Privacy Policy

Effective date: 01/06/2025

Elevate

Hybrid Performance Centre (“we”, “our”, “us”) is committed to protecting the privacy and personal data of our members, clients, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Elevate Hybrid Performance Centre

Address:
Unit 1a, The Cedars Business Centre, Avon Road, Cannock. WS11 1QJ.

Data Controller: Elevate Hybrid Performance Centre

We determine the purposes and means of processing your personal data and are therefore considered a “Data Controller” under UK law.

2. What Personal Data We Collect

We may collect the following categories of personal data:

General Information
Full name
Date of birth
Email address
Phone number
Home address
Emergency contact details
Health & Fitness Information
Medical history (e.g. pre-existing conditions, injuries)
Physical fitness assessments or goals
Lifestyle and training preferences – Note: This may include “special category data” under UK GDPR, which we collect and process only with your explicit consent.
Payment and Transaction Information
Billing address
Partial payment details (e.g., card expiry, name)
Payment history – We do not store full card details. Payments are processed securely by third-party PCI-compliant providers (e.g. Stripe, GoCardless, etc.)
Digital and Technical Information
IP address
Device type
Cookie data
Website usage analytics

3. How We Collect Your Data

We collect your personal data:

When you register online or in person as a member or visitor
When you fill in forms or participate in classes
During fitness consultations or health assessments
When you make payments or purchases
Through our website and associated systems

4. Lawful Basis for Processing

We process your personal data only where we have a lawful basis to do so, including:

Consent – for health information or marketing communications
Contract – to deliver services under your membership agreement
Legal obligation – to comply with UK tax, health & safety, or insurance regulations
Legitimate interests – to improve our services and protect our premises

5. How We Use Your Information

We use your personal data to:

Set up and manage your membership account
Schedule classes, consultations, and services
Tailor programmes to your health and fitness needs
Process payments and issue invoices
Send service updates, offers, or newsletters (where opted in)
Maintain safety, medical readiness, and legal compliance

6. Marketing and Communications

We may contact you with updates, offers, or news if you have given consent. You can withdraw this consent at any time by clicking “unsubscribe” in emails or contacting us directly.

7. Sharing Your Information

We do not sell or rent your data. We may share it with:

Payment providers (e.g., Stripe, GoCardless)
Fitness software or scheduling platforms (e.g., TeamUp, GymMaster)
Medical professionals in case of emergency
UK regulators or law enforcement when legally required
All third-party partners are contractually bound to comply with data protection obligations.

8. How Long We Keep Your Data

We retain your data only as long as necessary for the purposes stated, including:

Membership records – up to 7 years post-termination (for legal obligations)
Health information – retained only during active membership, unless required longer
Marketing preferences – until you withdraw consent

9. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise any of these rights, please contact us using the details in Section 1.

If you are unhappy with how we handle your data, you can lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

10. Security of Your Data

We implement appropriate technical and organisational security measures, including:

Encrypted systems and secure servers
Access controls and staff confidentiality agreements
Regular security audits
Payment data is processed using PCI DSS-compliant third-party services.

11. Cookies and Website Tracking

Our website uses cookies for essential functionality, analytics, and marketing. When you visit our site, a cookie banner will give you the option to accept or decline cookies.

You can manage cookie preferences at any time in your browser settings.

12. Changes to This Privacy Policy

We may update this policy from time to time. Updates will be posted on our website and, where appropriate, notified to you via email.

Last updated: 11/06/2025

13. Contact Us

If you have any questions about this policy or your personal data, contact: