Privacy Policy

Your privacy matters to us. Learn how we collect, use, and protect your information.

📅 Last Updated: 2026-10-21 22:59:02

Introduction

Welcome to ELYTX ("we," "us," "our," or "Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website elytx.ie, use the ELYTX mobile app, and use our services.

By using our website, our mobile app, or our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the site or the app.

1. Information We Collect

Personal Information

We collect personal information that you voluntarily provide when you:

Create an account on our website or in the ELYTX mobile app
Make a purchase or place an order
Subscribe to our newsletter
Contact us with inquiries or support requests
Participate in the ELYTX Challenge or Fitness Journey Tracker
Leave reviews or feedback

The personal information we collect may include:

Contact Information: Name, email address, phone number, shipping address, billing address
Account Information: Username, password, profile preferences, profile photo
Payment Information: Credit card details, billing information (processed securely through Stripe)
Fitness Data: Workout logs, personal records, goals, and progress (if you use our Fitness Journey Tracker)
Order Information: Purchase history, order details, shipping preferences

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

Device Information: IP address, browser type, operating system, device type
Usage Data: Pages visited, time spent on pages, links clicked, referral source
Location Data: Approximate geographic location based on IP address
Cookies and Similar Technologies: See the "Cookies and Tracking Technologies" section below

Advertising Data (website only, with your consent)

If you allow marketing cookies in the cookie banner on elytx.ie, the Meta Pixel and the TikTok Pixel collect information about your visit: the pages and products you view, searches, items added to the basket or wishlist, checkout steps and purchases (with the order value and the product codes, never card details), together with your IP address, browser information, the cookie identifiers they set (_fbp, _fbc, _ttp) and, if you arrived from one of our ads, the ad click identifier. When you are logged in or have completed a checkout we also share your email address, phone number, name, town and postcode with Meta and TikTok in hashed (SHA-256) form, so they can match the event to an account they already hold. This happens only on the website, only after you choose "Accept all" or switch on "Marketing", and never for workout, health or fitness data. See "Cookies and Tracking Technologies" below for the details and how to withdraw.

Workout and Fitness Data You Enter

When you use the ELYTX mobile app you can record training information. This includes exercises, sets, repetitions, weights lifted, distances, durations, bodyweight, height, training goals and personal records. You may also add a profile photo and take part in social features such as buddy activity feeds, comments, reactions, challenges and leaderboards.

This information is stored on our servers because it is the core function of the app: it is what allows your history, progress charts and personal records to persist across devices. You can delete it at any time by deleting your account from within the app.

Health and Fitness Data from Apple Health

If you use an Apple device and grant permission, the ELYTX app reads the following data from Apple Health (HealthKit) so it can show your fitness progress alongside the workouts you log:

Steps
Heart rate
Active energy burned
Workouts

This data is read on your device and displayed to you only. It is never transmitted to our servers, never stored by us, and never shared with any third party. It is not used for advertising or marketing, it is not used for profiling or automated decision-making, and it is never sold.

Granting access is optional and the rest of the app works without it. You can withdraw permission at any time in Settings › Privacy & Security › Health › ELYTX on your device, or by turning the feature off inside the app. Withdrawing permission stops any further reading immediately.

Heart rate and active energy are special category data concerning health under Article 9 of the GDPR. Where we process them we do so on the basis of your explicit consent, given when you grant the Health permission, and you may withdraw that consent at any time as described above.

Push Notification Tokens

If you enable notifications in the mobile app, we store a device token issued by Firebase Cloud Messaging, together with your device platform, so we can deliver notifications to you. The token is linked to your ELYTX account and is removed when you log out, disable notifications, delete your account, or uninstall the app. It does not identify you personally and is not used for advertising.

2. How We Use Your Information

We use the information we collect for various purposes, including:

Order Fulfillment: Processing and delivering your orders, managing payments, sending order confirmations and shipping updates
Account Management: Creating and managing your account, providing customer support, authenticating users
Communication: Sending marketing emails, newsletters, promotional offers (you can opt-out anytime)
Service Improvement: Analyzing usage patterns, improving website functionality, developing new features
Personalization: Tailoring content, recommendations, and user experience based on your preferences
Security: Detecting and preventing fraud, protecting against security threats, enforcing our terms of service
Legal Compliance: Complying with legal obligations, responding to legal requests, protecting our rights
Fitness Features: Enabling the Fitness Journey Tracker, ELYTX Challenge, and related gamification features
App Notifications: Sending you the notifications you have opted in to, such as workout reminders and buddy activity
Advertising (with your consent): Measuring whether our Facebook, Instagram and TikTok ads lead to visits and sales, showing relevant ELYTX ads to people who visited elytx.ie or excluding existing customers from them, and finding new customers with similar interests

Marketing Communications: We will only send you marketing emails if you have opted in. You can unsubscribe at any time using the link in our emails.

We never use health or fitness data for advertising or marketing, and we never sell it.

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We share information with trusted third-party service providers who assist us in operating our website and delivering our services:

Payment Processing: Stripe (secure payment gateway)
Shipping: Courier (delivery services)
Email Services: Email marketing and transactional email providers
Hosting: Web hosting and infrastructure providers
Push Notifications: Firebase Cloud Messaging (Google), which receives only your device token in order to deliver notifications

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Health data read from Apple Health is never shared with any of these providers, because it never leaves your device.

Advertising Platforms

Only when you have allowed marketing cookies on elytx.ie, we share the advertising data described in section 1 with:

Meta Platforms Ireland Limited (Meta Pixel and Conversions API), for Facebook and Instagram advertising
TikTok Technology Limited (TikTok Pixel and Events API), for TikTok advertising

Joint controllers. For the collection of this data on our website and its transmission to them, Meta and TikTok act together with us as joint controllers under Article 26 GDPR, on the terms of Meta's Business Tools Controller Addendum and TikTok's Joint Controller Addendum. Each platform is solely responsible for how it processes the data afterwards, as described in the Meta Privacy Policy and the TikTok Privacy Policy.

International transfers. Meta and TikTok may transfer advertising data outside the European Economic Area, including to the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the recipient is certified, the EU-US Data Privacy Framework. We do not transfer your other personal data outside the EEA.

Legal Requirements

We may disclose your information if required by law or in response to:

Court orders, subpoenas, or other legal processes
Government or regulatory investigations
Protection of our rights, property, or safety, or that of our users or the public
Prevention of fraud or illegal activities

Business Transfers

If ELYTX is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account Information: Retained until you request account deletion or remain inactive for 3 years
Order History: Retained for 7 years for accounting and legal compliance purposes
Marketing Data: Retained until you unsubscribe or request deletion
Workout and Fitness Data: Retained until you delete it or delete your account
Deleted Accounts: When you delete your account we remove your personal details from past orders and reviews. Anonymised sales records are retained for 7 years as required by tax and accounting law, and can no longer be linked back to you
Apple Health Data: Never retained by us, because it is never transmitted to our servers

When we no longer need your information, we will securely delete or anonymize it in accordance with data protection laws.

5. Security of Your Information

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it:

Encryption: All sensitive data transmitted between your browser or app and our servers is encrypted using SSL/TLS technology
Secure Payment Processing: We use Stripe, a PCI DSS compliant payment processor. We never store full credit card details on our servers
Access Controls: Access to personal information is restricted to authorized personnel only
Regular Security Audits: We regularly review and update our security practices
Secure Infrastructure: Our servers and databases are protected by firewalls and security monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Your Responsibility: Please keep your account password secure and do not share it with others. Contact us immediately if you suspect unauthorized access to your account.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Essential cookies are always on because the shop cannot work without them. Advertising cookies stay off until you allow them in the cookie banner.

What Are Cookies?

Cookies are small text files stored on your device that help websites remember your preferences and improve functionality.

Essential Cookies (always on)

ELYTX_SECURE_SESSION: keeps you logged in, holds your basket and your checkout stock reservation, and protects forms against forgery. Deleted when you close your browser or after 30 minutes without activity
elytx_consent: remembers the choice you made in the cookie banner (6 months)
Stripe (__stripe_mid, __stripe_sid): set on the checkout page by our payment provider to prevent payment fraud (1 year / 30 minutes)

Your wishlist is stored in your browser's local storage, not in a cookie, and is only sent to us when you open it.

Advertising Cookies (only with your consent)

If you choose "Accept all" or switch on "Marketing" in the cookie banner, we load:

Meta Pixel (Meta Platforms Ireland Limited): cookies _fbp and _fbc, 90 days
TikTok Pixel (TikTok Technology Limited): cookies _ttp and _tt_enable_cookie, 13 months

These tools record the pages and products you view, searches, basket and wishlist additions, checkout steps and purchases (order value and product codes), your IP address and browser information. When you are logged in or have completed a checkout they also receive your email address, phone number, name, town and postcode in hashed (SHA-256) form, so the platform can match the event to an account it already holds. We send the same events to Meta's Conversions API and TikTok's Events API directly from our server, under the same consent rule, so that measurement still works when a browser blocks the pixel. Meta and TikTok use this data to measure the results of our ads, to show you relevant ads on Facebook, Instagram and TikTok, to build audiences of visitors and to find people with similar interests. Workout, health and fitness data from the ELYTX app is never shared with them.

The legal basis is your consent (Regulation 5(3) of the ePrivacy Regulations 2011 and Article 6(1)(a) GDPR). You can withdraw it at any time; withdrawing does not affect the lawfulness of processing before the withdrawal.

Managing Cookies

Choose "Essential only" in the banner, or open Cookie Settings in the website footer at any time to change your choice. Switching marketing off deletes the advertising cookies we can reach and stops any further sharing; events already sent are kept by Meta and TikTok under their own policies
We ask again every 6 months, or sooner if this policy changes
Your browser settings let you view, block and delete cookies. Blocking essential cookies will stop you logging in, keeping a basket or paying
You can also control ad personalisation at the platforms: Meta ad preferences, the TikTok app under Settings and privacy › Ads, and Your Online Choices

The ELYTX mobile app does not use cookies and does not contain the Meta or TikTok pixels. It stores a session token on your device so you stay logged in.

Our Cookie Policy lists every cookie with its purpose and lifetime.

7. Your Privacy Rights

Under GDPR and other data protection laws, you have the following rights regarding your personal information:

Right to Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure: Request deletion of your personal information ("right to be forgotten")
Right to Restrict Processing: Request that we limit how we use your information
Right to Data Portability: Request a copy of your data in a machine-readable format
Right to Object: Object to our processing of your personal information for certain purposes
Right to Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

How to Exercise Your Rights

To exercise any of these rights, please contact us at elytxteam@elytx.ie. We will respond to your request within 30 days.

You can delete your account and its associated data at any time from within the ELYTX mobile app, under Profile and then Delete Account.

To withdraw your consent to advertising cookies, open Cookie Settings in the footer of elytx.ie and choose "Essential only", or delete the cookies in your browser. You can also object to the advertising use of your data at Meta and TikTok through the links in section 6.

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal information properly.

8. Third-Party Services

Our website may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to these external sites.

Third-Party Services We Use

Stripe: Payment processing (subject to Stripe's Privacy Policy)
Courier: Shipping and delivery services
Social Media Platforms: For social sharing and engagement
Apple HealthKit: Reads health and fitness data on your device with your permission. This data is never sent to us (subject to Apple's Privacy Policy)
Firebase Cloud Messaging (Google): Delivers push notifications to your device (subject to Google's Privacy Policy)
Firebase (Google): Core mobile app services (subject to Google's Privacy Policy)
Meta Pixel and Conversions API (Meta Platforms Ireland Limited): Advertising measurement and audiences for Facebook and Instagram, only with your cookie consent (subject to Meta's Privacy Policy)
TikTok Pixel and Events API (TikTok Technology Limited): Advertising measurement and audiences for TikTok, only with your cookie consent (subject to TikTok's Privacy Policy)

We encourage you to review the privacy policies of any third-party services you interact with. We are not responsible for the privacy practices of these external sites or services.

9. Children's Privacy

Our website, mobile app and services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at elytxteam@elytx.ie. We will promptly delete such information from our systems.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make significant changes, we will:

Update the "Last Updated" date at the top of this page
Notify you via email (if you have an account with us)
Display a prominent notice on our website
Ask you to review and accept the updated policy the next time you open the app

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: elytxteam@elytx.ie
General Inquiries: elytxteam@elytx.ie
Contact Page: Contact Support

We will respond to your inquiry as soon as possible, typically within 2-3 business days.

Questions About Your Privacy?

We're committed to transparency and protecting your personal information. If you have any questions or concerns, we're here to help.

Wishlist