Sweatbox Privacy Policy
This Privacy Policy explains how Sweatbox (“the Studio”, “we”, “us”, “our”) collects, uses, stores, and protects your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our website, booking system, or attending the Studio, you agree to the practices described in this Policy.
Sweatbox acts as the Data Controller for the personal information we collect.
1. Information We Collect
1.1 Identity & Contact Data
- Full name
- Date of birth
- Email address
- Phone number
- Postal address
1.2 Payment & Transaction Data
- Billing details
- Partial card information (full payment details are handled securely by third-party processors)
1.3 Health Data (Special Category Data)
Collected only with your explicit consent, including:
- Relevant medical conditions
- Injury history
- Emergency contact details
1.4 Usage Data
- Class bookings and attendance records
- Membership type and status
- Interactions with our website and booking platform
1.5 Media & Promotional Content
- Photos or videos taken within the Studio (consent can be withdrawn at any time)
1.6 Technical Data
- IP address
- Browser type and device information
- Cookies and analytics data (where consent applies) 2. How We Use Your Information
We process your personal data for:
- Managing memberships and providing contracted services
- Processing payments
- Contacting you about bookings and Studio updates
- Ensuring health and safety
- Legal and regulatory compliance
- Improving services and user experience
- Marketing (only with consent)
3. Lawful Basis for Processing (UK GDPR Article 6)
- Contractual Necessity
- Legitimate Interests
- Legal Obligation
- Consent
Special Category Data is processed under:
- Article 9(2)(a) — explicit consent
- Article 9(2)(h) — health & safety in a fitness setting
4. Data Security
We use encrypted systems, restricted access, and secure storage. Data is retained only as long as necessary.
5. Sharing Your Data
We do not sell your data. We may share it with:
- Payment processors
- Booking platforms
- IT providers
- Professional advisers
- Legal authorities when required
6. International Transfers
If data is transferred outside the UK, we ensure safeguards such as SCCs or adequacy decisions.
7. Cookies & Tracking
Used for functionality, performance, and analytics. Consent is obtained where required.
8. Your Rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
9. Marketing Communications
Sent only with explicit consent. You may unsubscribe anytime.
10. Photography & Video
Used for promotion. You may opt out at any time.
11. Data Retention
Data is kept only as long as needed for services, legal obligations, or disputes.
12. Updates
We may update this policy. The latest version will always be available on our website.
13. Contact Us
Sweatbox – Data Controller
Email: info@sweatboxofficial.com
Phone: 07392 554705
Address: Unit 1c, Boley Park Centre, Ryknild Street, WS14 9XU