RemoteGymp Privacy Notice
Version: 2026-08-28
Effective date: 28 August 2026
1. Who we are
RemoteGymp Ltd, registered in Northern Ireland under company number NI742463, of B1 Portview Trade Centre, BT4 1HE, United Kingdom ("RemoteGymp", "we", "us" or "our"), provides remote-support software and related websites and services.
For personal data used to run our business, websites, accounts, billing and support, RemoteGymp is normally the controller. When we process screen content, files, device data or other personal data on a business customer's instructions to provide the service, that customer is normally the controller and RemoteGymp is its processor.
Contact us at support@remotegymp.com or by post at the address above.
2. Personal data we collect
Depending on how you use RemoteGymp, we may collect:
- account and contact data, such as name, email address, organisation, role and preferences;
- authentication and security data, such as password hashes, sign-in events, multi-factor and
- subscription and transaction data, such as plan, invoices, payment status and limited payment
- service and device data, such as device name, operating-system and agent version, enrolment and
- support communications, attachments and troubleshooting information;
- website data, such as pages requested, essential cookie or local-storage values and technical
- trial-abuse prevention signals, which may include normalised or hashed device, network and
- Customer Data handled during remote support, which may include screen content, filenames,
recovery status, identity-provider details, IP address, device/browser information and security alerts;
identifiers supplied by our payment provider; we do not need to store full card details;
licence status, connection/session metadata, settings, diagnostic logs and audit events;
logs;
account identifiers; and
transferred files, commands, terminal output and other content chosen by the customer.
We may receive data directly from you, an organisation that manages your account, a person who invites or supports you, your device, identity and payment providers, and infrastructure or security providers.
3. Why we use personal data
We use personal data as follows:
| Purpose | Lawful basis |
|---|---|
| create and administer accounts, organisations, subscriptions and licences | Performance of a contract and steps requested before entering a contract |
| authenticate users, enforce permissions and secure the Services | Performance of a contract and our legitimate interests in securing and operating RemoteGymp |
| connect remote-support sessions and provide requested features | Performance of a contract |
| take payment, keep financial records and manage trials | Performance of a contract, steps requested before entering a contract, compliance with legal obligations and our legitimate interests in preventing abuse |
| provide support, diagnose faults and communicate service or security information | Performance of a contract and our legitimate interests in supporting and securing RemoteGymp |
| prevent fraud, repeated trial abuse, misuse and attacks | Our legitimate interests in securing RemoteGymp and preventing abuse |
| monitor reliability, maintain and improve the Services | Our legitimate interests in operating, supporting and improving RemoteGymp |
| comply with legal obligations and establish, exercise or defend legal claims | Compliance with legal obligations and our legitimate interests in establishing, exercising or defending legal claims |
| send marketing where permitted, with an opportunity to opt out | Consent where required and our legitimate interests where permitted by law |
Our lawful bases are performance of a contract, steps requested before entering a contract, compliance with legal obligations, and our legitimate interests in operating, securing, supporting and improving RemoteGymp and preventing abuse. We rely on consent where the law specifically requires it, including for non-essential cookies or particular marketing.
Where we rely on legitimate interests, we have carried out a balancing assessment and will provide a summary on request.
Where data is required to create or secure an account, take payment or deliver the Services, failure to provide it may mean we cannot provide the relevant feature.
4. Remote-session content
Customers decide which devices and people may be accessed and what data is displayed or transferred. A customer using RemoteGymp must provide its own privacy information and obtain any consent or other legal authority required for monitoring, recording, remote access or data transfer.
RemoteGymp processes Customer Data to provide the requested service, maintain security and comply with documented lawful instructions. Customers should avoid exposing personal data that is not needed for the support task and should maintain their own backups.
5. Sharing
We may share personal data with:
- hosting, networking, security, monitoring, email, support and software providers;
- payment processors, banks and accounting providers;
- identity providers selected by a customer;
- professional advisers, auditors and insurers;
- a buyer, investor or successor involved in a genuine corporate transaction; and
- courts, regulators, law-enforcement bodies or others where required or permitted by law.
Providers may use personal data only for the contracted purpose and must protect it appropriately. We do not sell personal data.
6. International transfers
Some providers or customers may process personal data outside the United Kingdom. Where restricted transfers occur, we use an adequacy regulation, recognised contractual safeguards or another lawful transfer mechanism and apply supplementary measures where appropriate. Contact us for information about the safeguard relevant to your data.
7. Retention
We keep personal data only as long as reasonably needed for the purpose collected, including providing the Services, security, dispute resolution and legal, tax, accounting and audit requirements. Retention depends on the data and account status. We generally retain account, contract, payment and acceptance evidence for the applicable legal and claims period; operational logs and session metadata for a shorter security and troubleshooting period; support records while useful to resolve and evidence the issue; and trial-abuse signals only while proportionate to prevent repeated misuse. Backups are deleted or overwritten on their normal protected cycle.
Customers control retention of data held in their own self-hosted installation. A business customer’s DPA or order may specify different return or deletion arrangements for Customer Data.
Indicative retention criteria
| Data category | Retention criteria |
|---|---|
| Account and contract data | While the account or contract is active and afterwards for the applicable legal and claims period |
| Payment records | For the period required by applicable tax, accounting and financial-record obligations |
| Operational logs and session metadata | For the shorter period reasonably needed for security, troubleshooting, service operation and audit requirements |
| Support records | While needed to resolve and evidence the issue and for the applicable legal and claims period |
| Trial-abuse signals | While reasonably necessary and proportionate to detect and prevent repeated misuse |
8. Security
We use technical and organisational measures designed for the nature and risk of the data, including access controls, authentication controls, encryption in transit, logging, patching, backup and incident-management practices. No internet service can guarantee absolute security.
9. Your rights
Subject to applicable law, you may ask us to:
- provide access to your personal data;
- correct inaccurate or incomplete data;
- erase data;
- restrict processing;
- provide portable data;
- stop processing based on legitimate interests;
- stop direct marketing; or
- review certain solely automated decisions with legal or similarly significant effects.
Where processing relies on consent, you may withdraw it without affecting earlier lawful use. We may need to verify your identity and may be unable to fulfil a request where a legal exemption applies. If RemoteGymp processes data only for a business customer, we may refer the request to that customer.
You may complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. If you are in the EEA you may instead complain to the supervisory authority of your country of residence, work, or the place of the alleged infringement. We would welcome the opportunity to address your concern first.
10. Cookies and local storage
Our sites and Services use essential cookies or local storage for functions such as sign-in, security, preferences and language selection. If we introduce non-essential analytics, advertising or similar technologies, we will provide relevant information and obtain consent where required.
We also use limited device and network characteristics to detect repeated or abusive free trials, as described in section 2. We do not use cookies or similar technologies for advertising or cross-site tracking.
11. Children
RemoteGymp is not directed to people under 18, and people under 18 must not create an account.
12. Automated processing
We use rules and risk signals to detect suspected fraud, security threats and repeated trial abuse. These may result in a restriction on account access. You may request human review of any such restriction by contacting support@remotegymp.com, and we will provide a decision by a member of staff. We do not use these measures for profiling unrelated to security and abuse prevention.
13. AI-assisted resolution
Where you choose to use our AI resolution feature, the text you enter, user-selected screenshots and related system, configuration, diagnostic and performance data are processed to generate a suggested resolution. Terminal output is sent only where you enter it or deliberately include it in the information submitted to the feature. You are told when you are interacting with AI. An organisation's owner may disable the feature for all of that organisation's users. Suggested resolutions are advisory and are not solely automated decisions producing legal or similarly significant effects.
14. Changes
We may update this Notice when our practices, providers or legal duties change. We will publish the new version and bring material changes to the attention of affected users where appropriate.