Privacy Policy

1. Who We Are

XMuscle is a trading name of Mando Systems Ltd (Company No. 17168657), 10 Pilgrims Walk, Worthing, BN13 1RJ. We are the data controller for personal data collected through this website.

2. Data We Collect

• Account data: name, email, hashed password, marketing preference
• Fitness profile: age, weight, height, goal, training days, health conditions (used only to generate your plan)
• Order data: delivery address, order history, payment references (we never store card numbers)
• Usage data: pages visited, browser type, IP address (anonymised analytics)

3. How We Use Your Data

• To process and fulfil your orders (contract performance)
• To generate your personalised fitness plan (contract performance)
• To send you order confirmations and delivery updates (legitimate interest)
• To send marketing emails if you have consented (consent — withdraw any time)
• To comply with legal obligations

4. Third Parties

We share data only where necessary: Stripe for payment processing; hosting provider for infrastructure. We do not sell your data to third parties.

5. Your Rights (UK GDPR)

You have the right to access, correct, erase, restrict or port your data. You may also object to processing based on legitimate interest. To exercise any right, contact hello@xmuscle.co.uk. You have the right to complain to the ICO at ico.org.uk.

6. Cookies

We use essential session cookies, and optional analytics cookies. See our Cookie Policy.

7. Retention

Order records are kept for 7 years for tax purposes. Account data is kept until you request deletion. Marketing consent can be withdrawn at any time.

8. Contact

hello@xmuscle.co.uk • Mando Systems Ltd, 10 Pilgrims Walk, Worthing, BN13 1RJ

Last updated: June 2026