Sweatbox Privacy Policy
This Privacy Policy explains how Sweatbox (“the Studio”,
“we”, “us”, “our”) collects, uses, stores, and protects your personal
information in accordance with the UK General Data Protection Regulation (UK
GDPR) and the Data Protection Act 2018.
By using our website, booking system, or attending the
Studio, you agree to the practices described in this Policy.
Sweatbox acts as the Data Controller for the personal
information we collect.
1. Information
We Collect
1.1 Identity & Contact Data
- Full
name
- Date
of birth
- Email
address
- Phone
number
- Postal
address
1.2 Payment & Transaction
Data
- Billing
details
- Partial
card information (full payment details are handled securely by third-party
processors)
1.3 Health Data (Special Category Data)
Collected
only with your explicit consent, including:
- Relevant
medical conditions
- Injury
history
- Emergency
contact details
1.4 Usage Data
- Class
bookings and attendance records
- Membership
type and status
- Interactions
with our website and booking platform
1.5 Media & Promotional
Content
- Photos
or videos taken within the Studio (consent can be withdrawn at any time)
1.6 Technical Data
- IP
address
- Browser type and device information
- Cookies and analytics data (where consent applies) 2. How We Use Your Information
We process
your personal data for:
- Managing
memberships and providing contracted services
- Processing
payments
- Contacting
you about bookings and Studio updates
- Ensuring
health and safety
- Legal
and regulatory compliance
- Improving
services and user experience
- Marketing
(only with consent)
3. Lawful Basis for Processing
(UK GDPR Article 6)
- Contractual
Necessity
- Legitimate
Interests
- Legal
Obligation
- Consent
Special
Category Data is processed under:
- Article
9(2)(a) — explicit consent
- Article
9(2)(h) — health & safety in a fitness setting
4. Data
Security
We use encrypted systems, restricted access, and secure
storage. Data is retained only as long as necessary.
5. Sharing Your Data
We do not
sell your data. We may share it with:
- Payment
processors
- Booking
platforms
- IT
providers
- Professional
advisers
- Legal
authorities when required
6. International
Transfers
If data is transferred outside the UK, we ensure safeguards
such as SCCs or adequacy decisions.
7. Cookies
& Tracking
Used for functionality, performance, and analytics. Consent
is obtained where required.
8. Your
Rights
Access, rectification, erasure, restriction, portability,
objection, and withdrawal of consent.
9. Marketing
Communications
Sent only with explicit consent. You may unsubscribe
anytime.
10. Photography
& Video
Used for promotion. You may opt out at any time.
11. Data
Retention
Data is kept only as long as needed for services, legal
obligations, or disputes.
12. Updates
We may update this policy. The latest version will always
be available on our website.
13. Contact
Us
Sweatbox – Data Controller
Email: info@sweatboxofficial.com
Phone: 07392 554705
Address: Unit 1c, Boley Park Centre, Ryknild Street, WS14 9XU