Privacy policy

Who we are

The Box is a functional fitness gym at Unit C4, Shawfield Road, Carlton, Barnsley S71 3HS. We're the data controller for the personal information described in this policy, which means we decide how it's used and we're responsible for looking after it.

Legal name: [The Box's legal business name, e.g. the limited company name or the owner's name if you're a sole trader]

ICO registration number: [Your ICO data protection fee registration number]

If you have any questions about this policy or your information, email theboxbarnsley@gmail.com, call 07584 710127 or write to us at the address above.

What we collect

We only collect what we need. Depending on how you get in touch, that may include:

• 14-day trial sign-ups: your name, email address, phone number, what you're interested in (for example classes or personal training) and anything else you choose to tell us, such as your goals.
• Mummy Fit bookings: your name, email address, phone number, your baby's age and anything you choose to tell us about your recovery or health, such as a C-section or back pain.
• Messages: anything you send us by email, phone, Instagram or Facebook.
• Website use: if you agree to analytics cookies, information about how you use our website, such as the pages you visit, the device and browser you use and roughly where you are (town or city level). See Cookies below.

Health information

Some of what you tell us, especially on the Mummy Fit form, may be about your health. The law treats health information as particularly sensitive, so we only collect it with your explicit consent, which you give by ticking the box on the form.

We use it only so your coach can adapt your sessions safely. We don't share it with anyone else, and you can withdraw your consent at any time by contacting us. If you'd rather not share health details online, leave the "Anything we should know?" box empty and tell your coach in person instead.

How we use your information and why

Data protection law requires us to have a lawful reason for each way we use your information. Ours are:

• To reply to your enquiry and set up your 14-day trial or first class. This is necessary to take the steps you've asked for before you become a member.
• To adapt your sessions around your health or recovery. Based on your explicit consent.
• To follow up on your enquiry if we haven't heard back. Based on our legitimate interest in running the gym. We'll keep this to a couple of messages.
• To send you news and offers. Only if you've asked us to, and you can unsubscribe at any time.
• To understand how people use our website and improve it. Based on your consent to analytics cookies.
• To meet our legal obligations, for example keeping financial records.

We never sell your information.

Who we share it with

We only share your information with trusted companies that help us run the website and the gym, and only as much as they need:

• Netlify hosts our website and stores the forms you send us.
• Google provides Google Tag Manager and, if you agree to analytics cookies, Google Analytics.
• Our email and phone providers, so we can reply to you.

These companies act on our instructions and must keep your information secure. We may also share information if the law requires it.

International transfers

Some of the companies above, including Netlify and Google, may store or process information outside the UK, for example in the United States. Where that happens, we rely on the protections UK law requires, such as the UK–US data bridge or the UK International Data Transfer Addendum, so your information is protected to UK standards.

How long we keep it

• Enquiries and form submissions: [12 months] if you don't go on to join, then deleted.
• Health information you've shared: for as long as you train with us, then deleted within [3 months] of you leaving.
• Marketing: until you unsubscribe.
• Financial records: 6 years, as required by law.
• Analytics data: [14 months] (the retention period set in Google Analytics).

Cookies

Cookies are small files saved on your device when you visit a website. We use Google Tag Manager to manage the tools on our site.

Essential cookies make the website work and don't need your consent.

Analytics cookies, such as Google Analytics, help us see which pages are useful and how people find us. We only set these if you agree, and you can change your mind at any time using the cookie settings on our website or by clearing cookies in your browser.

Your rights

Under UK data protection law, you have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that's wrong or incomplete
• ask us to delete your information
• ask us to limit how we use your information
• object to us using your information, including for marketing
• ask us to send your information to you or another organisation in a reusable format
• withdraw your consent at any time, where we rely on consent

To use any of these rights, contact us using the details above. It's free, and we'll respond within one month.

Children

Our Teens class is for ages 10–16. If your child would like to join, a parent or guardian should get in touch with us on their behalf. Our website forms aren't designed for children to fill in themselves.

For Mummy Fit we ask for your baby's age so we can plan the session. We don't collect any other information about your baby.

Keeping your information safe

We use secure, reputable services, limit access to your information to the people who need it, and delete it when we no longer need it.

Complaints

If you're unhappy with how we've handled your information, please talk to us first and we'll do our best to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.