Privacy Policy for Mumbells

Last Updated: 27 July 2026

1. Who We Are

This Privacy Policy applies to mumbellsfit.com (referred to as "Mumbells", "we", "us", or "our"). Mumbells is a digital membership brand operated as part of PantheraPT.

Data Controller: PantheraPT
Registered / Contact Address: Ullswater Crescent, Chester, CH2 2PN, United Kingdom
Contact Email: hello@mumbellsfit.com
Governing Law: United Kingdom (UK Data Protection Act 2018 & UK General Data Protection Regulation / UK GDPR)

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at hello@mumbellsfit.com.

2. Personal Data We Collect

We collect personal data when you subscribe to our digital membership, browse our website, or interact with our advertisements. The types of data collected include:

Identity & Account Data: Name, email address, and billing address.
Subscription & Transaction Data: Information regarding your digital membership subscription and payment history (managed via CartGenie). Note: Payment details are securely processed directly by Stripe (including Apple Pay and Google Pay). We do not store or process complete payment card details or wallet tokens on our own servers.
Technical Data: IP address, browser type, device information, operating system, time zone settings, and general location data.
Usage Data: Pages viewed, time spent on pages, links clicked, referral source, and cart/checkout interactions (collected via Google Analytics and CartGenie).
Marketing & Advertising Data: Your marketing preferences and interaction data gathered via Meta Ads (Meta Pixel) and Google Ads to measure campaign performance and show relevant advertisements.

3. How We Use Your Data & Our Lawful Basis

Under the UK GDPR, we must have a valid legal reason (known as a "lawful basis") to collect and use your personal data. Here is how we use your information and the legal grounds we rely on for each activity:

Fulfilling Digital Memberships & Subscriptions
- Data Used: Identity, Account, and Transaction Data.
- Lawful Basis: Contractual Necessity — We need this information to process your recurring subscription payments via Stripe, create your account, and provide access to your digital membership.
Managing Checkout & Customer Support
- Data Used: Identity, Account, and Usage Data.
- Lawful Basis: Contractual Necessity & Legitimate Interests — Processing cart recovery, order flows, and customer support via CartGenie helps us fulfill your requests and maintain smooth store operations.
Managing Cookie Consent
- Data Used: Technical and Usage Data.
- Lawful Basis: Legal Obligation — We use Consent Pro to collect and store your tracking preferences to satisfy UK privacy legislation (PECR and UK GDPR).
Website Optimization & Performance Analytics
- Data Used: Technical and Usage Data.
- Lawful Basis: Consent — We use Google Analytics to understand how visitors use mumbellsfit.com so we can improve our service. This is only activated if you give consent via Consent Pro.
Targeted Advertising & Marketing Campaigns
- Data Used: Technical, Usage, and Marketing Data.
- Lawful Basis: Consent — We use Meta Ads and Google Ads for ad measurement, retargeting, and promotion tracking. These tools are only enabled if you accept marketing cookies via Consent Pro.
Direct Email Communications & Updates
- Data Used: Identity and Account Data.
- Lawful Basis: Consent — We send news, offer updates, and member newsletters when you explicitly opt in during signup or checkout.
Accounting, Tax, and Financial Compliance
- Data Used: Identity and Transaction Data.
- Lawful Basis: Legal Obligation — We are legally required to maintain purchase records for UK tax reporting and compliance with HMRC.

‍

4. Third-Party Services We Use

We share data with trusted third-party service providers solely to operate our digital platform, process subscriptions, analyze traffic, and manage advertising:

CartGenie: Our e-commerce and checkout engine for managing membership registration and order flows.
Stripe (including Apple Pay & Google Pay): Our payment processing provider. Stripe processes transactions securely; you can review Stripe’s Privacy Policy at stripe.com/privacy.
Consent Pro: Our Cookie Management Platform (CMP), used to collect, store, and manage your consent preferences for tracking cookies.
Google Analytics: Analyzes site visitor behavior to help us optimize membership delivery and user experience.
Google Ads & Meta Ads (Facebook/Instagram): Used for conversion tracking, retargeting, and delivering relevant advertisements.
Hosting & Communications Providers: Infrastructure services hosting mumbellsfit.com and delivering membership account emails.

We do not sell, rent, or trade your personal information to third parties.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies (such as Meta Pixels and Google Tags) to manage digital membership sessions, understand site usage, and deliver targeted advertising.

We use Consent Pro to manage cookie preferences on our site:

Strictly Necessary Cookies: Essential for core functionality, such as maintaining member login sessions, security, and cart processing (CartGenie). These do not require explicit consent.
Analytics Cookies: Provided by Google Analytics to help us evaluate how members and visitors use the site.
Marketing & Advertising Cookies: Provided by Meta Ads and Google Ads to deliver relevant promotions and measure ad effectiveness.

You can update or withdraw your cookie preferences at any time using the Consent Pro banner/widget on our website or through your web browser settings.

6. International Data Transfers

Some of our service providers (including Stripe, Google, Meta, and CartGenie) operate or process data in servers located outside the United Kingdom (e.g., in the United States). Whenever your personal data is transferred outside the UK, we ensure appropriate safeguards are in place—such as using UK Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum—to maintain a level of protection equivalent to UK data protection standards.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Subscription & Financial Records: Retained for 6 years following the end of the relevant tax year to comply with UK tax obligations (HMRC).
Digital Membership Account Data: Retained for as long as your account remains active, plus a reasonable period thereafter to manage potential queries or reactivation requests.
Marketing Data: Retained until you withdraw consent or request erasure.
Analytics Logs: Retained or anonymized in accordance with configured platform standards.

8. Your Data Protection Rights

Under UK data protection laws, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no legal requirement for us to keep it.
Right to Restrict or Object: Object to or restrict our processing of your personal data (including direct marketing).
Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time (e.g., via Consent Pro for cookies or via unsubscribe links in emails).

To exercise any of these rights, please contact us at hello@mumbellsfit.com.

If you feel we have not handled your personal data appropriately, you have the right to lodge a complaint with the UK data protection authority:

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any updates will be published directly on this page with a revised "Last Updated" date.

‍