Privacy Policy

JackedCycle (“we”, “us”, “our”) is the data controller responsible for your personal data. We are based in Belgium and operate the website and digital fitness plan service at jackedcycle.com.

Contact: support@jackedcycle.com

2.1 Contact data — your name and email address, collected at checkout to deliver your plan and communicate with you about your order.

2.2 Health and body data — age, weight, height, body fat percentage, fitness level, sleep hours, training preferences, and fitness goals. This is special category data under GDPR Article 9. It is collected solely to generate your personalized fitness plan. We collect it only with your explicit consent.

2.3 Payment data — your payment is processed entirely by Stripe. JackedCycle never sees, stores, or has access to your card details.

2.4 Technical data — standard server logs (IP address, browser type) generated automatically when you use the service. These are not actively processed or stored beyond standard server operation.

• Contract performance (Article 6(1)(b) GDPR) — processing your name, email, and order data to fulfil your purchase and deliver your plan.
• Explicit consent (Article 9(2)(a) GDPR) — processing your health and body data to generate a personalized fitness plan. You provide this consent via the checkbox at checkout. You may withdraw it at any time by contacting us.
• Legitimate interests (Article 6(1)(f) GDPR) — maintaining records of transactions for up to 1 year for legal and operational purposes.

We share your data only with the following third-party service providers, strictly for the purposes described:

• Stripe — payment processing. Stripe processes your payment data as an independent data controller. See Stripe's privacy policy at stripe.com/privacy.
• Resend — email delivery of your fitness plan. Resend receives your name and email address solely to transmit the delivery email on our behalf.

We do not sell, rent, or share your data with any third party for marketing purposes.

Both Stripe and Resend are US-based companies. Transfers of your data to these providers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives an equivalent level of protection to that required within the EU.

• Order and quiz data: retained for 1 year from the date of purchase, then securely deleted.
• Email delivery logs: retained by Resend in accordance with their own retention policy.
• Payment records: retained by Stripe in accordance with their own retention policy and applicable financial regulations.

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data (“right to be forgotten”), subject to legal retention obligations.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw your consent to the processing of health data at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of the rights listed above, contact us at support@jackedcycle.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Belgian supervisory authority:

Autorité de protection des données (APD) / Gegevensbeschermingsautoriteit (GBA)
Website: www.dataprotectionauthority.be
Email: contact@apd-gba.be

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated date. Continued use of the service following any changes constitutes acceptance of the revised policy.