Privacy Policy

Grand Union CrossFit Ltd ("we", "us" or "our") respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, store and share your data when you visit our website, enquire about membership, book a free No Sweat Intro or become a member.

Who we are

Grand Union CrossFit Ltd is registered in England and Wales. Our gym is located at 1 Building One, The Greenway, Springfield Industrial Estate, Berkhamsted, HP4 1EH. If you have questions about this policy, email us at rob@grandunioncrossfit.com.

What information we collect

We may collect the following information about you:

• Contact details. Name, email address, phone number and postcode when you fill out a contact form, enquiry form or booking.
• Membership details. Class attendance, membership tier, payment history and emergency contact information.
• Health information. Injuries, medical conditions or exercise limitations you choose to disclose to us so we can coach you safely.
• Website usage. Pages visited, time spent on site and device/browser information via cookies and analytics tools.
• Communications. Emails, messages and notes from conversations with our team.

How we use your information

We use your data to:

• Respond to enquiries and book your free No Sweat Intro.
• Manage your membership, payments and class bookings.
• Keep you informed about class changes, events, gym news and offers (you can opt out at any time).
• Provide safe, personalised coaching based on your ability and goals.
• Improve our website and understand how visitors use it.
• Comply with legal obligations, including health and safety and accounting requirements.

Our legal basis for processing

We process your personal data on the following legal grounds:

• Performance of a contract. To provide membership and coaching services you have signed up for.
• Consent. Where you have opted in to marketing emails or provided optional health information.
• Legitimate interests. To improve our services, respond to enquiries and prevent fraud.
• Legal obligation. To comply with UK law, including HMRC and health and safety requirements.

Cookies and analytics

Our website uses cookies and similar technologies to function correctly and to help us understand how visitors interact with the site. You can manage or disable cookies through your browser settings. Where we use analytics tools, IP addresses are typically anonymised or pseudonymised.

Who we share data with

We do not sell your personal information. We only share data with trusted service providers who help us run the gym, such as:

• Membership management and payment processors.
• Email and booking platform providers.
• Website hosting and analytics services.

All third-party providers are required to keep your data secure and only use it for the purpose we specify.

How long we keep your data

We keep your data for as long as necessary to provide our services, maintain accurate financial records and comply with legal obligations. For example, we typically retain membership and payment records for 6 years for tax purposes, and marketing consent preferences until you withdraw them.

Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data in certain circumstances.
• Object to or restrict certain processing.
• Withdraw consent for marketing at any time.
• Make a complaint to the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at rob@grandunioncrossfit.com.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "last updated" date. Please review it regularly.

Note for review. This is a starter privacy policy intended for gym businesses. It is not a substitute for legal advice. We recommend having your solicitor review it before it is relied on for compliance purposes.