Thirst Fitness Privacy Policy
Effective Date: 28 July 2025
At Thirst Fitness, we are committed to protecting and respecting your privacy. This policy outlines how we collect, use, store, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Thirst Fitness Ltd operates a group training facility offering memberships, classes, and fitness-related services. It also offers Personal training in the form of SGPT & 1 to1. For the purposes of data protection legislation, we are the data controller of the information you provide to us.
Contact Details:
Email: admin@thirstfitness.co.uk
Address: 6 Galileo Close, Plymouth, PL7 4JW
2. What Information We Collect
We may collect and process the following types of personal data:
-
Contact information: Name, email address, address
-
Health and fitness information: Medical history, injuries, or physical conditions (for your safety during training)
-
Payment details: Last four digits of card info, billing history (processed securely via third-party providers)
-
Booking and attendance history
-
Marketing and communication preferences
-
Technical data: IP address, device/browser information (when using our website or booking system)
3. How We Use Your Data
We use your personal data to:
-
Process memberships and manage your account
-
Book and manage class attendance
-
Communicate essential information about your membership
-
Ensure your health and safety during fitness activities
-
Send updates, promotions, or notifications (only if you opt in)
-
Comply with legal and regulatory obligations
We do not sell or rent your personal data to third parties.
4. Lawful Basis for Processing
Our processing of your data is based on the following lawful grounds:
-
Contractual necessity: To manage your membership and provide services
-
Legal obligation: For health, safety, and financial recordkeeping
-
Consent: For optional marketing communications
-
Legitimate interests: To operate and improve our business and services
5. Marketing Communications
-
Marketing emails or push notifications are only sent if you have explicitly opted in.
-
You can unsubscribe at any time via the unsubscribe link in emails or by contacting us.
6. How We Store and Protect Your Data
-
Data is stored securely with encrypted systems and access controls.
-
We retain your personal data only as long as necessary or legally required (e.g., 6 years for financial records).
-
We use Club Right and 1&1 Ionos to manage bookings, communications, and digital interactions. These platforms are GDPR-compliant.
7. Sharing Your Data
We may share your data with the following trusted third-party service providers to support business operations:
-
Payment processors: Stripe, London & Zurich
-
Booking platform & CRM: Club Right
-
Email marketing & push notifications: Club Right, 1&1 Ionos
All third-party providers operate under strict data processing agreements and may only use your data for the specific services they provide on our behalf.