Legal Centre
privacy

GDPR Rights

v2.0.0 4 Aug 2026

GDPR Rights

Version: 2.0.0 Last Updated: 2026-08-04

Introduction

Under the UK General Data Protection Regulation (UK GDPR), you have specific rights regarding your personal data. This page explains each right and how to exercise it with BodyFit by Mi7z.

Your Rights

1. Right to Be Informed

You have the right to know what data we collect, why, and how we use it. Our Privacy Policy provides this information in clear, plain language.

2. Right of Access

You can request a copy of all personal data we hold about you (Subject Access Request). We provide this in a structured, machine-readable format within 30 days. To make a request, contact privacy@bodyfit.mi7z.com.

3. Right to Rectification

If your personal data is inaccurate or incomplete, you can request correction. Most profile data can be corrected directly in Settings. For other corrections, contact privacy@bodyfit.mi7z.com.

4. Right to Erasure (Right to Be Forgotten)

You can request that we delete your personal data. Account deletion is available in Settings → Account Management. For partial deletion, contact privacy@bodyfit.mi7z.com. We delete data within 30 days, with limited exceptions for fraud prevention and legal obligation. See our Account Deletion Policy.

5. Right to Restrict Processing

You can request that we restrict processing of your data in certain circumstances, such as if you contest the accuracy of the data or object to processing. During restriction, we store your data but do not process it further.

6. Right to Data Portability

You can receive your personal data in a structured, commonly used, machine-readable format and transfer it to another service. This applies to data you provided to us and data generated by your activity. Contact privacy@bodyfit.mi7z.com to request a data export.

7. Right to Object

You can object to processing based on legitimate interests or for direct marketing. We will stop processing your data for that purpose unless we have compelling legitimate grounds. Contact privacy@bodyfit.mi7z.com to object.

8. Right Not to Be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that have legal or similarly significant effects. BodyFit's AI Coach provides recommendations, but you always make the final decision. We do not make solely automated decisions with significant effects without safeguards. See our AI Governance page.

Withdrawing Consent

Where we process data based on your consent (e.g., wearable data sync, optional cookies), you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

How to Exercise Your Rights

  • Email: privacy@bodyfit.mi7z.com
  • In-app: Settings → Privacy → Data Rights
  • Subject Access Requests: We respond within 30 days and do not charge a fee unless requests are manifestly unfounded or excessive

Identity Verification

To protect your data, we verify your identity before responding to data requests. We may ask for information to confirm you are the account holder.

Complaints

If you are unhappy with how we handle your data, you can complain to:

  • BodyFit: privacy@bodyfit.mi7z.com (see our Contact & Complaints page)
  • Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113

We encourage you to contact us first so we can try to resolve your concern.

Changes

We may update this page. Material changes will be communicated via in-app notification.

Related Policies