Privacy Policy
Last updated: 1 October 2026
This policy explains what personal data Jimmick collects, why, and the rights you have under the GDPR, UK GDPR and applicable US state privacy laws.
1. Data we collect
Account data (name, email), coach billing data (via our payment processor), intake and check-in answers, messages, programme progress and technical data such as IP address.
2. Roles
For coach accounts Jimmick is the controller. For client data the coach is the controller and Jimmick is the processor.
3. Purposes and legal bases
Performance of contract, explicit consent for health-related data, legal obligations (record keeping) and legitimate interests (security, product improvement).
4. Sharing
We use sub-processors for hosting, email, payments and AI processing. International transfers are protected by Standard Contractual Clauses or the UK International Data Transfer Addendum. We do not sell or share personal information for cross-context behavioural advertising.
5. Retention
We retain data while your account is active and delete it within 90 days of termination unless a legal retention obligation applies.
6. Your rights
You may request access, correction, deletion, restriction, portability or object to processing, and withdraw consent at any time. California residents have the right to know, delete, correct and not be discriminated against. Email privacy@jimmick.com. You may complain to your local data protection authority (e.g. the ICO in the UK).