Privacy Notice

Last updated: 18 October 2026

This privacy notice tells you what to expect when The Superhero Project ("we", "us", "our") collects and uses your personal information.

1. Contact details

Organisation: The Superhero Project
Contact email: support@superheroproject.app

The Superhero Project is the data controller for the personal information processed through this website and membership platform.

2. What personal information we collect

We currently collect and process the following information:

• Account identifiers: name, email address and encrypted login credentials.
• Financial and transaction records: subscription status, purchase dates and billing history. Payment card transactions are processed securely by Stripe; we do not store full payment card numbers.
• Training and progress data: body weight entries, target goals, private progress photographs and workout notes provided by members.
• Course engagement: video lesson progress and completion records.
• Community content: comments, discussions and media posted within the member community.
• Technical and usage data: IP addresses, browser types and page interaction data collected via Google Analytics and Meta technologies (the Meta Pixel).

3. How we get personal information and why we have it

Most of the personal information we process is provided to us directly by you when you:

• register for an account or purchase a membership;
• log progress metrics or participate in the community;
• contact us with queries.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

• Contractual obligation: to deliver membership services, maintain your account, provide access to video lessons and process subscription payments.
• Legal obligation: to maintain financial and accounting records required by UK tax legislation.
• Legitimate interests: to monitor site security, maintain system integrity and improve our services.
• Consent: where you choose to accept optional analytical or marketing cookies. You can block or delete cookies at any time in your browser settings.

4. Sharing your personal information

We do not sell or rent personal information. We share personal data only with trusted data processors who provide necessary infrastructure:

• Stripe Payments Europe, Ltd. (payment processing)
• Cloud and database infrastructure providers (secure hosting and application data storage)
• Google LLC (aggregated website analytics and YouTube video playback)
• Meta Platforms Ireland Ltd. (measuring visits and purchases)
• Transactional email services (delivery of account receipts, billing notifications and password resets)

When personal data is transferred outside the UK, appropriate safeguards are in place, including UK International Data Transfer Agreements or Standard Contractual Clauses.

5. How we store your personal information and how long we keep it

Your information is stored securely within encrypted databases and private cloud storage.

• Member account and progress records: retained for the duration of active membership and securely deleted within 12 months following cancellation, unless an earlier deletion request is received.
• Financial and invoicing records: retained for 6 years in compliance with UK statutory accounting obligations.

6. Your data protection rights

Under UK data protection law, you have rights including:

• Your right of access: you have the right to ask us for copies of your personal information.
• Your right to rectification: you have the right to ask us to correct information you think is inaccurate.
• Your right to erasure: you have the right to ask us to delete your personal information in certain circumstances.
• Your right to restriction of processing: you have the right to ask us to restrict the processing of your personal information.
• Your right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you.

You are not required to pay any fee for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at support@superheroproject.app if you wish to make a request.

7. How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at support@superheroproject.app.

You can also complain to the Information Commissioner's Office (ICO) if you are unhappy with how we have used your data:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: ico.org.uk