Privacy policy

Who we are

MyGym London ("we", "us") runs a private community gym and the MyGym London website and app. We are the controller of the personal information described in this policy, which means we decide how and why it is used.

MyGym London is a sole trader business run by Pedro Ricardo Martins Das Neves, who is the person responsible for your information. Registered address: Binfield Road, Stockwell, SW4 6TD. We use the gym premises under an agreement with Bush Hill Park Primary School.

Gym address: Main Avenue, Bush Hill Park, Enfield, EN1 1DS. Email: info@mygymlondon.co.uk. Phone: 07459 020381.

What this policy covers

This policy covers the MyGym London website (mygymlondon.co.uk), the MyGym London app (app.mygymlondon.co.uk), and information you give us at the gym, for example when you join or book a personal training session.

What we collect

Depending on what you use, we collect:

• Account details: your name and email address, and your login. Your password is stored securely and we cannot read it.
• Membership details: which plan you hold and whether it is active. The app checks this with our website system so that gym slots are only booked by members whose plan includes them.
• Bookings: the classes and gym slots you book, cancel or attend. If you book on our website, the app also shows that booking, matched to your app account by your email address. This is why we ask you to use the same email in both places.
• Reminders: if you switch on class reminders, a push notification address for your phone or browser, and a record of which reminders were sent.
• Training logs: workouts you record in the app. These are optional.
• Weight and body fat: only if you separately agree to this in the app. You can switch it off at any time and your measurements are then deleted.
• Health and safety form: your answers about health conditions, allergies and any notes you add, together with a record of the consents you gave. This is health information, which the law treats as special category data (see below).
• News and offers: if you tick the box to hear from us by email, we keep a record of the wording you agreed to, the date, and where you ticked it, so we can prove it and respect it if you change your mind.
• Service emails: we email the address on your account about your bookings and account, such as booking confirmations and cancellations, class reminders and a welcome message. We keep a short technical record of each email and whether it was sent.
• Website forms: what you type into our contact, personal training, free trial, offer, corporate and Kids Gym forms, the page you came from, and a scrambled (hashed) version of your IP address that we use only to stop spam. For Kids Gym this includes your child's details and any medical information you choose to give.
• Personal training and enquiries: your email address and the option you choose when you ask for a free personal training session or contact us.
• Referrals: if you refer a friend, the details needed to apply your reward.
• Sign-up attempts: if you try to create an app account, we keep your IP address and a scrambled (hashed) version of your email address for up to 24 hours, to stop repeated attempts and abuse. Our suppliers may also keep standard technical logs, such as IP addresses.
• Payments: payments are taken through Wix. We do not store your full card number.

Why we use it and our legal basis

We only use your information where the law allows. The reasons we rely on are:

• To provide your membership, account and bookings (contract). This covers account details, membership status and bookings.
• To keep you safe while you train (consent). We ask for your explicit consent before we collect your health and safety form answers.
• To record your own progress (consent). Weight and body fat tracking only happens if you opt in.
• To send class reminders (consent). You choose to switch these on and can switch them off at any time.
• To keep our service secure, prevent abuse and fix problems (legitimate interests).
• To keep accounting and tax records (legal obligation).
• To email you service messages about your account and bookings, such as confirmations, cancellations and class reminders, and to reply to your enquiries (contract, or steps you ask us to take before a contract). These are not marketing.
• To send you news and offers by email (consent). We only do this if you opt in, and you can unsubscribe at any time using the link in the email or by contacting us.

Health information

Your health and safety form is special category data. We collect it only with your explicit consent, and only to help our trainers keep you safe and to decide when it is sensible to adjust a session.

You can see, correct or delete your answers in the app under Profile, Health and consent. You can withdraw your consent at any time in the same place or by emailing us. If you withdraw, your health answers and any weight and body fat measurements are deleted. Withdrawing consent does not affect anything we did before you withdrew.

We ask you to complete the form again after 12 months, or sooner if we change the questions.

Only MY GYM London coaches and management who need it can see members' health forms, through a private login. Each member can see only their own answers.

Who we share it with

We do not sell your information. We share it only with companies that help us run the service, and only as needed:

• Supabase, which hosts the app database, logins and background functions.
• Hostinger, which hosts the MyGym London website.
• Instagram (Meta), which supplies the pictures in the photo strip on our home page. Your browser loads them from Instagram's servers, so Meta can see your IP address when the strip loads. We do not add Instagram's tracking code to our pages.
• Wix, which runs our memberships, online checkout, payments and some gym bookings.
• Resend, which sends our emails from info@mygymlondon.co.uk: booking confirmations and cancellations, class reminders, welcome emails, replies to your enquiries and, only if you opted in, news and offers. It receives your email address, your first name and the details in the email (for example the class, date and time), and keeps its own delivery records for 30 days. We use its Ireland (EU) sending region.
• GitHub, which hosts the app files. It can see technical details, such as your IP address, when your device loads the app.
• Your phone or browser maker's push notification service (for example Apple, Google or Mozilla), if you switch on reminders.

We may also share information where the law requires it, for example with the police, a regulator or a court.

How long we keep it

• Account and booking records: while your account is open and for 12 months afterwards.
• Health and safety form answers: until you delete them or withdraw consent, until you delete your account, or after 12 months of not signing in to the app, whichever comes first. They are then deleted automatically.
• Weight and body fat measurements: until you switch the option off or delete your account.
• Reminder addresses: until you switch reminders off, log out on that device, or delete your account.
• Payment and accounting records: usually 6 years, as tax law requires.
• Website form enquiries: 2 years. Kids Gym registrations: 1 year.
• News and offers consent records: while you are subscribed and afterwards, so we can show that you withdrew.

Where your information is stored

The app database is hosted by Supabase in Ireland.

Our suppliers may store or process information outside the UK, for example in the EEA or the United States. Where they do, we rely on safeguards the law recognises, such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses with the UK addendum.

Your rights

Under UK data protection law you have the right to:

• be told how your information is used, which is the purpose of this policy;
• see the information we hold about you;
• have wrong information corrected;
• have your information deleted in certain cases;
• restrict or object to some uses of it;
• receive the information you gave us in a portable format;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, use the controls in the app or email info@mygymlondon.co.uk. We reply within one month.

Children

Our Kids Gym session is for children aged 8 and over. For anyone under 18, a parent or guardian creates the account and gives consent on their child's behalf.

If you are a parent or guardian and think your child has given us information without your permission, email us and we will delete it.

Cookies and similar technologies

The app and website use cookies and similar storage. See our Cookie notice for details and your choices.

Changes to this policy

We may update this policy. The date at the top shows when it last changed. If a change affects how we use your health information, we will ask for your consent again.

Contact and complaints

Questions about your information: email info@mygymlondon.co.uk or ask us at the gym.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Also see: Terms and conditions · Cookie notice.