Privacy policy
Privacy Policy and Data Protection – ionfitness.com
At ION fitness, a brand operated by FitnessBit S.L., we are committed to processing your personal data with full responsibility, transparency and in strict compliance with the General Data Protection Regulation (GDPR – EU 2016/679). We want you to feel the same level of trust when browsing ionfitness.com as when training with any of our products.
We create products to support you in your progress, and we take care of your data with the same level of dedication.
1. Privacy policy and data protection
FitnessBit S.L. ensures the customer to comply with the General Data Protection Regulation UE (GDPR) 2016/679, and that it has adopted the security measures required by the laws and regulations aimed at preserving the secrecy, confidentiality and integrity in the processing of your personal data.
Your personal data will be used according to the limitations and rights granted by the personal data protection.
The storage and processing of personal data are required for the customer, administration and commercial service. FitnessBit S.L. agrees to keep the maximum reserve, secrecy and confidentiality over the information of the personal data that it has at its disposal. You have the right to get confirmation on whether in FitnessBit S.L. we are treating your personal data, therefore you have the right to access your personal data, correct inaccurate data or request its deletion when the data is no longer necessary for the purposes that were collected.
| General information about data protection | |
|---|---|
| Operator | We are FitnessBit S.L. and we manage the website www.ionfitness.com |
| Purpose | We will use your data, among other purposes, to treat your registration as a user, manage the purchase of products or services, answer your questions, improve your shopping experience or send you commercial information by post, email or phone. |
| Legitimation | We can use your personal data to: execute the contract you accepted by signing up, make a purchase, make use of our services or functions or to respond to queries. If the purpose of the treatment requires your consent, this will be provided by a clear affirmative action, for example to send you our newsletter, among others. |
| Data storage | The personal data provided will be kept for the time necessary to fulfill the purpose for which they are collected and to determine the possible responsibilities that may arise from the purpose, in addition to the periods established in the regulations on files and documentation. |
| Data communication | We will share your personal data with service suppliers (e.g. transport companies) that help us improve our services. |
| Rights of the interested parties | You have the right to access, rectify or delete your personal data. |
We invite you to read everything related to data protection, privacy and legal notice to understand in detail how we treat your personal data and the rights you have in relation to them.
For furter information about the privacy politics and data protection of FitnessBit S.L. you can contact our data protection officer or our customer care team.
2. Data Controller
- Identity: FitnessBit S.L.
- Managed website: www.ionfitness.com
- Registered office: Avda. de Los Olmos 1, Edif. Inbisa D4, Of. 015, 01013, Vitoria - Gasteiz, Alava, (Spain)
- VAT number: ESB01410455
- Email: info@ionfitness.com
3. Data we gather
The purpose of data processing corresponds to each of the treatment activities carried out by FitnessBit S.L. through the website, APP or on a personal level from our physical stores.
- Identification data (for example, your contact details).
- Data related to purchases, orders, returns etc. (we do not save you credit card data).
- Connection, geolocation and browsing data (when you interact by telephone for example).
- Commercial information (for example if you signed up for our newsletter).
- Data related to your preferences.
- Questions about the service or the products you have received (your experience helps us improve).
4. Purposes of processing
When we ask you to fill in your personal data to give you access to some functionality or service of the platform, we will mark some fields as obligatory, since they are data that we need to provide the service or give you access to the functionality in question. Please bear in mind that if you decide not to provide us with this information, you may not be able to complete your registration as a user or that you can not enjoy those services or functionalities. The main purposes of collecting these data are:
- Take care of your calls, emails or queries.
- Manage your registration in the platform to manage and deliver orders, process returns, etc.
- Request your feedback about the services or products.
- Send newsletter about interesting offers or news.
- Provide updated information about products, stock, prices and delivery times.
- Improve and customize your experience through data analysis.
- Prevent and fight against fraud.
5. Legitimation
The processing of your data is done for compliance with legal obligations by FitnessBit S.L. and it depends on the purpose of that treatment. In case that purpose requires your consent it will be shown with clear affirmative action.
6. Data storage
The personal data provided will be kept for the time necessary to fulfill the purpose for which they are collected and to determine the possible responsibilities that may arise from the purpose, in addition to the periods established in the regulations on files and documentation.
7. Data communication
To comply with the purposes of this privacy policy, we need to give access to third parties that provide us with support in the services we offer you.
- Financial entities
- Fraud-prevention entities
- Technological services providers
- Delivery, transport and logistic service providers
- Customer services providers
- Marketing and advertising partners and providers
8. Rights of the interested parties
We are committed to respect the confidentiality of your personal data and to guarantee you the exercise of your rights.
You can exercise them by writing an email to info@ionfitness.com, indicating the reason for your request and the right you want to exercise. If necessary, we will request a copy of an document accrediting your identity to identify you.
In particular, regardless of the purpose or legal basis under which we treat your data, you have the right to:
- Ask us for access to the data we have available to you. If you are a registered user in the platform you can also check this information in the section corresponding to your client area.
- Ask us to rectify the data we already have.
- Ask us to delete your data to the extent that they are no longer necessary for the purpose for which we need to treat them as we have informed you above, or in which we no longer have the legitimacy to do so.
- Ask us to limit the processing of your data, which means that in certain cases you can ask us to temporarily suspend the processing of the data or keep them beyond the time necessary when you need it.
9. Cookies
At ION fitness we know how important data protection and privacy is for all our customers when surfing the net. That is why we want to inform you clearly about what Cookies are, what they are used for and how they affect you when you surf the Internet.
9.1. What is a Cookie?
A Cookie refers to information that a computer, tablet or mobile phone saves when a user surfs on the Internet, so that these devices may be subsequently recognized.
Here are some important aspects about Cookies that you should know:
- They do not identify you as an individual; they only recognize your device.
- They do not damage your device in any way.
- They enable you to access important functions on the web, such as bookings or searches you carried out previously.
- They enable us to remember your preferences and personalize contents for you.
9.3. What kind of Cookies do we use at ION fitness?
Many of our online features have been designed to work with Cookies, always considering the best possible surfing experience for users. If you don’t accept the use of these Cookies, your surfing experience on ION fitness may be limited.
Types of cookies you can find on ION fitness:
- First-party cookies:
These are the ones that are sent to your terminal from www.ionfitness.com
These are the ones that are sent to your terminal from a terminal or domain that is not managed by ION fitness but by another entity, which processes the data collected through the cookies. Since it is the third parties that send the cookies, it is their specific conditions and mechanisms that govern how to block and delete them.
Technical cookies
This type of Cookie saves information anonymously and allows us: to assure the proper functioning of the website, to know your preferences and improve our designs for a better surfing experience on ION fitness, avoid errors, offer recommendations, adapt the speed of video transmission according to compatibility with your web browser, etc. These cookies cannot be disabled in our systems.
View cookie list| Name | Provider | Purpose | First-party / Third-party | Expires |
| _ab | Shopify | Used to control when the admin bar is shown in the shop. | Third-party | 1 year |
| _abv | Shopify | Keeps the admin bar collapsed. | Third-party | 1 year |
| _checkout_queue_token | Shopify | Used when there is a queue during the checkout process. | Third-party | 1 year |
| _cmp_a | Shopify | Used to manage the customer’s privacy settings. | Third-party | 1 day |
| _identity_session | Shopify | Contains the user’s identity session identifier. | Third-party | 2 years |
| _master_udr | Shopify | Permanent device identifier. | Third-party | Session |
| _pay_session | Shopify | Rails session cookie for Shopify Pay | Third-party | Session |
| _secure_account_session_id | Shopify | Used to track a customer session in the new customer accounts. | Third-party | 30 days |
| _session_id | Shopify | Used to provide reports and statistics. | Third-party | 2 years |
| _shopify_country | Shopify | Used in Plus shops where the currency or country is set by GeoIP, helping to avoid GeoIP lookups after the first request. | Third-party | 30 min |
| _shopify_essential | Shopify | Contains essential information for a shop to function properly, such as session and payment information, and anti-tampering data. | Third-party | 1 year |
| _storefront_u | Shopify | Used to make updating customer account information easier. | Third-party | 1 min |
| _tracking_consent | Shopify | Used to store a user’s preferences if a merchant has set privacy rules in the visitor’s region. | Third-party | 1 year |
| auth_state_<> | Shopify | Stores the authentication state before redirecting customers to third parties to determine their identity. | Third-party | 25 min |
| card_update_verification_id | Shopify | Used to support verification when a buyer is redirected to Shopify after completing 3D Secure during checkout. | Third-party | 20 min |
| cart | Shopify | Contains information related to the user’s basket. | Third-party | 2 weeks |
| cart_currency | Shopify | Used once checkout has been completed to start a new empty basket with the same currency that was used previously. | Third-party | 2 weeks |
| cart_sig | Shopify | A hash of the basket contents. Used to verify basket integrity and ensure the performance of some basket operations. | Third-party | 2 weeks |
| cart_ts | Shopify | Used in connection with the checkout page. | Third-party | 2 weeks |
| checkout | Shopify | Used in connection with the checkout page. | Third-party | 21 days |
| checkout_prefill | Shopify | Encrypts and stores URL parameters containing PII used in basket permalink URLs. | Third-party | 5 min |
| checkout_session_lookup | Shopify | Used in connection with the checkout page. | Third-party | 3 weeks |
| checkout_session_token_<> | Shopify | Used when a checkout session is established on the server. | Third-party | 3 weeks |
| checkout_token | Shopify | Captures the visitor’s landing page when they come from other sites. | Third-party | Session |
| customer_account_locale | Shopify | Used to track the region of a customer account when a redirect occurs from checkout or the shop to customer accounts. | Third-party | 1 year |
| customer_payment_method | Shopify | Stores the payment method being modified for subscriptions. | Third-party | 1 h |
| customer_shop_pay_agreement | Shopify | Used to verify a new Shop Pay payment instrument. | Third-party | 20 min |
| device_fp_id | Shopify | Device fingerprint identifier to help prevent fraud. | Third-party | Session |
| device_id | Shopify | Session device identifier to help prevent fraud. | Third-party | Session |
| discount_code | Shopify | Stores a discount code (received from visiting an online shop with a URL parameter) for the next checkout. | Third-party | Session |
| dynamic_checkout_shown_on_cart | Shopify | Adjusts the checkout experience for buyers who proceed with standard checkout rather than dynamic checkout. | Third-party | 30 min |
| hide_shopify_pay_for_checkout | Shopify | Set when a buyer declines the Shop Pay login modal during checkout, informing the buyer accordingly. | Third-party | Session |
| identity-state | Shopify | Stores the state before redirecting customers to the identity authentication process. | Third-party | 1 day |
| identity-state-<> | Shopify | Stores the state before redirecting customers to the identity authentication process. | Third-party | 1 day |
| identity_customer_account_number | Shopify | Stores an identifier used to facilitate sign-in across the customer account and shop domains. | Third-party | 12 weeks |
| keep_alive | Shopify | Used when international domain redirection is enabled to determine whether a request is the first one in a session. | Third-party | Session |
| locale_bar_accepted | Shopify | Keeps the geolocation app modal if it is accepted. | Third-party | Session |
| locale_bar_dismissed | Shopify | Keeps the geolocation app modal if it is dismissed. | Third-party | 1 day |
| localization | Shopify | Used to localise the basket to the correct country. | Third-party | 2 weeks |
| logged_in | Shopify | Login identity hint. | Third-party | 12 weeks |
| login_with_shop_finalize | Shopify | Used to facilitate sign-in with Shop. | Third-party | 5 min |
| master_device_id | Shopify | Permanent device identifier. | Third-party | 1 year |
| order | Shopify | Used to allow access to data on the buyer’s order details page. | Third-party | 3 weeks |
| pay_update_intent_id | Shopify | Stores the identifier of an update attempt for a Shop Pay billing agreement. Required for the callback after verifying a new Shop Pay payment instrument. | Third-party | 20 min |
| preview_theme | Shopify | Used to indicate whether a theme preview is being shown. | Third-party | Session |
| previous_checkout_token | Shopify | Used to prefill checkout with information from the previous checkout. | Third-party | 1 year |
| previous_step | Shopify | Used in connection with the checkout page. | Third-party | 1 year |
| profile_preview_token | Shopify | Used to preview customisations. | Third-party | 5 min |
| receive-cookie-deprecation | A Google cookie that identifies Chrome browsers affected when a third-party cookie becomes deprecated. | Third-party | Session | |
| remember_me | Shopify | Used to prefill checkout with information from the previous checkout. | Third-party | 1 year |
| secure_customer_sig | Shopify | Used to identify a user after they have signed in to a shop as a customer so they do not need to sign in again. | Third-party | 1 year |
| shop_pay_accelerated | Shopify | Indicates whether a buyer is eligible for Shop Pay accelerated checkout. | Third-party | 1 year |
| shopify-editor-unconfirmed-settings | Shopify | Stores changes made by the merchant in the editor to update the preview. | Third-party | 16 h |
| shopify_pay | Shopify | Used to sign a buyer in to Shop Pay when they return to checkout in the same shop. | Third-party | 1 year |
| shopify_pay_redirect | Shopify | Used to speed up the checkout process when the buyer has a Shop Pay account. | Third-party | 1 year |
| storefront_digest | Shopify | Stores a summary of the shop password, allowing merchants to preview their shop when it is password protected. | Third-party | 1 year |
| tracked_start_checkout | Shopify | Used in connection with the checkout page. | Third-party | 1 year |
| user | Shopify | Used in connection with sign-in to Shop. | Third-party | 1 year |
| user_cross_site | Shopify | Used in connection with sign-in to Shop. | Third-party | 1 year |
| wpm-domain-test | Shopify | Used to test Shopify’s Web Pixel Manager with the domain to ensure everything is working correctly. | Third-party | Session |
Analytics cookies
This type of Cookies collect information anonymously about your surfing experience on ION fitness. In this way, we can access numerical data about users surfing our site, and improve functions as we see fit. Therefore, these cookies contribute directly to the improvements we make to the site, always enhancing the surfing experience of the user and helping us to offer a better service.
View cookie list| Name | Provider | Purpose | First-party / Third-party | Expires |
| _landing_page | Shopify | Captures the visitor’s landing page when they come from other sites. | Third-party | 2 weeks |
| _orig_referrer | Shopify | Allows the merchant to identify where visitors come from. | Third-party | 2 weeks |
| _shopify_ga | Shopify | Contains Google Analytics parameters that allow cross-domain analytics measurement to work. | Third-party | Session |
| _shopify_s | Shopify | Used to identify a given browser session/shop combination. It lasts for 30 minutes from the last use. | Third-party | 30 min |
| _shopify_sa_p | Shopify | Captures the visitor’s landing page when they come from other sites to support marketing reports and statistics. | Third-party | 30 min |
| _shopify_sa_t | Shopify | Captures the visitor’s landing page when they come from other sites to support marketing reports and statistics. | Third-party | 30 min |
| _shopify_y | Shopify | Shopify reports and statistics. | Third-party | 1 year |
| checkout_one_experiment | Shopify | Used when a checkout is eligible for Checkout One and has been assigned to an experiment (control group or test group). | Third-party | Session |
| shop_analytics | Shopify | Contains the buyer information required for shop analytics. | Third-party | 1 year |
| unique_interaction_id | Shopify | Used for checkout metrics. | Third-party | 10 min |
Marketing cookies
This type of Cookies allow us to increase and personalize the information on the ads shown to each user. Among other functions, data is anonymously stored based on the surfing patterns of each user, so that we can offer advertising matching your interests. ION fitness uses third party Cookies to access, manage and improve a series of Extra Services that will always improve your surfing experience.
View cookie list| Name | Provider | Purpose | First-party / Third-party | Expires |
9.4. How can I manage ION fitness cookies?
You can allow, block or delete the cookies installed on your device by clicking on this link. If you do not allow cookies, you may not be able to access certain services and your experience on our website may be less satisfactory. You can refuse to accept cookies by changing the settings of your internet browser (e.g. Internet Explorer, Chrome or Firefox).
If you use a different browser, consult the corresponding Online Guide to help you through the process of allowing, blocking or setting Cookies.
10. External deferred payment methods: Aplazame
The user agrees that all their personal data will be fully transferred to Aplazame from the moment they initiate the contracting of the deferred payment service offered by Aplazame when selecting the payment method. This acceptance also extends to third parties that may need access to the data for the proper fulfilment of the contract.
11. Updates
ION fitness may update this Privacy Policy when necessary to adapt it to legislative changes or service improvements. The current version will always be the one published on ionfitness.com.

