Privacy Policy

Jove Club Limited (we, us, our) is committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights under UK data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Jove Club Limited is the data controller for the personal data we collect. Registered in England and Wales, Company Number 15641675. Registered office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF.

Contact us about data matters: hello@thejoveclub.com

2. What Data We Collect

We collect personal data in the following circumstances:

• ·When you create an account: name, email address, password (hashed).
• ·When you book a trip or session: name, email, phone number, emergency contact details, dietary requirements, medical/health notes, fitness level.
• ·When you contact us: the content of your message and your contact details.
• ·When you sign up to our newsletter: email address.
• ·When you use the Jove Club Training app: your training goals, available equipment, fitness level and age range, and details about injuries. The injury detail includes the part of the body affected, how severe it is, what aggravates it, which activities you can still do, and anything you write in your own words. We also keep how hard each session felt and any notes you add afterwards. This is health data, and section 4 explains the legal basis we rely on to process it.
• ·If you photograph a physio or exercise programme: the app can read a photo of a printed programme so it can add those exercises to your plan. The image is sent to Anthropic to be read and is not stored on our servers. The exercises it finds are kept on your own device, not in our database.
• ·If you connect Strava: we store the access tokens that let the app talk to Strava on your behalf, along with your Strava name and athlete id, and we read the activities you record so they can appear against your plan. If you turn the setting on, we also post sessions you finish to your Strava feed. You can disconnect at any time in the app, which deletes the tokens and ends our access.
• ·Automatically when you use our website: IP address, browser type, device type, pages visited, and usage patterns via analytics tools.

3. How We Use Your Data

• ·To process your bookings and take payment.
• ·To send you booking confirmations, trip information, and important pre-departure communications.
• ·To provide emergency contact information to instructors and guides in case of incident.
• ·To send marketing emails if you have opted in (you can opt out at any time).
• ·To improve our website and services using anonymised analytics data.
• ·To comply with our legal obligations.

4. Legal Basis for Processing

• ·Contract: processing your booking and communicating about it.
• ·Legitimate interests: improving our services, website analytics, fraud prevention.
• ·Consent: marketing emails and use of non-essential cookies.
• ·Vital interests: sharing emergency contact and health information with guides in the event of a safety incident.
• ·Explicit consent: health data, which UK GDPR treats as a special category and protects more strictly. That covers the medical notes on a booking and the injury detail in the training app. We ask for it because we cannot build you a safe training plan or run a trip safely without it, and you can withdraw that consent at any time by emailing us or deleting your account in the app.

5. Who We Share Your Data With

We do not sell your data. We share it only where necessary:

• ·instructors and guides, to safely run your trip (name, emergency contact, relevant health info).
• ·Stripe, our payment processor. Governed by Stripe's own privacy policy.
• ·Supabase, our secure database provider (EU/UK servers).
• ·Resend / Mailchimp, for transactional and marketing emails respectively.
• ·PostHog, website analytics. If you complete a booking, your email address is used to link your activity across sessions. Anonymous visitors are not identified.
• ·Anthropic, whose Claude models write your training plan and read a physio programme if you photograph one. Your goals, fitness level and injury detail are sent so the plan can be built around them. Under Anthropic's commercial terms they may not train their models on what we send, and the data is handled under their data processing addendum.
• ·Strava, if you choose to connect it. We read the activities you record, and post sessions to your feed if you turn that on. Governed by Strava’s own privacy policy, and you can disconnect at any time.

6. How Long We Keep Your Data

• ·Booking records: 7 years (HMRC requirement).
• ·Account data: held while your account is active, then deleted on request or after 3 years of inactivity.
• ·Marketing consent: until you withdraw consent.
• ·Health, dietary and emergency contact details on a booking: kept after your trip, for two reasons. Emergency contact details stay on the booking record, and what you told us about your health before you travelled is the record that protects both of us if anyone ever says a trip caused them harm. A personal injury claim can be brought up to three years after the event, and UK data protection law specifically allows health information to be kept for defending legal claims. We are currently confirming the exact retention periods with our insurer and will state them here once they are settled. In the meantime, you can ask us to delete your health information at any time and we will, unless we are required to keep it. If you have chosen to keep health information on your account profile for future bookings, you can clear that yourself at any time from your account.
• ·Training app data: your plan, injury detail and session history are kept for as long as your account is open, because the app uses your history to decide what comes next. Deleting your account in the app removes all of it, along with any Strava connection.
• ·Physio programme photos: never stored by us. The photo is read once and discarded, and the exercises live on your own device.

7. Your Rights

Under UK GDPR you have the right to:

• ·Access the personal data we hold about you.
• ·Correct inaccurate data.
• ·Erase your data in certain circumstances.
• ·Restrict or object to how we process your data.
• ·Port your data to another service.
• ·Withdraw consent at any time for consent-based processing (e.g. marketing emails).

To exercise any of these rights, email us at hello@thejoveclub.com. We will respond within 30 days.

If you use the training app you can delete your account from inside it, under You. That removes your plan, your injury detail, your session history and any Strava connection straight away, and cancels your subscription if you have one. We keep your payment records, because a UK company has to keep records of what it was paid for six years.

8. Cookies

We use essential cookies to keep you signed in and to make the site function properly. We also use PostHog for analytics, anonymous visitors are not identified, but if you complete a booking your email is used to link your activity. You can disable non-essential cookies in your browser settings at any time.

9. Complaints

If you're unhappy with how we have handled your data, please contact us first at hello@thejoveclub.com. If you remain unsatisfied, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to This Policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect any changes. We will notify you of material changes by email if you have an account with us.