Privacy Policy
Effective Date: 11.04.2026
Business Name: Transform Physiques Gym
Location: Barrow-in-Furness, England, United Kingdom
At Transform Physiques Gym, we are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, and protect your personal information when you use our services, visit our premises, or interact with our website or app.
Data Controller
Transform Physiques Gym is the data controller responsible for your personal data.
Information We Collect
We may collect and process the following data:
a. Identity & Contact Data
Full name
Email address
Phone number
Address
Date of birth
b. Membership Data
Membership type and status
Attendance and booking history
Account login details
c. Payment Data
Billing information
Transaction history
(Payments are processed securely via third-party providers; we do not store full card details.)
d. Health & Fitness Data (Special Category Data)
Fitness goals
Health information you choose to provide
We will only process this data with your explicit consent.
e. Technical Data
IP address
App/website usage data
Device and browser information
f. CCTV Data
Video recordings within our premises for safety and crime prevention
Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
Contract – to provide your membership and services
Legal obligation – to comply with applicable laws
Legitimate interests – to improve services and ensure security
Consent – for marketing and health-related data
How We Use Your Data
We use your personal data to:
Manage your membership and bookings
Process payments
Provide personalised fitness plans
Communicate important updates
Send marketing communications (with your consent)
Maintain safety and security (including CCTV)
Improve our services and user experience
Sharing Your Data
We do not sell your personal data.
We may share your data with:
Payment processors
Booking and software providers
IT and security service providers
Legal or regulatory authorities where required
All third parties are required to respect the security of your data.
International Transfers
If any of our service providers are based outside the UK, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses.
Data Retention
We retain your data only as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.
Your Rights
Under UK GDPR, you have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Cookies
Our website/app may use cookies to improve your experience. You can manage cookie preferences through your browser settings.
Children’s Data
Our services are not intended for individuals under 16 without parental consent.
Security
We implement appropriate technical and organisational measures to protect your personal data.
Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted with a revised effective date.
By using our services, you agree to this Privacy Policy.