Changing Bodies By Transforming Minds

Privacy Policy

Last updated: 13 August 2026

At BodySlims we are committed to protecting and respecting your privacy.

This Privacy Policy explains how we look after your Personal Data in connection with your use of our website, mobile application and Services, and in the context of receiving marketing communications from us. It also explains our obligations and your rights under data protection law.

This Privacy Policy applies to all Members using the BodySlims Platform, including our website, mobile application, wellness programmes and community features.

The Services are intended for persons aged 18 or over (or such higher age as may be required in your country to form a binding contract). If you are under this age, you should not use the Platform nor provide any personal information to us via the website or app.

DEFINITIONS

In this Privacy Policy the following words have the following meanings:

• “Data Controller” means the person who or organisation which determines the purposes for which, and the manner in which, any Personal Data is processed;
• “Data Processor” means the person who processes Personal Data on behalf of the Data Controller;
• “Data Subject” means a natural person whose Personal Data is processed by a Data Controller or Data Processor;
• “GDPR” means the EU General Data Protection Regulation (EU Regulation 679/2016);
• “Health Data” means any Personal Data relating to the physical or mental health of a Member, including information a Member chooses to share about their wellness activities, progress or wellbeing;
• “Member” means any individual who registers for and uses the BodySlims Platform pursuant to our Terms of Service;
• “Service” means all or any of the services provided through the BodySlims website and mobile application (www.bodyslims.com) (and “Services” shall be construed accordingly);
• “Sub-Processor” means any person or entity appointed by or on behalf of a Data Processor to process Personal Data on behalf of the Data Controller;
• “We, Our or BodySlims” means Dalmazio Limited, a company incorporated in Ireland.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

BodySlims acts as the Data Controller in respect of the Personal Data we collect about you as a Member, including your account details, wellness programme data, community activity and any other Personal Data you provide to us in connection with the Platform and Services.

Where we engage third-party providers to process Personal Data on our behalf (for example, payment processors or hosting providers), those providers act as Data Processors or Sub-Processors under written agreements that require them to protect your Personal Data in accordance with data protection law.

If you have any questions about this policy or about our data protection compliance, please contact us using the details set out below.

WHAT PERSONAL DATA DO WE COLLECT?

We may collect, use, store and transfer different kinds of Personal Data about you, which we have grouped together as follows:

• Identity Data includes your first name, last name, username or similar identifier, and date of birth.
• Contact Data includes your billing address, email address and telephone number.
• Financial Data includes payment card details processed through our payment provider, Stripe.
• Transaction Data includes details of payments to and from you and other details of Services you have purchased from us.
• Profile Data includes your username and password, your wellness goals, walking and mindfulness activity, progress updates, wellness journal entries, community posts, preferences, feedback and survey responses.
• Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences.
• Technical Data includes your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Platform.
• Usage Data includes information about how you use our website, mobile application, and Services.

Where you choose to share information about your health or wellbeing with us, for example in a wellness journal entry or community post, this may constitute a special category of Personal Data (“Health Data”) under the GDPR. We only process such Health Data on the basis of your explicit consent, given by voluntarily submitting that information, and you may withdraw that consent at any time by deleting the relevant content or contacting us.

HOW DO WE COLLECT YOUR PERSONAL DATA?

We collect Personal Data as follows:

Direct interactions

You may give us your Identity and Contact Data by registering for an account, filling in forms on our website or app, or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide when you:

• register as a Member;
• make an enquiry with regard to our Services;
• post or comment within the community;
• request marketing to be sent to you; or
• give us feedback.

Automated technologies or interactions

As you interact with our Platform, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this Personal Data using cookies and other similar technologies. Please see our cookie policy for further details.

Third parties or publicly available sources

We may receive Personal Data about you from various third parties, including:

• Contact, Financial and Transaction Data from providers of payment services, such as Stripe;
• Technical Data from our email and communications service providers, such as Mailchimp, Klaviyo and Hubspot; and
• Technical Data from analytics providers used to help us understand how our Platform is used.

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA AND WHAT IS OUR LEGAL BASIS?

We have set out below, in table format, a description of the ways we plan to use your Personal Data, and which of the legal bases we rely on to do so.

Note: When we process personal information for our legitimate interests, we make sure to consider and balance any potential impact on you (both positive and negative), and your rights under data protection law. Our legitimate interests do not automatically override your interests — we will not use your Personal Data for activities where our interests are overridden by the impact on you.

We have considered whether there are other less intrusive means to reach the purposes identified above while still serving the legitimate interests identified.

Our use of your Personal Data is subject to an extensive framework of safeguards that help make sure your rights are protected. These include the information given to you on how your Personal Data will be used, how you can exercise your rights to obtain a copy of your Personal Data, have it corrected or restricted, object to it being processed, and complain if you are dissatisfied. These safeguards help sustain a fair and appropriate balance so that our activities do not override your interests, fundamental rights and freedoms.

We use cookies to facilitate the use of our website and app. For detailed information on the cookies we use and the purposes for which we use them, see our cookie policy.

DATA PORTABILITY

If you close your account or your subscription ends, you may request an export of your Personal Data, for a reasonable period following termination. After this period, we may delete your Personal Data in accordance with the retention principles set out below, save where we are required by law to retain it.

DO WE SHARE YOUR PERSONAL DATA WITH ANYONE ELSE?

We may share your Personal Data with the following parties in connection with our processing of your Personal Data:

We require all third parties to enter into data processing agreements with us which comply with our obligations under the GDPR. These agreements require third parties to have appropriate security systems in place and to only use your Personal Data on our instructions and in accordance with data protection law.

In rare circumstances, we may be obliged to disclose Personal Data if disclosure is required to comply with the law.

KEEPING YOUR PERSONAL DATA SECURE

We take appropriate security measures against unlawful or unauthorised processing of Personal Data, and against the accidental loss of, or damage to, Personal Data. We limit access to your Personal Data to those employees, agents and other third parties who need it and who have agreed to be subject to a duty of confidentiality.

We have put in place procedures and technologies to maintain the security of Personal Data from the point of collection to the point of destruction. We have procedures in place to deal with actual and suspected data breaches, including an obligation on us to notify the supervisory authority and/or you, the Data Subject, where legally required to do so.

We do not transfer your Personal Data out of the European Economic Area, save as detailed herein.

FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?

Your Personal Data will be deleted when it is no longer reasonably required for the purposes described above, or you withdraw your consent (where applicable), and we are not legally required or otherwise permitted to continue storing it.

YOUR DATA PROTECTION RIGHTS

Under certain circumstances, by law you have the right to:

• Request information about whether we hold Personal Data about you, and, if so, what that information is and why we are holding or using it.
• Request access to your Personal Data (commonly known as a “Data Subject Access Request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
• Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it, or where you have exercised your right to object to processing (see below).
• Object to processing of your Personal Data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
• Object to automated decision-making, including profiling, so as not to be the subject of any automated decision-making by us using your Personal Data.
• Request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request transfer of your Personal Data in an electronic and structured form to you or to another party (commonly known as a right to “data portability”).
• Withdraw consent: where we rely on consent as a legal basis, you may withdraw consent at any time by contacting us. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to make a complaint about how your Personal Data is being processed by BodySlims, or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority, who can be contacted as follows:

CONTACT US

You can contact us with any queries, complaints or requests to exercise your data protection rights using the details below:

UPDATES TO THIS PRIVACY POLICY

Our Privacy Policy may change from time to time, and any changes will be posted on the Platform and will be effective when posted. As your use of the BodySlims Platform is subject to your acceptance of this Privacy Policy and any amendments to it, please check back regularly.

BodySlims Privacy Policy – Version 2.0 – 13 August 2026