Effective Date: 1/6/2026
Last Updated: 1/6/2026
This Privacy Policy explains how Heath Gym collects, uses, stores, and protects your personal information when you use our facilities, services, website, or membership systems.
1. Who We Are
Heath Gym
The Heath Business & Technical Park
Heath Road South
Runcorn
Cheshire
WA7 4QX
Telephone: 01928 515105
Email: gym@theheath.com
This Privacy Policy applies to all members, visitors, class attendees, personal training clients and users of our website and membership services.
2. Data Protection
We process personal information in accordance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Other applicable UK privacy legislation
Heath Gym acts as the Data Controller for the personal information you provide.
3. Information We Collect
We may collect and process the following information:
Identity Information
- Full name
- Date of birth
- Gender
Contact Information
- Address
- Email address
- Telephone number
- Emergency contact details
- Next of kin contact details
Membership Information
- Membership type
- Attendance records
- Class bookings
- Access records
- Membership history
Health Information
Where necessary for safe participation:
- Medical conditions disclosed by you
- Health declarations
- PAR-Q or fitness screening information
- Injury information relevant to exercise participation
Health information is treated as special category data and processed with appropriate safeguards.
Financial Information
- Payment details
- Direct Debit information
- Transaction history
We do not store complete payment card details on our systems.
Technical Information
When using our website:
- IP address
- Browser type
- Device information
- Website usage data
- Cookies and analytics information
CCTV Information
We may operate CCTV systems on our premises for:
- Safety and security
- Crime prevention
- Incident investigation
4. How We Collect Information
We collect information:
- When you complete membership applications
- When you join online or in person
- When you book classes
- When you contact us
- When you attend the gym
- Through CCTV systems
- Through our website
- Through our membership management platform
- Through third-party payment providers
5. ClubRight Membership Management System
Heath Gym uses the ClubRight membership management platform to administer memberships, bookings, attendance records, communications and payments.
ClubRight may process information including:
- Personal details
- Membership information
- Attendance records
- Payment administration
- Communication preferences
- App usage information
ClubRight acts as a data processor and processes information on our behalf in accordance with its privacy and security obligations.
6. Why We Use Your Information
We process your information to:
- Manage memberships
- Provide access to facilities
- Manage class bookings
- Deliver personal training and fitness services
- Process payments
- Respond to enquiries
- Ensure health and safety
- Improve our services
- Comply with legal obligations
- Prevent fraud and misuse
- Send service communications
Where you have consented, we may also send:
- Promotions
- Newsletters
- Special offers
- Event information
You can withdraw marketing consent at any time.
7. Legal Basis for Processing
We process personal information under one or more of the following legal bases:
- Performance of a contract
- Compliance with legal obligations
- Legitimate interests
- Consent
- Protection of vital interests
Health information is processed only where lawful under UK GDPR special category conditions.
8. Sharing Your Information
We may share information with:
- ClubRight
- Payment providers
- Direct Debit providers
- IT and software providers
- Professional advisers
- Legal or regulatory authorities
- Emergency services where required
We do not sell personal information to third parties.
9. Data Retention
We retain information only for as long as necessary.
Typical retention periods:
- Membership records
- Financial records
- Health declarations: only as required
- CCTV footage: generally up to 31 days unless needed for investigation
- Marketing records: until consent is withdrawn
10. Security
We use appropriate technical and organisational measures to protect information from:
- Unauthorised access
- Loss
- Alteration
- Disclosure
- Misuse
No internet transmission or electronic storage system can be guaranteed completely secure.
11. Your Rights
Under UK GDPR you have rights including:
- Right of access
- Right to correction
- Right to erasure
- Right to restrict processing
- Right to object
- Right to data portability
- Right to withdraw consent
- Right to complain
To exercise your rights contact:
Email: gym@theheath.com
12. Complaints
If you are unhappy with how we process your personal information, you can contact us first.
You may also complain to:
Information Commissioner's Office (ICO)
13. Cookies
Our website may use cookies and analytics technologies to improve functionality and understand website usage.
Where required, users will be asked for consent.
14. Changes to this Policy
We may update this Privacy Policy periodically. Updated versions will be posted on our website and become effective immediately upon publication.