Privacy policy
This page explains what personal data we hold about you, why we hold it, how long we keep it, and what you can ask us to do with it.
Who is responsible for your data
[[LEGAL NAME]], [[FULL ADDRESS]], registered under [[REGISTRATION NUMBER]]. For anything about your data, write to [[CONTACT EMAIL]].
[[If you have appointed a data protection officer, give their name and contact here.]]
What we collect
- Identity and contact: name, date of birth, email address, phone number, emergency contact.
- Membership: the plan you are on, your contract, invoices, payments, and any period your membership was paused.
- Training: bookings, attendance, and visits recorded at reception.
- Health data, where it applies: a medical certificate and its expiry date, and body measurements and progress records if you use coaching. This category is protected more strictly and is visible only to people who need it.
- Technical data: IP address and sign-in logs, kept for security.
Why we use it, and on what basis
- To provide your membership — running your account, your bookings, your access and your billing. Legal basis: performance of a contract.
- To meet our legal obligations — keeping invoices and accounting records. Legal basis: legal obligation.
- To keep you safe while training — medical certificate, emergency contact, access control. Legal basis: legitimate interest, and your explicit consent for health data.
- To tell you about news and offers — only if you have agreed, and you can withdraw at any time. Legal basis: consent.
Who else sees it
We do not sell your data. It is visible to our team, limited to what each role needs, and to the providers that let us operate:
- our payment provider, to take your membership payment: [[PAYMENT PROVIDER]];
- our email and SMS provider: [[MESSAGING PROVIDER]];
- our hosting provider: [[HOST AND COUNTRY OF HOSTING]].
[[If any of these process your data outside the European Union, say so here, along with the safeguard relied on — standard contractual clauses, or an adequacy decision.]]
How long we keep it
- Membership data: for as long as you are a member, then [[PERIOD]] afterwards.
- Invoices and accounting records: [[APPLICABLE STATUTORY PERIOD]], as the law requires.
- Medical certificate: until it expires, then deleted.
- Enquiries that went nowhere: [[PERIOD]] after the last contact.
Your rights
You can ask us at any time for:
- a copy of everything we hold about you, in a readable format;
- correction of anything that is wrong;
- deletion of your data — after which we keep only what the law requires us to keep, in anonymised form;
- restriction of how we use it, or an objection to our using it;
- withdrawal of your consent to marketing messages.
Write to [[CONTACT EMAIL]]. We answer within one month. If our answer does not satisfy you, you can complain to [[YOUR SUPERVISORY AUTHORITY]].
Cookies
This site sets one strictly necessary cookie, which keeps you signed in. It is not used for analytics or advertising, so it does not require your prior consent. [[If you add an analytics or advertising tool, this section must be revised and a consent banner becomes mandatory.]]