Spotmate Privacy Policy

Last updated: September 2025

1. Introduction

Spotmate (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains:

  • What personal data we collect
  • How and why we use it
  • Who we share it with
  • Your rights under UK and EU data protection laws

By creating an account or using Spotmate, you agree to the terms of this Privacy Policy.

2. Data We Collect

We may collect the following categories of data when you use Spotmate:

  • Identity data: name, email address, account details
  • Profile data: fitness goals, preferences, photos, content you upload.
  • Device & usage data: IP address, device type, operating system, app activity, log files.
  • Health & fitness data (where entered by you): workouts, meal plans, metrics.
  • Communications data: support requests, in-app messages, feedback
  • Cookies & tracking data: browser cookies, analytics, advertising identifiers

3. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: when you choose to share optional information or receive marketing
  • Contract: to provide the services you signed up for
  • Legitimate interests: to improve our service, maintain security, prevent fraud
  • Legal obligations: where required to comply with the law

4. How We Use Your Data

Your data may be used to:

  • Operate and maintain the Spotmate service
  • Authenticate and secure your account
  • Personalise your experience and recommendations
  • Provide customer support and respond to queries
  • Communicate important updates, service changes, or marketing (if you consent)
  • Detect and prevent fraud, abuse, or objectionable behaviour
  • Comply with legal or regulatory obligations

5. Sharing Your Data

We may share your data with:

  • Service providers (e.g. cloud hosting, analytics, payment processors) acting under contract
  • Regulatory or law enforcement authorities , where legally required
  • Business partners or acquirers if Spotmate undergoes a merger, acquisition, or sale

We will never sell your personal data to third parties.

6. International Transfers

If data is transferred outside the UK/EU, we use appropriate safeguards such as Standard Contractual Clauses or other legal mechanisms to protect your rights.

7. Data Retention

We retain your personal data only as long as necessary:

  • Account information: kept until your account is deleted, plus a short period to settle obligations
  • Usage logs: kept for up to 24 months
  • Aggregated or anonymised data: may be kept indefinitely

8. Cookies & Tracking

Spotmate uses cookies and similar technologies to:

  • Enable essential functions (e.g. login, session management)
  • Analyse usage patterns (analytics)
  • Improve features and personalise content

You can manage or disable cookies in your browser settings, but some features may not work properly.

9. Your Rights

You have the following rights under UK GDPR:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent at any time (where consent is the basis)
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, please contact us (see Section 11).

10. Security

We apply industry-standard measures to protect your data, including encryption, secure servers, and access controls. While we work hard to safeguard your data, no system is completely secure.

11. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact:
Email: contact@spomate.co.uk

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you via email or in-app notification. Your continued use of Spotmate after updates means you accept the revised policy.