Privacy Policy

Privacy Policy for Zenith Fitness
Last updated: July 2025
Privacy Policy - Our Commitment
At Zenith Fitness, we are committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Privacy Policy outlines how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Zenith Fitness is a UK-based fitness organisation offering gym memberships, classes, and wellness services. For the purposes of data protection law, we are the "data controller" of your personal data.
2. What Data We Collect
We may collect and process the following categories of personal data:
-
Identity Data: Name, date of birth, gender
-
Contact Data: Address, email, phone number
-
Membership Data: Membership type, attendance history, class bookings
-
Health Data: Medical conditions or information relevant to your fitness goals (only with your explicit consent)
-
Payment Data: Payment card details (processed via secure third-party payment processors), billing history
-
Technical Data: IP address, login data, browser type, location data (via our website or mobile app)
-
Marketing Preferences: Your communication and marketing preferences
3. How We Collect Your Data
We collect data in the following ways:
-
When you register for a membership or trial
-
When you visit our gyms or attend classes
-
Through our website, app, and online forms
-
When you interact with us via email, phone, or social media
4. Why We Use Your Data
We process your data for the following lawful purposes:
-
To manage your membership and provide gym services
-
To ensure your safety and tailor our services to your health needs
-
To take payments and manage billing
-
To communicate service updates and respond to enquiries
-
To send marketing communications (with your consent)
-
To improve our services and customer experience
5. Legal Basis for Processing
Under UK GDPR, we rely on one or more of the following lawful bases:
-
Performance of a contract (e.g. managing your membership)
-
Legal obligation (e.g. tax and financial records)
-
Consent (e.g. marketing communications, health data)
-
Legitimate interests (e.g. improving our services, ensuring security)
6. Sharing Your Data
We may share your data with:
-
Payment service providers (e.g. Stripe, GoCardless)
-
IT and system administration providers
-
Professional advisers (e.g. accountants, legal consultants)
-
Law enforcement agencies where required by law
We do not sell your personal data to third parties.
7. Your Data Rights
You have rights under data protection law, including:
-
The right to access your data
-
The right to correct inaccurate data
-
The right to request deletion of your data
-
The right to restrict or object to processing
-
The right to data portability
-
The right to withdraw consent at any time
-
The right to lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, contact us at: twickenham@zenithfitness.co.uk or Guildford@zenithfitness.co.uk
8. Security
We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. This includes encryption, secure servers, and limited access controls.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or on our website.