Premier Gym & Fitness Membership Privacy Policy

Last updated: September 2026

Premier Gym & Fitness respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you use our facilities, website, membership services, classes and other services.

This Privacy Policy should be read alongside our Terms & Conditions.

1. WHO WE ARE

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the organisation responsible for your personal information is:

Premier Gym & Fitness
Unit 26 Olympus Business Park
Newton Abbot
TQ12 2SN

Email: info@premiergymfit.co.uk

Telephone: 01626 362667

For the purposes of this Privacy Policy, "we", "us" and "our" refer to Premier Gym & Fitness.

2. THE INFORMATION WE COLLECT

Depending on how you interact with us, we may collect and process the following types of personal information.

2.1 Membership and contact information

This may include:

  • full name;

  • date of birth;

  • address;

  • email address;

  • telephone/mobile number;

  • membership type;

  • membership start and end dates;

  • membership status;

  • membership history;

  • membership preferences; and

  • information relating to cancellations, freezes, upgrades or other membership changes.

2.2 Payment information

We may process information relating to membership and other payments, including:

  • payment history;

  • amounts paid or outstanding;

  • payment dates;

  • direct debit information;

  • failed or missed payments; and

  • information necessary to administer your membership.

Where payments are processed through third-party payment providers, those providers may process payment information on our behalf.

We do not normally store complete payment card or direct debit details ourselves.

2.3 Class bookings and attendance

We may collect information relating to:

  • classes you book;

  • class attendance;

  • cancellations and late cancellations;

  • non-attendance/no-shows;

  • waiting lists;

  • booking restrictions or strikes; and

  • use of facilities and services.

This information helps us administer bookings, manage capacity and operate our facilities.

2.4 Access and entry information

We use access-control systems to manage entry to our facilities.

This may include:

  • membership/access status;

  • entry records;

  • access dates and times;

  • information associated with your access credentials; and

  • records relating to access permissions.

Our access-control system may be provided by a third-party supplier.

2.5 CCTV

CCTV operates at parts of our premises for security, safety, crime prevention and the protection of members, visitors, staff and property.

CCTV may record images of individuals entering or using the premises.

CCTV recordings are retained for a limited period and are securely deleted or overwritten when they are no longer required.

CCTV retention period: 6 months

Where an incident is identified, relevant footage may be retained for longer where reasonably necessary for the investigation of an incident, complaint, insurance matter or potential legal claim.

We may provide CCTV footage to the police or other law enforcement authorities where this is necessary or permitted by law, including where footage may assist with the prevention, detection or investigation of a crime.

We may also disclose relevant CCTV footage to insurers, professional advisers or other appropriate third parties where this is necessary to investigate an incident, deal with a claim or protect our legal rights.

Requests for access to CCTV footage containing your personal data will be dealt with in accordance with applicable data protection law.

2.6 Health and safety information

Where necessary for the safe operation of our facilities and activities, we may collect information relating to your health, injuries, medical conditions, disabilities, pregnancy or other circumstances that may affect your ability to exercise safely.

Health information is treated as special category data under the UK GDPR and is subject to additional legal protections.

We only seek to collect and use health information where it is necessary and appropriate for the relevant purpose.

2.7 Website and enquiry information

If you contact us through our website, email, telephone, social media or another communication channel, we may collect information such as:

  • your name;

  • contact details;

  • the content of your enquiry; and

  • any other information you choose to provide.

2.8 Marketing information

Where permitted by law, we may use your contact details to send information about:

  • memberships;

  • classes;

  • services;

  • promotions;

  • events;

  • offers;

  • club news; and

  • other information that may be relevant to our members.

Where marketing consent is required, we will obtain it in accordance with applicable law.

You can opt out of marketing communications at any time.

3. HOW WE USE YOUR INFORMATION

We may use your personal information for the following purposes:

  • administering your membership;

  • providing access to the gym and facilities;

  • processing payments and managing accounts;

  • administering class and facility bookings;

  • managing waiting lists and cancellations;

  • monitoring attendance and use of facilities;

  • communicating with you about your membership;

  • providing customer service and responding to enquiries;

  • managing health and safety;

  • protecting members, visitors, staff and property;

  • operating and monitoring access-control systems;

  • operating CCTV for security and safety;

  • investigating incidents, complaints or breaches of our Terms & Conditions;

  • preventing and detecting fraud, misuse or other unlawful activity;

  • maintaining accurate business records;

  • complying with legal and regulatory obligations;

  • managing disputes and potential legal claims;

  • improving our services and facilities;

  • sending marketing communications where permitted; and

  • operating and administering our website and other digital services.

We will not use your personal information for purposes that are incompatible with the purpose for which it was collected without providing appropriate information and, where necessary, obtaining consent.

4. OUR LAWFUL BASES FOR PROCESSING PERSONAL DATA

We will only process personal information where we have a lawful basis to do so.

Depending on the circumstances, the lawful basis may include:

4.1 Contract

We may process personal information where it is necessary to provide your membership or other services to you, or to take steps at your request before entering into a contract.

This may include administering memberships, processing payments, managing bookings and providing access to our facilities.

4.2 Legal obligation

We may process personal information where necessary to comply with a legal or regulatory obligation.

4.3 Legitimate interests

We may process information where it is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your rights and interests.

Examples may include:

  • operating and managing our business;

  • maintaining security;

  • preventing fraud or misuse;

  • protecting our members, visitors and staff;

  • managing CCTV;

  • investigating incidents;

  • improving our services; and

  • establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we will consider whether the processing is necessary and proportionate and whether your interests and rights override our interests.

4.4 Consent

Where required by law, we will ask for your consent before processing your information for a particular purpose.

Where we rely on consent, you can withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. HEALTH AND OTHER SPECIAL CATEGORY DATA

Some information that we may receive from members, such as information about injuries, medical conditions, disabilities or pregnancy, may constitute special category data under the UK GDPR.

Special category data requires both a lawful basis under Article 6 and an additional condition under Article 9 of the UK GDPR.

We will only process this type of information where we have identified an appropriate legal basis and additional condition for doing so.

Where possible, we will only collect the minimum information necessary for the relevant health and safety purpose.

Examples may include information needed to:

  • assess whether participation in a particular activity may present a health or safety risk;

  • make appropriate arrangements or adjustments;

  • respond appropriately to an injury or emergency;

  • manage health and safety within the gym;

  • consider whether a member can safely participate in a particular activity; or

  • comply with a legal obligation or establish, exercise or defend a legal claim.

We will not use health information for unrelated marketing purposes.

6. WHO WE MAY SHARE YOUR INFORMATION WITH

We may share personal information with carefully selected third parties where necessary to operate our business, provide services to you, comply with legal obligations or protect our legitimate interests.

These may include:

Membership and booking systems

We use third-party systems to administer memberships, bookings and related services, including:

Glofox

Glofox may process information relating to memberships, bookings, attendance and member accounts and payments on our behalf.

Payment providers

We may use third-party payment providers, including:

GoCardless

GoCardless may process information necessary to collect membership payments by direct debit.

Access-control providers

We use access-control technology to manage entry to our facilities, including:

Kisi

Kisi may process information relating to member access and entry.

Other service providers

Depending on the service being provided, we may also share information with:

  • IT and software providers;

  • website and hosting providers;

  • email and marketing providers;

  • professional advisers, including accountants, insurers and solicitors;

  • payment and banking providers;

  • security providers;

  • maintenance or service providers where relevant; and

  • public authorities, regulators, law enforcement or other organisations where we are legally required or permitted to do so.

We require third-party service providers who process personal information on our behalf to handle that information appropriately and in accordance with applicable data protection requirements.

7. INTERNATIONAL TRANSFERS

Some of the third-party services we use may involve the processing or storage of personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place, where required by applicable data protection law.

Details of relevant international transfers and safeguards may be obtained by contacting us using the details in Section 1.

8. HOW LONG WE KEEP YOUR INFORMATION

We will not keep personal information for longer than is reasonably necessary for the purpose for which it was collected, unless we are required or permitted by law to retain it for longer.

Retention periods will depend on the type of information and the reason it is being held.

For example, we may retain information relating to:

  • active memberships for the duration of the membership;

  • former memberships for a reasonable period after membership ends;

  • payments and financial transactions for the period required for accounting, tax and legal purposes;

  • bookings and attendance for the period necessary to administer the membership and deal with relevant operational or legal matters;

  • CCTV for the period specified in our CCTV retention arrangements;

  • marketing information until you unsubscribe or we otherwise determine that it is no longer required; and

  • complaints, incidents or legal matters for as long as reasonably necessary to investigate, resolve or defend them.

Where a specific legal retention period applies, we will retain the information for the required period.

Our retention periods are reviewed periodically.

9. DATA SECURITY

We take reasonable and appropriate technical and organisational measures to protect personal information against:

  • unauthorised access;

  • accidental loss;

  • destruction;

  • misuse;

  • alteration; and

  • unauthorised disclosure.

Access to personal information is limited to people who need it for legitimate business purposes.

Where appropriate, we use passwords, access controls and other security measures to protect our systems and records.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

10. YOUR DATA PROTECTION RIGHTS

Subject to certain legal conditions and exemptions, you may have the following rights in relation to your personal information:

Right of access

You can ask for a copy of the personal information we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete information.

Right to erasure

In certain circumstances, you can ask us to delete your personal information.

This is sometimes referred to as the "right to be forgotten". This right is not absolute and may not apply where we have a lawful reason to retain the information.

Right to restrict processing

In certain circumstances, you can ask us to restrict how we use your information.

Right to data portability

Where applicable, you may have the right to receive certain personal information in a structured, commonly used and machine-readable format or ask for it to be transferred to another organisation.

Right to object

You may have the right to object to certain processing, including processing based on legitimate interests.

You also have an absolute right to object to direct marketing.

Right to withdraw consent

Where we rely on consent as our lawful basis, you can withdraw your consent at any time.

11. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your data protection rights, please contact us:

Email: info@premiergymfit.co.uk

Post:
Premier Gym & Fitness
Unit 26 Olympus Business Park
Newton Abbot
TQ12 2SN

We may need to ask for information to confirm your identity before dealing with your request.

We will normally respond to valid requests within the time period required by applicable data protection law.

12. MARKETING COMMUNICATIONS

We may send you marketing communications where we have a lawful basis to do so.

You can unsubscribe from marketing emails by using the unsubscribe option included in the communication or by contacting us directly.

Unsubscribing from marketing communications will not stop us from sending essential service communications relating to your membership, payments, bookings, safety or other matters necessary to provide our services.

13. COOKIES AND WEBSITE TECHNOLOGIES

Our website may use cookies and similar technologies.

Some cookies are necessary for the website to function correctly. Other cookies may be used for purposes such as analytics, functionality or marketing.

Where required, we will ask for your consent before placing non-essential cookies on your device.

Further information about the cookies used on our website can be provided in our Cookie Policy.

14. AUTOMATED DECISION-MAKING AND PROFILING

We do not currently make decisions about members based solely on automated processing, including profiling, where those decisions produce legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide any information required by applicable data protection law.

15. INFORMATION FROM OTHER SOURCES

In some circumstances, we may receive personal information from sources other than directly from you.

For example, this may include:

  • payment providers;

  • booking or membership systems;

  • professional advisers;

  • organisations acting on your behalf; or

  • publicly available sources, where appropriate.

Where required by law, we will provide information about the source of personal information and the purposes for which we process it.

16. CHILDREN AND AGE RESTRICTIONS

Our facilities are restricted to individuals aged 16 and over.

We do not knowingly provide memberships to individuals under the age of 16.

17. DATA BREACHES

If we become aware of a personal data breach, we will assess the incident and take appropriate action in accordance with applicable data protection law.

Where legally required, we will notify the Information Commissioner's Office and/or affected individuals.

18. COMPLAINTS

If you have concerns about the way we handle your personal information, we would encourage you to contact us first so that we can investigate and try to resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), which is the UK's independent supervisory authority for data protection.

Information about making a complaint can be found on the ICO website.

19. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our services, systems, legal requirements or the way we process personal information.

The latest version will be published on our website.

Where changes are significant, we will take appropriate steps to bring them to your attention.

20. CONTACT US

If you have any questions about this Privacy Policy or the way we handle your personal information, please contact:

Premier Gym & Fitness
Unit 26 Olympus Business Park
Newton Abbot
TQ12 2SN

Email: info@premiergymfit.co.uk

Telephone: 01626 362667

Privacy Policy last updated: September 2026