This page explains how Gymatics Limited uses personal information within the Gymatics Ambassador Platform, including information provided when an ambassador connects an Instagram account.
Information we may collect
Depending on the features you use, we may collect information such as your name, email address, ambassador profile details, club, social media usernames, programme activity, points, rewards, referrals and challenge submissions.
Connected Instagram accounts
Ambassadors with an eligible Instagram professional account may choose to connect their Instagram account to the Gymatics Ambassador Platform.
When connected, Gymatics may receive information made available through Meta's authorised Instagram APIs, such as:
- Instagram username
- Account type
- Follower count
- Performance information for eligible posts or reels submitted as part of an Ambassador challenge
This information may be used to verify challenge submissions, measure Ambassador performance, award points and support progression within the Gymatics Ambassador Programme.
Gymatics does not receive your Instagram password and does not use the connection to access private messages.
Under-18 Ambassadors
Where an Ambassador is under 18, a parent or guardian should be aware of and agree to the use of the Ambassador Platform and any connected social media account. A parent or guardian may manage or supervise an account where appropriate.
How we use your information
Information collected through the Ambassador Platform may be used to operate the programme, manage Ambassador accounts, process referrals, challenges and rewards, provide support, communicate programme updates and maintain the security of the platform.
Disconnecting Instagram
An Ambassador can disconnect their Instagram account from the Ambassador Platform at any time using the Connected Accounts section of their profile.
Data retention
We only aim to keep Ambassador Platform personal information for as long as it is reasonably required for the operation of the programme, legal obligations, security and record keeping.
Gymatics Limited — Public Authority Data Request Procedure
Effective: 8 September 2026
Gymatics Limited will handle any request from a government body, law-enforcement agency, regulator or other public authority for personal data in accordance with applicable UK law and UK GDPR.
When such a request is received, Gymatics Limited will verify the identity and authority of the requesting body and review whether the request has a valid legal basis before disclosing any information. Where a request appears unlawful, excessive or outside the requesting authority’s powers, Gymatics will challenge the request or obtain appropriate legal advice before responding.
Gymatics will apply data minimisation and disclose only the minimum personal information legally required to satisfy a valid request. Requests, decisions, disclosures and relevant reasoning will be documented internally, including the requesting authority, date, legal basis, information requested, information disclosed and the person responsible for the response.
Where legally permitted, affected individuals will be informed of a disclosure. Gymatics will not voluntarily disclose personal information to a public authority where there is no lawful basis to do so.
Responsibility for this procedure rests with Gymatics Limited, with the Director responsible for reviewing and authorising disclosures.
Your rights
You may contact Gymatics to ask about personal information we hold about you, request corrections, or request deletion where applicable.
Contact us
For privacy questions relating to the Gymatics Ambassador Platform, please contact Gymatics through our website: www.gymatics.co.uk
Last updated: September 2026
