Privacy Policy and GDPR Compliance
BellyProof LTD is committed to safeguarding your privacy. Contact us if you have any questions or problems regarding the use of your Personal Data and we will gladly assist you.
By using this site or our services, you consent to the processing of your Personal Data as described in this Privacy Policy.
Our Privacy-First Approach
We’ve chosen privacy over invasive tracking:
- ✅ No consent banner – clean, distraction-free experience
- ✅ Only anonymized analytics – we never see who you are
- ✅ No third-party tracking pixels – no Facebook or LinkedIn tracking
- ✅ No cross-site behavioral profiling – your browsing is your own
- ✅ You’re in control – disable analytics anytime via “Cookie Settings” in the footer
- ✅ GDPR compliant – legitimate interest in understanding site usage
- Questions? Submit a data request or contact us – we’ll respond within 72 hours
Clarification on BellyProof.com and MovementFirst.co.uk
BellyProof LTD is a registered trademark and our brand name. We operate two separate websites:
| BellyProof.com | MovementFirst.co.uk |
|---|---|
| Purpose: Marketing and information | Purpose: Member platform, registration, purchases, support |
| Data Collection: Anonymized analytics only | Data Collection: Account info, health data, purchase history |
| Cookies: Essential + anonymized analytics | Cookies: Essential + analytics + functional |
Both sites are covered by this single privacy policy and share the same privacy commitments.
If you wish to see the personal data we collected about you in a machine-readable format, or to request deletion of your account (excluding purchase information), please contact us or make a data request here. We will assist you within 72 hours.
Please note: If you have made a purchase and need to access the content you paid for, you will need your account to do so.
Table of Contents
- Definitions
- Your Privacy Rights
- What Data We Collect
- How We Use Your Data
- Who Has Access to Your Data
- How We Secure Your Data
- Data Retention
- Cookies and Analytics
- Data Storage Location
- Children’s Privacy
- Contact Us
Definitions
Personal Data – any information relating to an identifiable person who can be directly or indirectly identified, in particular by reference to an identifier.
Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
Data Subject – a natural person whose Personal Data is being processed.
We/Us – BellyProof LTD (operating as BellyProof.com and MovementFirst.co.uk)
Your Privacy Rights
Under GDPR, you have the following rights:
- Right to information – You have the right to know whether your Personal Data is being processed and what data we gather.
- Right to access – You have the right to access and download all Personal Data we hold about you.
- Right to rectification – You have the right to correct inaccurate or incomplete data.
- Right to erasure – In certain circumstances, you can request we delete your data.
- Right to restrict processing – You can limit how we process your data.
- Right to withdraw consent – You can withdraw any consent you’ve given (e.g., disable analytics).
- Right to lodge a complaint – If you’re unsatisfied with our response, you can contact your supervisory authority.
To exercise these rights: Visit our privacy tools page or contact us – we’ll respond within 72 hours.
What Data We Collect
On BellyProof.com (Marketing Site)
We collect only anonymized data:
- Page views and content you view
- Time spent on each page
- Device type and browser (not personal)
- Referral source (how you found us)
What we DON’T collect: Name, email, IP address, or any personally identifying information. Analytics are fully anonymized.
On MovementFirst.co.uk (Member Site)
If you create an account, we collect:
- Email address and password
- Name and location
- Health and fitness information (fitness level, health conditions, dietary preferences, weight, measurements)
- Subscription status and access level
- Order history and purchase dates
- Support messages and communications
Health Information Protection: Your health data is encrypted, stored securely, and only accessible to you and our support team. We never share it with third parties.
Email Communications
If you opt-in to our email list or newsletter, we store:
- Email address
- Communication preferences
- Unsubscribe status
We use this only to send educational content, program updates, and announcements. You can unsubscribe anytime.
How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Delivering your membership, programs, and content access | Contract (service delivery) |
| Processing payments (via Stripe or PayPal) and managing subscriptions | Contract & Legal Obligation (tax) |
| Providing customer support | Contract |
| Personalizing recommendations based on your fitness data | Contract |
| Understanding how users interact with our content (anonymized analytics) | Legitimate Interest |
| Tracking Google Ads conversions (for optimization) | Legitimate Interest |
| Detecting and preventing fraud | Legitimate Interest |
Who Has Access to Your Data
We do not sell, trade, or share your personal data. However, the following services process data on our behalf:
Essential Service Providers
- SiteGround – US-based hosting provider (stores our servers and data)
- Stripe – US-based payment processor (handles subscriptions and one-time purchases securely; we never see full credit cards)
- PayPal – US-based payment processor (handles payments securely; we never see full credit cards)
- WooCommerce – E-commerce platform for managing products, orders, and membership access
Analytics Services
- Google Analytics 4 – Measures traffic with IP anonymization ON (we can’t see who users are)
- Matomo Analytics – Self-hosted on our own server (we own all the data; no external sharing)
Email Service
- Email Marketing Service – For sending newsletters and program updates (you can unsubscribe anytime)
Payment & Tracking
- Google Ads – Receives hashed (encrypted) conversion data for optimization; never sees personal data
Important: All processors have Data Processing Agreements and only use data as instructed. Health and fitness information is never shared with any processor.
How We Secure Your Data
We use industry-standard security measures:
- HTTPS/TLS encryption for all data in transit
- Encrypted storage for sensitive data (health info, credentials)
- Regular security monitoring and updates
- Restricted access – only authorized staff can view personal data
- We never store full credit card numbers
Data Location: Your data is stored on servers in the United States via our hosting provider. By using our services, you consent to this international transfer.
Security Incidents: If we experience a data breach, we’re legally required to notify you and the authorities immediately.
Data Retention
We keep data only as long as needed:
| Data Type | Retention Period | Reason |
|---|---|---|
| Purchase and transaction records | 6+ years | UK tax requirements |
| Active account and subscription data | While account is active | Service delivery |
| Email list subscribers | Until you unsubscribe | Email campaigns |
| Google Analytics data | 26 months (anonymized) | Trend analysis |
| Support tickets | 2 years after resolved | Reference and improvement |
Cookies and Analytics
We use three types of cookies, and no consent banner is required because:
1. Necessary Cookies (Always Active)
Purpose: Essential for the site to function (login, security, shopping cart)
- WordPress session cookies
- WooCommerce cart cookies
- Security/CSRF tokens
Legal Basis: Required for service delivery (GDPR Article 6(1)(b))
Consent Required: No
2. Functional Cookies (Active by Default)
Purpose: Remember your preferences (which articles you’ve read, UI settings, etc.)
Data Stored: Only non-personal preferences
Legal Basis: Legitimate interest (GDPR Article 6(1)(f))
Consent Required: No (but you can disable via “Cookie Settings” footer link)
Duration: 365 days
3. Analytics Cookies (Active by Default, Fully Anonymized)
Purpose: Understand how users interact with our content to improve it
Services:
- Google Analytics 4: IP anonymization ON, no user tracking, no interest reports
- Matomo Analytics: Self-hosted on our server, no data sharing, IP anonymization ON
Legal Basis: Legitimate interest (GDPR Article 6(1)(f))
Data Collected: Page views, device type, time on page – NOT who you are
Consent Required: No (fully anonymized)
Duration: 365 days (cookies); 26 months (analytics data)
User Control: Can disable via “Cookie Settings” footer link
NO Marketing Cookies
We intentionally do NOT use:
- ❌ Facebook Pixel (removed for privacy)
- ❌ LinkedIn Insight Tag (removed for privacy)
- ❌ Behavioral tracking across websites
- ❌ Cross-site profiling
Google Ads Tracking: We use Google Consent Mode v2 with conversion modeling instead of cookies. Google can optimize your ads based on modeled conversions (~95% accuracy) without storing tracking cookies on your browser.
Preference Center
You can control analytics and functional cookies anytime by clicking “Cookie Settings” in the footer. No banner interrupts your browsing.
Data Storage Location
BellyProof LTD is based in the United Kingdom, but our data is stored on servers in the United States via SiteGround hosting.
By using our services, you consent to your data being stored and processed in the United States. The US has different data protection laws than the UK/EU, but we implement safeguards including:
- Encryption of sensitive data
- Data Processing Agreements with service providers
- Regular security audits
If you do not wish to have your data transferred to the US, you should not use our services.
Children’s Privacy
We do not knowingly collect data from anyone under 16. Our services are not directed at children.
If you’re a parent/guardian and believe your child provided data to us, please contact us immediately.
Contact Us
Questions About Your Data?
- Contact Form: https://movementfirst.co.uk/contactus/
- Data Requests: https://movementfirst.co.uk/privacy-tools/
- Account Management: https://movementfirst.co.uk/my-account/
- Response Time: Within 72 hours
Supervisory Authority
If you wish to lodge a privacy complaint:
- UK: Information Commissioner’s Office
- EU: Your national data protection authority
Changes to This Privacy Policy
We may update this policy at any time. Changes take effect immediately upon posting.
Last modified: October 23, 2025
We are committed to privacy by design. We collect minimal data, anonymize what we can, share with no one without consent, and give you full control. Your privacy is our priority. 🔒