Performing our contract with you |
| Order details (order ID, amount, currency, date, payment status) | Accounting, tax records, handling payment issues | Contract; legal obligation |
| Proof you accepted our Terms and the immediate-delivery waiver (date, time and wording version) | To show that consumer-law requirements were met | Legal obligation; legitimate interests |
| IP address and browser type | Fraud prevention and security (e.g. rate-limiting); ad measurement only if you accept cookies | Legitimate interests; consent (ads) |
Your card details are entered directly into Razorpay’s secure checkout. We never see or store them. Razorpay processes payment data as an independent controller under its own privacy policy.
2. Cookies and advertising
The website works without any non-essential cookies. Only if you click “Accept” on the cookie banner do we load the Meta (Facebook/Instagram) Pixel, which sets cookies so we can measure how our ads perform. If you accept and then buy, we also send Meta your purchase event with a hashed (scrambled, unreadable) version of your email. If you decline, none of this happens.
If your browser sends a Global Privacy Control signal, we treat it as “Decline” automatically. You can change your choice at any time by clearing this site’s data in your browser.
3. Who we share data with
- Razorpay — to process your payment.
- Our email provider — to send your download link and confirmation.
- Our hosting provider — which stores our server and database.
- Meta Platforms — only if you accepted advertising cookies, as described above.
We do not sell your personal information, and we do not add you to marketing lists. We only email you about your purchase unless you separately ask to hear from us.
4. International transfers
We are based in India, and our service providers may process data in other countries. Where data from the EU or UK is transferred, we rely on the safeguards our providers offer, such as Standard Contractual Clauses.
5. How long we keep it
Unfinished checkouts are deleted after 48 hours. Records of completed purchases are kept for as long as tax and accounting laws require (generally up to 8 years), then deleted.
6. Security
All traffic is encrypted with HTTPS. Download links are random, time-limited and stored only as one-way hashes. Access to our server is restricted.
7. Your rights
Depending on where you live — including under the EU/UK GDPR, India’s Digital Personal Data Protection Act 2023, and US state laws such as the California Consumer Privacy Act — you may have the right to:
- access the personal data we hold about you and get a copy;
- correct it, or ask us to delete it (we may need to keep purchase records the law requires us to keep);
- object to or restrict how we use it, and withdraw consent at any time;
- opt out of the “sharing” of your data for advertising (decline cookies, or use Global Privacy Control);
- not be treated differently for exercising these rights;
- complain to your local data protection authority (for example the ICO in the UK, or your EU country’s supervisory authority).
To make a request, email [email protected] from the address you used to buy. We respond within 30 days.
8. Children
This website is not directed at children under 16, and we do not knowingly collect their data.
9. Contact
Grievance Officer: FitnessForge · [email protected]