Privacy notice

Who we are

HIE (https://hie.fitness) is operated by Cloud Supreme Limited, which is the data controller for your personal data. Cloud Supreme Limited, registered in England and Wales, company number 12670354. Registered office: 12 Ashtead Drive, Bapchild, Sittingbourne, ME9 9NF. You can contact us about privacy at sales@cloudsupreme.co.uk.

What we collect today

• Account details: your email address and the date your account was created.
• Sign-in and security data: the records needed to sign you in, including sign-in times, your two-step verification settings, and the IP address and browser used when you sign in.
• Profile settings: your display name if you add one, your time zone and your preferred distance unit.
• Technical logs: our hosting provider records basic request information such as IP address, time and page requested, to keep the service running and secure.

We do not currently collect training, activity or health data. Before we do, for example when you connect a running watch or app, we will update this notice and ask for your explicit consent where the law requires it.

How and why we use it

• To provide your account and the service, because this is necessary for our agreement with you.
• To keep HIE and your account secure, including two-step verification, abuse prevention and investigating problems. This is in our legitimate interests and yours.
• To send essential emails such as invitations and sign-in links. We do not send marketing emails.
• To meet legal obligations where they apply.

We never sell your personal data, and we do not use it for advertising.

Who we share it with

HIE is run and managed by Cloud Supreme Limited. To provide it, Cloud Supreme uses a small number of carefully selected technology providers, who act on our behalf, under contract and only on our instructions:

• Database and sign-in: your account and profile data are stored in London, UK.
• Website hosting: requests to the website may be processed outside the UK.
• Email delivery: invitation and sign-in emails are sent from the European Union.

Some of these providers are based in, or may access data from, the United States. Wherever data leaves the UK, it is protected by safeguards approved under UK data protection law. A list of the providers we currently use is available on request from sales@cloudsupreme.co.uk.

We may also disclose data if the law requires it.

Cookies

HIE uses only essential cookies that keep you signed in securely. They are strictly necessary for the service to work, so they do not need your consent. We do not use analytics, advertising or tracking cookies. If that ever changes, we will ask first, and you can change your choice at any time from Cookie settings in the website footer.

How long we keep it

• Account and profile data: while your account is open. If you ask us to close it, we delete this data within 30 days.
• Security and technical logs: for a limited period set by our providers, then deleted automatically.
• We may keep a minimal record for longer where the law requires it.

How we protect it

Data is encrypted in transit, access is restricted so each person can only ever see their own data, and every sign-in requires two-step verification.

Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email sales@cloudsupreme.co.uk. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this notice

We will update this notice when our use of data changes and show the date at the top. See also our terms of use.