Privacy Policy

---

 Effective date: 24 August 2026
Last updated: 24 August 2026

This Privacy Policy explains how [The Studio gym & fitness] ("we", "us", or "our") collects, uses, stores, and protects personal information when you visit [thestudiogymandfitness.co.uk], contact us, purchase a membership, book a class, or use our gym services.

The Studio gym & fitness is the organisation responsible for your personal information.

The Studio gym & fitness
Fosseway Business Park, Moreton in Marsh, GL569NQ
info@thestudiogym.co.uk

Depending on how you interact with us, we may collect:

• Identity and contact information, including your name, date of birth, address, email address, telephone number, and emergency contact details.
• Membership information, including your membership type, start date, attendance history, class bookings, cancellations, and access records.
• Payment information, including billing details, payment status, and transaction history. Card or bank details may be processed directly by our payment provider.
• Health and fitness information that you choose to provide, such as injuries, medical conditions, accessibility requirements, fitness goals, and physical-readiness questionnaire responses.
• Website and device information, including your IP address, browser type, device identifiers, pages visited, referral source, and cookie data.
• Communications, including emails, enquiries, feedback, complaints, and customer-service records.
• Marketing preferences, including whether you have agreed to receive promotional communications.
• Images and recordings, including CCTV footage used at our premises and photographs or videos where you have given appropriate permission.

Please do not provide health information that is not relevant to your safe participation in our services.

We collect information:

• Directly from you when you register, purchase a membership, complete a form, book a class, contact us, or visit our premises.
• Automatically when you use our website, subject to your cookie choices.
• From service providers that operate our booking, payment, membership, security, or communications systems.
• From another person, such as when someone purchases a membership or guest pass for you.

We may use personal information to:

• Create and administer your membership or online account.
• Process payments, refunds, renewals, and cancellations.
• Manage bookings, classes, personal-training sessions, and gym access.
• Communicate important service, safety, or membership information.
• Respond to enquiries, requests, complaints, and emergencies.
• Support safe participation and accommodate relevant health or accessibility needs.
• Operate CCTV, access-control systems, and other security measures.
• Prevent fraud, misuse, and breaches of our membership terms.
• Improve our website, facilities, classes, and customer experience.
• Send marketing messages where permitted and in accordance with your preferences.
• Meet our legal, regulatory, accounting, and insurance obligations.
• Establish, exercise, or defend legal claims.

Where UK or European data-protection law applies, we rely on one or more of the following legal bases:

• Contract: Processing is necessary to provide a membership, booking, or service you requested.
• Legal obligation: Processing is necessary to comply with applicable law.
• Legitimate interests: Processing supports our reasonable business interests, such as security, fraud prevention, customer service, and service improvement, provided your rights do not override those interests.
• Consent: You have given us permission, such as for certain marketing communications or non-essential cookies. You may withdraw consent at any time.
• Vital interests: Processing is necessary to protect someone's life in an emergency.

Health information and certain other sensitive information receive additional protection. Where required, we process this information with your explicit consent or under another condition permitted by law.

Payments may be processed by [goCardless or Stripe]. We may receive transaction details and payment status, but we may not directly receive or store complete card information. Your payment provider processes information under its own privacy policy.

Our website may use cookies and similar technologies to operate essential features, remember preferences, measure website performance, and support advertising.

Non-essential cookies will be used only where permitted by applicable law and, where required, after you give consent. Disabling certain cookies may affect website functionality.

We may send news, offers, class updates, or other promotional communications where you have consented or where the law otherwise permits us to do so.

You can unsubscribe by using the link in a marketing email or contacting [info@thestudiogym.co.uk]. Unsubscribing from marketing will not prevent us from sending essential messages about your membership, bookings, payments, safety, or changes to our services.

We may share personal information with:

• Membership-management and class-booking providers.
• Payment processors, banks, and direct-debit providers.
• Website hosting, IT, analytics, email, and communications providers.
• Personal trainers or instructors where necessary to deliver a service.
• Professional advisers, auditors, insurers, and debt-recovery providers.
• Police, courts, regulators, public authorities, or emergency services where required or permitted by law.
• A buyer, investor, or successor if our business is sold, reorganised, or transferred.

These recipients may only use information for the relevant purpose and must protect it as required by law and contract. We do not sell your personal information.

Some providers may process information outside the United Kingdom or the country where you live. Where required, we use recognised safeguards, such as adequacy regulations or approved contractual protections, to protect internationally transferred information.

You may contact us for more information about the safeguards used for a particular transfer.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, insurance, safety, and dispute-resolution requirements.

Retention periods vary by record type. For example, membership and transaction records may be retained for [Retention Period], while CCTV footage is generally retained for [CCTV Retention Period] unless it is required to investigate an incident.

When information is no longer required, we securely delete or anonymise it.

We use reasonable technical and organisational measures designed to protect personal information against loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, staff training, encryption, secure backups, and supplier reviews.

No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.

Depending on the law that applies, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information in certain circumstances.
• Restrict how your information is used.
• Object to certain processing, including direct marketing.
• Receive or transfer certain information in a portable format.
• Withdraw consent where processing is based on consent.
• Complain to the relevant data-protection authority.

To exercise a right, contact [info@thestudiogym.co.uk]. We may request information to verify your identity before responding.

If you are in the United Kingdom, you may complain to the Information Commissioner's Office at ico.org.uk. We encourage you to contact us first so we can try to resolve your concern.

Our website and services are not intended for children under [18] without the involvement of a parent or guardian. Where we provide junior memberships or activities, we may collect information about the child and their parent or guardian to administer the service and protect the child's safety.

We do not knowingly use children's information for behavioural advertising.

We may operate CCTV and access-control systems at our premises for safety, crime prevention, incident investigation, and protection of members, staff, and property. Signs will identify areas where CCTV is in use.

CCTV is not installed in areas where people have a high expectation of privacy, such as changing rooms, showers, or toilets.

Our website may contain links to other websites or services. We are not responsible for their privacy practices. You should review the privacy policy of each external service before providing personal information.

We may update this Privacy Policy to reflect changes to our services, providers, or legal obligations. The latest version will be published on this page with a revised "Last updated" date. We may provide additional notice where a change materially affects your rights.

Questions, requests, or complaints about this Privacy Policy should be directed to:

[The Studio gym & fitness]
[Fosseway Business Park, Moreton in Marsh, GL569NQ]
Email: [info@thestudiogym.co.uk]