Privacy notice

Last updated: 7 September 2026

Who is responsible for your information?

Fitnessclub is the data controller for the personal information described in this notice. We process information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Information we collect and why

• Member accounts: your name, email address and securely hashed password are used to create and protect your account, provide member services and respond to account requests.
• Class bookings: we record the classes you book or cancel so that we can manage attendance, capacity and your booking history.
• Enquiries: when you contact us, we collect your name, email address, optional telephone number, subject and message so that we can respond.
• Technical information: our systems may process limited request, security and diagnostic information needed to operate and protect the website and API.

We normally rely on taking steps at your request and performing our membership services, our legitimate interests in running a safe and effective club, and compliance with legal obligations. Where consent is required, you may withdraw it at any time.

Session cookie

When you sign in, we use a strictly necessary session cookie to keep you authenticated and secure your account. It does not store your password and is not used for advertising. Blocking this cookie will prevent account login and class booking features from working. Signing out ends the active login session.

Sharing and security

We do not sell your personal information. Information is accessible only to authorised club personnel and service providers who need it to operate our hosting, database and member services. Providers must protect the information and act only on our instructions. We may also disclose information where the law requires it or where necessary to protect people, our club or our legal rights.

We use reasonable organisational and technical safeguards, including access controls, encrypted connections, password hashing and secure server-side sessions. No online service can guarantee absolute security, so please use a unique password and keep your login details private.

How long we keep information

We retain account and booking information while your account is active and for only as long afterwards as needed for administration, dispute handling and legal obligations. Enquiries are kept for the time needed to respond and complete any follow-up. Expired sessions are routinely removed. Information that is no longer required is securely deleted or anonymised.

Your UK data rights

Depending on the circumstances, you may ask us to:

• provide a copy of your personal information;
• correct inaccurate or incomplete information;
• delete or restrict the use of your information;
• provide certain information in a portable format;
• stop processing based on our legitimate interests; or
• review a decision made solely by automated means.

These rights are not absolute, and we may need to verify your identity before acting on a request. You may also complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

Contact us

To ask a privacy question or exercise your rights, contact:

Changes to this notice

We may update this notice when our services or legal obligations change. The latest version will always be published on this page with its updated date.