B! HEALTH & FITNESS T R A I N – P E R F O R M – R E C O V E R |
YOUR INFORMATION
DATA PRIVACY POLICY
━
This privacy notice explains how B! Health & Fitness Ltd collects, uses, stores and shares personal information about members, prospective members and other people who use our clubs and services.
Contact details
Post: B! Health & Fitness, Devonshire Road, Heathpark Industrial Estate, Honiton, Devon, EX14 1ST
Telephone: 0330 043 3914 option 1
Email: memberships@bhealthandfitness.co.uk
Information we collect and use
Identity and contact information, including name, address, date of birth, telephone number and email address.
Membership, access and attendance information, including membership status, entry/visit records, bookings and service history.
Payment and transaction information required to administer memberships and collect sums due.
Health and fitness information that you choose or are required to provide for induction, safety or service delivery. Health information is special category data and is handled with additional safeguards.
Communications with us, including enquiries, complaints and service messages.
Marketing preferences and related communication records.
CCTV images and footage captured in designated areas of our premises.
Records generated when an emergency intercom or panic alarm pendant is activated, including incident details and any associated response or CCTV review.
Why we use your information
To enter into and administer your membership agreement and provide the services you request.
To manage access, bookings, payments, arrears and member support.
To protect the health and safety of members, staff and visitors and operate our emergency response arrangements.
To prevent and investigate crime, unauthorised access, damage, fraud, misconduct and breaches of Club Rules.
To investigate accidents, incidents, complaints and legal claims.
To comply with legal and regulatory obligations.
To send marketing where we have the required permission or another lawful basis to do so.
CCTV and emergency monitoring
CCTV records continuously in designated areas of our clubs. The CCTV is not continuously watched live. Recorded footage may be accessed where reasonably necessary for safety, security, access control, incident investigation, the prevention or detection of crime, the protection of property, or the investigation of suspected breaches of Club Rules.
During unstaffed hours, our external security provider monitors fixed emergency intercoms and portable panic alarm pendants. If an alarm is activated, the provider may access relevant CCTV cameras to assess the situation, communicate with the member where the system permits, and contact emergency services where necessary.
We do not use CCTV simply because the technology allows us to do so. We aim to limit surveillance to what is necessary and proportionate for the stated purposes and to make members and visitors aware that recording takes place.
Lawful bases
Depending on the activity, we rely on one or more lawful bases under UK data protection law, including performance of a contract, compliance with a legal obligation and our legitimate interests. Our legitimate interests include operating safe and secure clubs, protecting members, staff and property, managing access, preventing and investigating misuse, and establishing or defending legal claims. Where we process special category data such as health information, we also identify an appropriate additional condition under data protection law.
Who we share information with
We share personal information only where necessary and with appropriate safeguards. Recipients may include our membership/payment platform providers, IT and hosting providers, external security and emergency monitoring provider, professional advisers, debt collection agencies, insurers, law enforcement bodies, emergency services and regulators. Service providers acting on our behalf are required to process information only for authorised purposes and to protect it appropriately.
| HOW LONG WE KEEP INFORMATION |
We keep different categories of personal information for different periods according to why we need them and any legal, contractual or claims-related requirements. We do not keep all personal information for a blanket six-year period. CCTV footage is retained only for the shortest period reasonably necessary for its purpose, unless particular footage needs to be preserved for an incident, complaint, investigation, legal claim or request from an authorised body. Our retention periods are documented and reviewed.
| SECURITY |
We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure. Access to CCTV and other sensitive information is limited to authorised persons and service providers who need it for an approved purpose.
Your data protection rights
Right of access – to ask for copies of your personal information, subject to applicable exemptions and the rights of others.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to ask us to delete information in circumstances where the law provides this right.
Right to restriction – to ask us to restrict how information is used in certain circumstances.
Right to object – to object to certain processing, including processing based on legitimate interests, subject to applicable grounds for continuing the processing.
Right to data portability – where applicable, to receive or transfer information you provided to us.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time without affecting processing already carried out lawfully.
To exercise a right, contact us using the details above. We will respond within the period required by applicable data protection law.
| CCTV TRANSPARENCY |
Signs are displayed to tell members and visitors that CCTV recording is in operation and to direct them to further information. Members are also informed about the unstaffed-hours emergency arrangements through the membership and induction process.
| COMPLAINTS |
If you have concerns about how we use your personal information, please contact us first using the details above. You also have the right to complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF; telephone 0303 123 1113; www.ico.org.uk.