Last updated: 14 October 2026
Who we are
Swimera is operated by [legal entity name and registered address]. We are the data controller for personal information collected through this website. For any privacy question, contact us at support@swimera.co.uk.
What we collect
- Free-sample sign-ups: the email address you submit, and whether you opted in to marketing.
- Contact messages: your name, email address, chosen topic and message.
- Purchases: handled by Stripe. We receive the level bought, payment status, your email address and a Stripe identifier. We never see or store full card details.
- Access & progress: a signed access token tied to your purchase, and which sessions you have marked complete (stored against the purchase, not your name).
- Account details: if you create an account, your name, email address, and the names and ages of the swimmers you add, so we can show the right sessions and progress.
- Fin chat: questions you ask our chat assistant and its answers, kept so we can improve the answers it gives. Don’t include anything sensitive in a message to Fin.
- Reviews: if you rate a level, your star rating, comment, the name you choose to show, and whether we may quote it on the website. You can edit it later; it is deleted with your account.
- Visit statistics: anonymous page-view counts, as described under “Cookies and visit counting” below.
- Operational logs: standard server logs (IP address, request time) kept briefly for security and abuse prevention, including rate limiting.
Why we use it and our lawful basis
- To deliver a requested sample or reply to an enquiry — on the basis of taking steps at your request.
- To take payment and give access to purchased content, and to run your account — to perform our contract with you.
- To keep the service secure and prevent abuse — our legitimate interests.
- To send marketing — only with your freely given, specific consent, which is never pre-selected and can be withdrawn at any time.
Who we share it with
We share personal information only with processors acting on our instructions: Stripe (payments), our email provider (sample, access-link and account email delivery, and contact-form notifications), our hosting provider Cloudflare (site delivery and the database that stores accounts, sign-ups and progress), and Cloudflare Workers AI (answers questions asked in the Fin chat assistant). We do not sell personal information, and we don’t share it with anyone else without your consent unless the law requires it.
International transfers
Our processors may handle data outside the UK/EEA. Where they do, we rely on their own compliance with UK/EU data protection law (including the UK and EU Standard Contractual Clauses, where applicable) as our safeguard.
Retention
We keep account, purchase and progress data for as long as your account or access remains active, and for up to 7 years afterwards to meet UK accounting and tax record-keeping requirements. Contact-form and sample sign-up records are kept for up to 2 years, or until you ask us to delete them. Fin chat logs are kept for up to 12 months.
Your rights
Subject to UK GDPR, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or provide it in a portable format, and you can object to processing based on our legitimate interests or withdraw marketing consent at any time. To exercise any of these, email support@swimera.co.uk. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) if you’re unhappy with how we’ve handled your data.
Cookies and visit counting
Essential cookies only. We set a sign-in cookie when you log in, and a small cookie that remembers you have unlocked the free session. Both are strictly necessary for the service you asked for, so they don’t need consent. Your swimmers’ progress ticks are kept in your browser’s local storage on your device. We set no advertising or tracking cookies.
Counting visits, without cookies. To see which pages are useful and how many people reach the checkout, we count page views ourselves. For each visit we store the page address (without anything after a “?”), the name of the site you came from, any campaign label on the link you clicked (such as utm_source=facebook, which only says which post or email the link was in), and a short one-way code made from your IP address, browser type, the date and a secret key. The code can’t be turned back into your IP address and changes every day, so we can’t recognise you from one day to the next or build a profile of you. We don’t count visits from signed-in administrators or known bots, and we skip counting altogether if your browser sends a Do Not Track or Global Privacy Control signal. These statistics are deleted after about 13 months. Our lawful basis is legitimate interests: understanding and improving the site.
Reminder emails. If you have an account we may email you when a level is finished, or a gentle nudge after a quiet week. Every reminder has a “stop reminder emails” link, and you can switch them on or off in your account at any time. Receipts and account emails (such as password resets) are still sent.
We’ll update this page if any of this changes.
Children
Swimera is bought and used by adults supporting a swimmer. It is not directed at children and we do not knowingly collect information from them. Where a swimmer’s first name and age are added to an account, that information is provided and controlled by the adult account holder.
Changes to this policy
We may update this policy as the service changes. We’ll update the date above when we do, and tell you directly if a change materially affects your rights.