Privacy and cookie policy

This is our Privacy Policy, which sets out how The Gym Group plc uses and protects any information that you give us when you use this Website. By browsing and using our website you are agreeing to comply with and be bound by our Privacy Policy, which together with our Terms and Conditions of use, govern The Gym Group plc’s relationship with you in relation to this Website. Please read the following carefully so you can understand how your personal data will be treated.

For the purposes of the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR) and the Data Protection Act 2018 (DPA 2018)  the data controller is The Gym Group plc of 5th Floor, OneCroydon, 12-16 Addiscombe Road, Croydon, CR0 0XT. The term ‘The Gym Group plc’ or ‘us’ or ‘we’ refers to the owner of the Website whose registered office is 5th Floor, OneCroydon, 12-16 Addiscombe Road, Croydon, CR0 0XT. Our company registration number is 08528493 (United Kingdom). The term ‘you’ refers to the user or viewer of this Website.

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights please contact the DPO at Dataprotection@thegymgroup.com.

We may change this Privacy Policy from time-to-time. To ensure that you are always aware of our most current Privacy Policy, please take the time to check this page regularly.

What information do we collect?

If you are one of our anonymous visitors we may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information internally and externally. This statistical data about browsing actions and patterns does not identify any individual.

We may collect and process the following data about you:

  • Any information that you provide by filling in forms on this Website including but not limited to your name, address, email address and telephone/mobile number.
  • Details of any transactions you carry out through the Website will be recorded.
  • Further general information about you, including your personal or professional interests, experiences with our products and services or other products and services and your contact preferences.
  • The Gym Group plc may from time to time ask you to complete surveys via this Website and any information you provide in same will be recorded, though you are not obligated to take part.
  • Details of your visits to the Website, including, but not limited to, traffic data, location data, weblogs and other communication data.

We may also retain copies of any correspondence you send to us and details of your membership history.

IP addresses

We may collect information about your computer, including, where available, your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical information about the browsing actions of users of the Website and does not identify any individual.

What do we do with the information we collect?

We use collected information:

  • for internal record keeping;
  • for product development;
  • to provide you with information on our products and services which we feel may interest you;
  • to notify you about changes to our products and services;
  • answering your queries; and/or
  • contacting you for market research and marketing;

The Gym Group may contact you in relation to the nature of your attempted transaction, even if you don't confirm the transaction. This will be an operational email to enquire as to why the transaction was not completed. The data will not be used for any other purpose, won't be stored for longer than necessary and certainly not shared with any other company. Our aim is simply to provide you with the highest level of service that we can.

How we use your Personal Information

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:

  • Performance of a contract with you: Where we need to perform the contract we are about to enter into or have entered into with you.
  • Legitimate interests: We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and enable us to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
  • Legal obligation: We may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
  • Consent: We rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.

Direct Marketing

During the registration process on our website when your personal data is collected, you will be asked to indicate your preferences for receiving direct marketing communications. You can ask us to stop sending you marketing communications at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences OR by following the opt-out links within any marketing communication sent to you or by contacting us  at Dataprotection@thegymgroup.com

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Your legal rights

You have a number of rights under data protection laws in relation to your personal data. You have the right to:

  • Request access to your personal data (commonly known as a "subject access request").
  • Request correction of the personal data that we hold about you
  • Request erasure of your personal data in certain circumstances
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data
  • You also have the absolute right to object any time to the processing of your personal data for direct marketing purposes
  • Request the transfer of your personal data to you or to a third party
  • Withdraw consent at any time where we are relying on consent to process your personal data.
  • Request restriction of processing of your personal data. 

If you wish to exercise any of the rights set out above, please contact us at Dataprotection@thegymgroup.com.

International Transfers

Please note that the data that we collect may be transferred to and stored at a destination outside the UK.  Whenever we transfer your personal data out of the UK to countries which have laws that do not provide the same level of data protection as the UK law, we always ensure that a similar degree of protection is afforded to it by ensuring that appropriate safeguards are implemented.

CCTV policy

Please note that all of our gyms are monitored by CCTV 24 hours a day. The Gym Limited reserves the right for its employees and contractors to review footage as required and by entering onto our sites you consent to your image being recorded and reviewed and waive any and all claims in relation to same. Recorded CCTV footage will be stored securely and retained in compliance with the UK GDPR and the  Data Protection Act 2018. The Gym Limited is registered as a Data Controller with the ICO, Registration Number: Z2810154.

Who do we share this information with?

We may share your personal information with certain companies performing services on behalf of The Gym Group plc such as direct marketing agents, who will only use the information to provide a service that The Gym Group plc has asked them to provide.

Those selected companies will perform a function for us, such as agencies and suppliers whom have been instructed to assist us to more effectively deliver services, manage and conduct promotion and offers, provide technical assistance and support and perform other functions to support marketing activities.

All selected companies may have access to personal information if needed to perform such functions but will only be permitted by us to use personal information for the purpose of performing that function and not for any other purpose.

We may disclose your information to our subsidiaries or ultimate holding company and its subsidiaries, as defined in Section 1159 of the Companies Act 2006.

In the event we seek to sell or buy any business or assets, we may disclose your personal data to the prospective seller or buyer.

In all cases, any use of your personal information which has been instigated by us will comply with this Privacy Policy and with applicable data protection legislation. In some circumstances, we may have to disclose your personal information by law.

Save for this, we do not sell, transfer or disclose personal information we have collected from you in connection with our website activities to third parties outside The Gym Group plc.

Marketing

If you have previously consented to receive marketing you have a right to stop us from contacting you for marketing purposes at any time. If you no longer wish to be contacted for marketing purposes you can opt out by contacting us at Dataprotection@thegymgroup.com.

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and corporate policies to safeguard and secure the information we collect online. Please be assured that we will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy. Any transactions will be encrypted. We cannot, however, guarantee the security of your transmitted data and you submit such data at your own risk. Where we have given you a password to access certain areas of the Website you are responsible for keeping this confidential and we ask that you do not share this password.

Linking

Our Website may, from time to time, contain links to other websites which are not within our control. Once you have left our Website, we cannot be responsible for the protection and privacy of any information which you provide. You should exercise caution and look at the privacy statement applicable to the website in question.

Cookies

Cookies are files that store information on your hard drive or browser that allow The Gym to recognise that you have visited our Website before. They make it easier for you to maintain your preferences on the Website, and permit us to tailor it to your preferences and improve your browsing experience.

How can I prevent cookies being used?

You can, should you choose, disable the cookies from your browser and delete all cookies currently stored on your computer. You can find out how to do this for your particular browser by clicking "help" on your browser's menu or by visiting http://www.aboutcookies.org.

However, please be aware that should you choose to disable cookies from your browser it may prevent you from taking full advantage of The Gym’s Website and some parts of the Website may fail to work. You will see from the section below headed "Use of Cookies by The Gym Group plc" that all of the cookies used by us are recognised as being essential cookies, which are required in order to make our Website work.

Use of cookies by The Gym Group plc

We use cookies on this Website. When someone visits the Website we collect standard internet log information. We collect this information in a way which does not identify individuals.
If we do want to collect personally identifiable information through the Website we will be clear that we are doing so.

The table below provides an overview of all the cookies used by The Gym Group plc, the purpose of the cookie, when it expires and how you can find out further information about each cookie.

By accepting our Terms & Conditions and this Privacy Policy, you consent to The Gym’s use of cookies.

Cookie nameCookie typePurpose

UMB_UCONTEXT

NecessaryThis is backend specific cookie, only seen by site administrators accessing the back end of the website. This cookie stores encrypted information about the user's session for authentication purposes during their current login.

UMB_UCONTEXT_C

NecessaryThis is backend specific cookie, only seen by site administrators accessing the back end of the website. This cookie tracks the user's session state across different requests, helping maintain their context within the back-office environment.

UMB-XSRF-V

NecessaryUsed to prevent cross-site scripting attacks for your safety. This cookie ensures compatibility between different versions of CSRF protection mechanisms.

UMB-XSRF-TOKEN

NecessaryUsed to prevent cross-site scripting attacks for your safety. This cookie verifies that requests are made by legitimate users to prevent cross-site request forgery attacks.

__cf_bm

NecessaryThis cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.

OptanonAlertBoxClosed

FunctionalThis cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the user’s browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. 

OptanonConsent

FunctionalThis cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust.  It is set after visitors have seen a cookie information notice and, in some cases, only when they actively close the notice down.  It enables the website not to show the message more than once to a user.  The cookie has a one-year lifespan and contains no personal information.

_ga

StatisticsThis cookie is used to calculate visitor, session, campaign data and keep track of site usage for the site's analytics report. The cookies store information anonymously and assign a randomly generated number to identify unique visitors.

_ga_*

StatisticsThis cookie’s functionality is to store and count pageviews, enabling detailed analytics for performance and usage insights.

Changes to our Privacy Policy

Any changes we make to this Privacy Policy will be posted on this page and, where appropriate, notified to you by email.

How to contact us

If you have any questions about our Privacy Policy, please contact us at:

The Gym Group
5th Floor
OneCroydon
12-16 Addiscombe Road
Croydon
CR0 0XT