Privacy Policy

GRITROX and this Privacy Policy

This policy describes how GRITROX uses personal information in connection with gritrox.com. For privacy questions or requests, contact [email protected].

Information we use and why

When you browse, our hosting and security services may process your IP address, browser and device details, requested pages, request times and error information. We use this information to deliver the website, diagnose faults and prevent misuse. Our lawful basis is legitimate interests in running a reliable and secure website.

When you contact us, we receive your email address, message and any details you choose to send. We use these to answer your enquiry and keep relevant correspondence. Our lawful basis is legitimate interests in responding to requests and managing our services. Please do not send medical records, passwords or other sensitive information.

Race calculator and weekly planner

The tools save your calculator inputs, optional race date, weekly session choices and completion marks in local storage in your browser. This lets you return to your plan on the same device and browser. There is no visitor account or automatic cross-device synchronisation for these saved plans. Other people using the same browser profile may be able to see them.

Use the reset controls to clear the relevant calculator or displayed-week inputs. To remove all locally saved GRITROX tool data, clear site data for gritrox.com in your browser settings. Clearing site data may remove saved weeks and preferences. Printing or saving a PDF creates a copy that you control.

If you use an assistant integration to read or change a plan, information returned to that assistant is also handled under its provider’s privacy arrangements. The calculator produces planning examples; it does not make decisions about your eligibility, health or access to services.

Emailing your plan or race splits

When you request an email, your email address and the relevant plan or calculator inputs are sent to our website for processing and delivery. These can include session choices, dates, completion information, running pace, station times and calculated splits. The browser-only storage description does not apply to this submission or the resulting email.

We use these details to send the copy you requested and troubleshoot delivery. Our lawful basis for requested-copy processing is legitimate interests in fulfilling your request; newsletter signup relies on your consent, as explained below. Providing an email address is optional, but we cannot send the copy without it. While waiting for confirmation, we temporarily store an encrypted copy of your email address, calculated splits or weekly plan, request time, signup-form identifier and consent wording version for up to 24 hours. We check your subscription status with Kit and remove the pending copy after a delivery attempt or expiry. Expired records may remain in database backups until those backups rotate.

Race-splits and weekly-plan emails are newsletter subscriber benefits. The form clearly asks you to subscribe to GRITROX training tips, articles and updates through Kit. We send your requested copy after Kit confirms your subscription; existing confirmed subscribers do not need to confirm again. You can unsubscribe at any time. You can use the calculator and weekly planner, and print or save your splits or plan, without subscribing. Delivery services and your email provider process the resulting messages. The tool does not create an online account or permanent plan archive.

To reduce abuse, the email tool uses short-lived request counters associated with keyed hashes of IP and email addresses. These are pseudonymous identifiers, not a guarantee of anonymity. The current rate-limit windows are up to 24 hours; expired records may remain in database backups until those backups rotate.

Newsletter subscriptions through Kit

We use Kit (formerly ConvertKit) to manage GRITROX newsletter subscriptions and send training tips, articles and updates. Kit processes subscriber information on our behalf. This includes your email address, any name you provide, signup source, subscription status and records of your consent or unsubscribe request.

Our lawful basis for sending the newsletter is your consent. Follow any confirmation email sent during signup. You can withdraw consent at any time using the unsubscribe link in a newsletter or by emailing [email protected]. Withdrawal does not affect processing that was lawful before you withdrew it.

Kit can provide email delivery, open and click reporting. Where enabled, tracking pixels or tracked links can record interactions with newsletters. Reporting can include delivery status and whether an email is opened or a link is clicked, together with associated technical information. You can unsubscribe from newsletters at any time. This notice does not itself give permission for tracking that requires consent.

Read Kit’s privacy policy for its own processing and Kit’s Data Processing Addendum for subscriber processing on our behalf. These documents supplement this notice; they do not replace GRITROX’s responsibilities.

Hosting, email and other recipients

Hostinger provides our website hosting and business email services. It may process website requests, security and delivery logs, stored website data, correspondence and backups as necessary to provide those services. See Hostinger’s privacy policy.

Cloudflare provides website delivery, caching and security services where traffic passes through its network. To perform those functions it may process IP addresses, request URLs and times, browser and device information, and security events. Security features may use cookies to recognise legitimate traffic. These purposes support our legitimate interests in delivering and protecting the Website. See Cloudflare’s privacy policy and Cloudflare’s Data Processing Addendum.

Access is limited to authorised GRITROX administrators and service providers who need information for the purposes described here. We may also share relevant information with professional advisers or authorities where required by law or necessary to establish or defend legal claims. We do not sell newsletter addresses or submitted training plans.

International processing

Kit and other providers may process information outside the United Kingdom, including in the United States. The applicable protections depend on the provider and destination. Kit’s Data Processing Addendum describes its transfer arrangements, including contractual safeguards and the UK Addendum where applicable. You can contact us for information about relevant safeguards or how to obtain a copy. Hostinger and Cloudflare describe their international processing and contractual safeguards in their privacy and data-processing information. Contact us if you need details relevant to your information.

How long information is kept

Browser-saved plans remain until you clear them, the browser removes them or the tools replace them. Newsletter records are kept while you remain subscribed. After you unsubscribe, limited suppression and consent records may be retained to respect your choice and demonstrate compliance; unsubscribing does not necessarily erase every record held by Kit.

Email requests are processed to deliver the requested copy. Copies in mailboxes, delivery records and support correspondence are retained only while needed to complete delivery, resolve enquiries, prevent abuse or meet applicable legal obligations. Retention is assessed according to whether the request is resolved, whether a dispute or security incident remains open and whether a legal obligation requires continued storage.

Hosting logs and backups follow the configured provider schedules. Backup copies may remain until the relevant backup is replaced and are not a source for routine marketing. Retention depends on the type of record, the service configuration, security needs and any legal requirement; it is not the same for every provider. Your own inbox and downloaded copies are controlled by you and your provider.

Cookies, local storage and external services

Our race calculator and weekly planner use storage in your browser to remember your inputs, saved plans and progress. You can clear this through your browser settings. Clearing or blocking this storage may prevent these features from remembering your information.

Links to Kit signup pages, Google preferred-source settings and other websites take you to separate services with their own privacy practices. Embedded third-party content, if used, can also send device or request information to its provider when loaded.

You can block or delete cookies and other site data using your browser settings. This may affect saved plans and embedded content. Cookies and similar technologies requiring consent need a separate choice; merely visiting the Website or reading this notice is not that consent. Browser controls do not replace any consent controls required for the services used.

Embedded YouTube videos

Some articles contain embedded YouTube videos. When a player loads, your browser connects to Google/YouTube and can disclose your IP address, browser and device details and the page containing the video. YouTube may use cookies or similar technologies and process viewing activity. If you are signed in to Google, activity may be associated with your account, depending on your settings.

YouTube’s privacy-enhanced player, where used, reduces some personalisation but does not mean no data is transferred. You can manage Google activity and privacy settings through your Google account. See Google’s privacy policy. External services determine their own processing; GRITROX remains responsible for the way it includes them on this Website.

Your privacy rights

Depending on the circumstances, you can ask for access to your personal information, correction, erasure, restriction or a portable copy. You can object to processing based on legitimate interests. You have an absolute right to object to use of your personal information for direct marketing. You can withdraw consent whenever we rely on it.

Send requests to [email protected]. We may ask for proportionate information to verify your identity. Requests are normally handled without charge and within one month, subject to applicable legal extensions or exceptions. We will explain any applicable extension or reason a request cannot be fully met.

You can raise a data-protection complaint with us at [email protected]. We will acknowledge it within 30 days, investigate and explain the outcome without undue delay. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You may contact us first so we can try to resolve a concern, but this does not remove your right to complain to the regulator.

Protecting your information

We use proportionate access controls and technical safeguards to protect personal information. No internet service or email system can guarantee absolute security. Please send only the information needed for your request, and use a private browser profile if you share a device.

Children and sensitive information

GRITROX’s training tools and newsletter are intended for adults. Please do not submit children’s personal information or medical details through them. If you believe a child has supplied information, contact us so we can investigate and take appropriate action.

Changes and contact

We will update this notice when our data practices change and show the revision date above. Where required, we will bring material changes to your attention and obtain any new consent needed. For questions, contact [email protected]. See also our Terms and Conditions.