Legal
Privacy policy.
What we collect, why, how long we keep it and how to ask us about it.
What we collect
When you use the free-week form we collect your name, phone number, email address and postcode, what you are interested in, where you are with training, and anything you write. The form also records the time it was sent and your IP address, used only to block automated submissions.
When you join we hold your contact details, date of birth, a photograph for the fob, your direct debit mandate (processed by our payment provider; we do not see your full bank details), your membership type and its history, your class bookings and attendance from the app, your induction notes and programmes, and any health information you choose to tell us so we can train you safely, which is special category data and handled as such. The gym and the yard are covered by CCTV for safety and security, recorded over after thirty days unless an incident requires footage to be kept. A parent's consent form is held for members under eighteen.
Why we use it
- To run your membership, take payment, open the door to your fob and book your classes (contract).
- To write and review your programme safely, including any health information you give us (consent, and legitimate interest in your safety).
- To send class reminders, timetable changes and a monthly note of what is new, which you can turn off in the app (legitimate interest).
- To ask for a review three months after joining through an independent platform (legitimate interest).
How long we keep it
Free-week requests that do not become a membership are deleted after three months. Membership records are kept for two years after you leave, then deleted; payment records for six years as HMRC requires; CCTV for thirty days unless an incident requires longer; health information is deleted when you leave unless you ask us to keep it for a return.
Who sees it
The four trainers and the desk, and the membership app and direct debit provider as processors under their published terms. Beyond that, only our insurer if there is an incident, the review platform (your email, once), and the police if footage is requested lawfully. The form is delivered by email to us; we do not use third-party marketing platforms and we never sell or share your details.
Cookies
This site sets a single session cookie to limit repeat form submissions. It contains no personal data and expires when you close the browser. The embedded map on the find-us page is served by Google and may set cookies under Google's own policy. The membership app is a separate service with its own notice.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete what we are not required to keep, or object to how we use it. Email hello@theforgegym.co.uk or write to the address above. You can also complain to the Information Commissioner's Office at ico.org.uk.