1. General intro
We are committed to ensuring that we manage your personal data professionally and in compliance with all applicable data protection laws. Part of this commitment is to ensure that there is transparency about how we process personal data.
This policy includes an explanation of:
· what data we are processing;
· why we are processing it and what we do with it;
· whether we will share it with anyone else;
· how we keep your data safe; and
· your rights.
We hope that you find this Data Protection Policy helpful. If you have any questions, please don’t hesitate to contact us.
Our website is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
2. Who we are and our contact details
We are RELENTLESS GYM and our registered office is at Building 9, Vantage Point Business Village, Mitcheldean, Glos GL17 0DD. In this Data Protection Policy RELENTLESS GYM is referred to as we, us, our or Relentless
Please send any queries concerning your data to us using the following contact details:
Name: Compliance Officer (Data Protection)
Email address: firstname.lastname@example.org
Phone: +44 (0)1594 546106
3. Your personal data
We have obtained information about you when you have enquired about membership at Relentless or completed and application for membership. Typically, the information that we obtain will be your:
· Emergency contact and contact number
· Medical history
· Payment information
3.1 If you have visited our website we may automatically collect some personal information including details of your browser and operating system, the website from which you visit our website, the pages that you visit on our website, the date of your visit, and the Internet protocol (IP) address assigned to you by your internet service. We collect some of this information using cookies – please see Cookies in section 4 for further information. We may also collect any personal information which you allow to be shared or that is part of your public profile on a third party social network.
3.3. How do we use your personal data and what is the applicable lawful basis?
Where you have consented, we may provide you with marketing information about our products and services. In addition, we will keep you informed of events that we think will be of interest to you.
We many process your information to ensure that you are provided with all the benefits of your membership of Relentless
To send updates regarding any changes to our services that may affect you.
In the event of an emergency.
We may process your information to comply with our legal obligations.
We may process your information to allow us to pursue our legitimate interests including:
analysing our performance and the performance of our franchisees in delivering services and products to you;
market research, training and the administration of our website;
the prevention of fraud or other criminal acts;
complying with requests from you including if you exercise any of your rights noted in this Data Protection Policy;
3.4. Will we share your personal data with any third parties?
We will never sell your personal details with third parties for the purpose of marketing and we would not pass your information to other organisations without your prior consent. Only information required by law would be passed on to the relevant organisation making the request.
3.5. How long do we keep your data?
If you have expressed an interest in buying Relentless Gym products or services, we will retain your contact details and related information concerning your enquiry for [five] years from the date that we last had contact with you.
If you have purchased membership from us (e.g. order forms, invoices and related correspondence) for [seven years] from the date of the contract.
All of the periods stated in this section may be extended if there is a legal requirement to do so.
You can find out more about the Cookies we use in our Cookies Policy.
You can set your browser not to accept cookies, however some of our website features may not function as a result.
5. Data security
The security of your information is of utmost importance to us. We seek to use reasonable measures to protect your information as required by the law, in line with industry standards and in accordance with the policies we have set. Sensitive data is held under strict security conditions. If you have any reason to believe that any personal information we hold is no longer secure, please contact us immediately
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
6. Links to other websites
7. Social Plugins
8. Your rights
We always aim to be as open as we can and allow people access to their personal information. Where we hold your personal data, you can make a ‘subject access request’ to us and we will provide you with:
a description of it;
an explanation of why we are holding it;
information about who it could be disclosed to; and
a copy of the information – unless an exception to the disclosure requirements is applicable.
If you would like to make a ‘subject access request’ please make it in writing to [the DPO whose contact details are set out above] and mark it clearly as ‘Subject Access Request’.
Unless you agree a different time, we will complete your subject access request within one month.
8.2. Right to stop marketing messages
You always have the right to stop marketing messages. We will usually include an unsubscribe button in any marketing emails. If you do wish to unsubscribe, please just click the unsubscribe button and we will promptly action that request. Alternatively, you can update your marketing preferences by contacting us at any-time.
8.3. Right to be forgotten
If we hold personal data about you, but it is no longer necessary for the purposes that it was collected and cannot otherwise be justified, you have the right to request that we delete the data.
8.4. Right to restrict data
If we hold personal data about you and you believe it is inaccurate you have the right to request us to restrict the data until it is verified. You also have the right to request that the data is restricted where you have a right to it being deleted but would prefer that it is restricted.
8.5. Transferring your personal data
Where we rely on your consent as the legal basis for processing your personal information or need to process it in connection with your contract, as set out under section 3, you may ask us to provide you with a copy of that information in a structured data file to you or to another service provider. We will action this request, usually by sending the data in a CSV file.
8.6. Right to complain
You always have the right to complain to the personal data regulator, the ICO. You may also be entitled to seek compensation if there has been a breach of data protection laws.
9. Policy updates
This policy was last updated on 25 May 2018.