Data security & privacy

Data Protection Strategy Statement

The Gym Group are committed to safeguarding the privacy and personal data of our members, employees, and partners and recognise the importance of complying with the UK General Data Protection Regulation (UK GDPR) and all relevant data protection laws.

Our data protection strategy is built on the following core principles:

1. Transparency: We are committed to being open and transparent about the personal data we collect, how we use it, and the rights of individuals.
2. Accountability: We handle personal data responsibly, with clear lines of accountability. We regularly review and update our data protection practices to ensure compliance.
3. Security: We implement robust security measures to protect personal data and safeguard our information.
4. Compliance: We adhere to the highest standards of data protection, aligning our practices with UK GDPR requirements. Regular audits and assessments are conducted.
5. Continuous Improvement: We continuously update our data protection policies and procedures to reflect best practices and technological advancements.

By embedding these principles into our daily operations, we protect the trust our members place in us and ensure that personal data is handled with care and respect.

Our Approach to Data Protection Training

We believe that protecting our members' personal data is not just a legal requirement but a fundamental responsibility. To ensure the highest standards we have implemented a comprehensive data protection training program for all staff .By investing in continuous data protection training, we strive to create a culture of privacy awareness and security within our gyms, ensuring that our members' information is always in safe hands. We require a 100% GDPR and Cyber Security internal training completion rate annually.

Data Privacy Framework

Our Data Privacy Policy outlines clear principles ensuring that we protect the privacy of everyone involved with our gyms—whether a member, employee, or business partner. Our approach is grounded in the UK GDPR setting a high standard for data protection across all our operations.

Cyber Security Framework

We have established a robust Cyber Security Framework. This includes organisational, process-related, and technical security measures aligned with international standards. Our comprehensive approach ensures that our data remains secure from both internal and external threats.