PRIVACY POLICY
Apex strength and Wellness is a trading name of “The rig gym ltd”
Trading from unit 7/8 Millside industrial estate, Southmill road, Bishop’s Stortford, Hertfordshire, CM23 3DP. UK
This privacy policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the UK GDPR and the Data Protection Act 2018, we are the data controller (i.e. the company who is responsible for, and controls the processing of, your personal data)
1. Information collected
1.1 We collect personal information from you:
1.1.1. when you visit the Site;
1.1.2. when you visit Apex Strength and Wellness and partake in and of the activities provided.
1.1.3. every time you correspond with us by phone, e-mail or whatsapp, or other means of contact.
1.2. Type of information we collect from you:
This includes information you provide when you register to use our Site, subscribe to our service, enquire about the gym, classes etc, contact Apex via social media, on our Site or enter a competition, promotion or survey, and if you report a problem with our Site, and when you attend our premises. The information you give us may include details such as your name, address, e-mail address and phone number and financial details and personal medical information or any special assistance you request and information about your health requirements and history and details about your religion and ethnicity.
1.3.2. information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our Site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number;
Some of this data will be aggregated or statistical, which means that we will not be able to identify you individually.
Purpose | Personal Information Used | Lawful Basis |
Provide and manage bookings, , including gym, classes, 1-1s. | All the personal information we collect. | To enter into and perform contracts with either yourself or the organisation that you represent. |
Carry out other obligations arising from any contracts entered between you and us, including meeting any dietary or special assistance request you have made. | All the personal information we collect. | To enter into and perform contracts with either yourself or the organisation that you represent. |
Tailoring our services to your requirements and preferences. | All the personal information we collect. | We have a legitimate interest to improve the services and/or products we provide. |
Improving our Site to ensure that content is presented in the most effective manner for you and for your computer. | How you use our website. | We have a legitimate interest to improve the online services we provide and user experience. |
Measuring or understanding the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you. | All personal data we collect. | We have a legitimate interest to improve the services we provide and user experience. |
Allowing you to participate in interactive features (eg Website Chat) of our service, when you choose to do so. | All personal data we collect. | We have a legitimate interest to improve our services we provide and user experience. |
Administering our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes. | How you use our website. | We have a legitimate interest to improve the online services we provide and user experience. |
CCTV or other security monitoring | All personal data we | We have a legitimate interest to protect property, staff and users of our premises. |
Conducting market research surveys and providing you with information about products and services we offer. | Contact details and services and products | We may ask for your consent to process your data for this purpose, you may revoke your consent at any point. Alternatively, if you or your organisation have purchased similar services from us previously, we may market similar products or services as a legitimate interest in developing our business. You have the right to opt out from |
Deal with your queries or complaints, claims, legal disputes or raise queries, claims, legal disputes or complaints with you or the organisation you work | All the personal information we collect. | This may be necessary to perform a contract with you or the organisation that you represent. We have a legitimate interest to improve the services and/or products we provide to defend, bring or establish legal claims. |
Comply with our legal obligations such as notifying you of a change to the way we process your personal data and to comply with health and safety or similar regulations such as recording incidents and accidents that may occur during time spent at any of our premises, including NHS track and trace or if applicable any relevant dietary, health or special assistance information. This may also include emergency situations, or where requested in cooperation with police investigations. | All of your personal data. | Comply with our legal obligations. |
Promoting future events. | Your photograph or audio and/or video recordings that you appear in may be used in marketing | We may ask for your consent to process your data for this purpose, you may revoke your consent at any point. |
Although this personal data is collected automatically, no automated decisions about you are made by us using this information.
2. Information you give us about other individuals
If you give us information on behalf of someone else, please ask for their consent for you to give their personal data to us and if they do not give their consent, please do not give any of their personal data to us. We are relying on the assumption that the other person has appointed you to act on his/her behalf and has agreed that you can give consent on his/her behalf to the processing of his or her personal data and receive on his/her behalf any data protection notices.
3. Our use of your personal Information:
3.1. We process the personal information you have provided to us:
3.1.1 in order to perform a contact that we have with you as a guest or customer;
3.1.2 where we have a legitimate interest which is not outweighed by your rights and freedoms;
3.1.3 where you have given your consent; and/or
3.1.4 to comply with our legal obligations.
You can find out more about each type of processing in the table below:
For some of your personal information you may have a legal, contractual or other requirement or obligation for you to provide us with your personal information.
If you do not provide us with the requested personal information, we may not be able to properly perform our contract with you or the organisation you represent or comply with legal obligations and we may have to terminate our relationship.
For other personal information you may not be under an obligation to provide it to us, but if you do not provide it then we may not be able to properly perform our arrangements with you or the organisation you represent.
Where you have given us your consent to use your personal information in a particular manner, you have the right to withdraw this consent at any time, which you may do by contacting Apex Strength and wellness.
We will generally only ask for your consent for direct marketing.
Please note however that the withdrawal of your consent will not affect any use of the data made before you withdrew your consent and we may still be entitled to hold and process the relevant personal information to the extent that we are entitled to do so on bases other than your consent. Withdrawing consent may also have the same effects as not providing the
information in the first place, for example we may no longer be able to provide marketing information to you.
5. Sharing your personal information
We may share your personal information:
5.1. within our group: we may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
5.2.5. if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use www.villagegym.co.uk/terms-conditions and other agreements; or
5.2.6 to protect the rights, property, or safety of our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
6. Data Retention
We will keep your personal information for as long as is necessary for the purpose for which it has been obtained and then for as long as there is any risk of a potential claim, which will be dependent upon the limitation period for the particular type of claim. We have set out below the main retention periods which will apply:
● For individual contacts at customers this will be for as long as we continue to have a relationship with that customer and then for a period of 2 years afterwards.
● For marketing contacts it will generally be a period of 3 years after we were last in contact with you.
● For website users it will generally be a period of 3 months after you used our website.
● For individuals seeking information, making complaints or otherwise corresponding with us it will generally be 1 year.
7. Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
7.1 Use of Cookies on this Website
We use cookies in line with our Cookies Policy
The types of cookies used are as follows:
7.1.1 Session cookies
These allow websites to link the actions of a user during a browser session. They may be used for a variety of purposes such as remembering what a user has put in their shopping basket as they browse around a site. They could also be used for security or to facilitate use of webmail. These session cookies expire after a browser session so would not be stored longer term.
7.1.2 Persistent cookies
These are stored on a users' device in between browser sessions which allows the preferences or actions of the user across a site (or in some cases across different websites) to be remembered. Persistent cookies may be used for a variety of purposes including remembering users’ preferences and choices when using a site or to target advertising.
7.1.3 First and third party cookies
Whether a cookie is 'first' or 'third' party refers to the website or domain placing the cookie. First party cookies in basic terms are cookies set by a website visited by the user - the website displayed in the URL window. Third party cookies are cookies that are set by a domain other than the one being visited by the user. If a user visits a website and a separate company sets a cookie through that website this would be a third party cookie.
7.2 Where we store your Personal Data
The personal information we collect may be transferred to and stored in countries outside of the UK and the European Union. Some of these jurisdictions require different levels of protection in respect of personal information and, in certain instances, the laws in those countries may be less protective than the jurisdiction you are typically resident in. We will take all reasonable steps to ensure that your personal information is only used in accordance with this privacy notice and applicable data protection laws and is respected and kept secure and where a third party processes your data on our behalf we will put in place appropriate safeguards as required under data protection laws.
In limited circumstances the people to whom we may disclose personal information as mentioned in section 5 above may be located outside of the UK and European Union. In these cases, we will impose any legally required protections to the personal information as required by law before it is disclosed.
Our staff may in limited circumstances access personal information outside of the UK and European Union if they are on holiday abroad outside of the UK or European Union. It may also be processed by staff who work for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and
the provision of support services. If they do so they will be using our security measures and will be subject to their arrangements with us which are subject to English Law and the same legal protections that would apply to accessing personal data within the UK.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using TLS technology Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
8.3. Right to be Forgotten
In certain circumstances you can request us to delete all information we hold which identifies
you. You can make this request at any time by contacting us at info@apexgym.uk
8.4. Data Corrections
You have the right to require us to correct any inaccuracies in your data free of charge. You can also exercise this right at any time by contacting us at info@apexgym.uk and:
8.4.1 providing us with enough information to identify you (e.g. account number, username, registration details); and
8.4.2 specifying the information that is incorrect and what it should be replaced with.
8.8. Withdraw Consent
If you have consented to us processing your data you can change your mind at any time.
This will not affect the lawfulness of any processing carried out before you withdraw your
consent.
8.9. Complain to the Data Protection Regulator
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We always try to deal with your concerns in the first instance, so please contact us if you are dissatisfied with how your personal data has been handled.
8.10 Object to automated decision making
You have the right to object to the use of automated decision-making (making a decision solely by automated means without any human involvement) and profiling (automated processing of personal data to evaluate certain things about an individual).
9. Changes to our Privacy Policy
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our privacy policy.
10. Contacting Us
Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to info@apexgym.uk