Privacy Policy – Gym In A Tin Ltd

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR).

By using our services or providing your personal data, you consent to the practices described in this policy.

1. What Personal Data We Collect

We may collect and process the following types of personal information:

• Full name

• Email address

• Phone number

• Address (if applicable)

• Health or medical information (if provided for gym induction or health & safety purposes)

• Other personal data relevant to your gym membership, induction, or class participation

2. How We Use Your Personal Data

We process your personal data for the following purposes:

• To process orders, bookings, and payments

• To provide you with access to Gym In A Tin services, such as gym inductions and fitness classes

• To communicate important updates, such as class schedules or gym access

• To send marketing communications (if you have opted in)

• To comply with legal and regulatory obligations, including health and safety

• To manage and fulfil purchases of Gym In A Tin units, including delivery, installation, servicing and after-sales support

3. Legal Basis for Processing

We rely on the following lawful bases to process your personal data:

• Consent – for marketing communications or health data provided for inductions

• Contractual necessity – to provide services you’ve signed up for

• Legitimate interest – to improve our services, manage bookings, and operate securely

• Legal obligation – for compliance with relevant laws (e.g. H&S or insurance)

4. Data Sharing

We do not sell or rent your data. However, we may share it with trusted third parties when necessary to deliver our services:

• Service providers who support our operations (e.g. gym booking platforms, email systems)

• Fulfilment and logistics providers (e.g. equipment or induction material delivery)

• Health professionals delivering inductions or classes (where relevant)

• Legal or regulatory authorities where required by law

All partners are bound by confidentiality and data protection agreements.

5. Data Retention

We will keep your personal data only as long as necessary to:
• Fulfil the purposes outlined above
• Comply with legal, regulatory or insurance requirements

After this period, your data will be securely deleted or anonymised.

6. Your Rights Under UK GDPR

You have the right to:

• Access – Request a copy of the personal data we hold about you

• Rectification – Correct any inaccuracies in your data

• Erasure – Request deletion of your data (in certain circumstances)

• Restriction – Limit how we use your data

• Objection – Object to certain types of data processing

• Data portability – Request a machine-readable copy of your data

To exercise any of these rights, please contact us at: sales@gyminatin.com

7. Consent

By using our services or submitting your personal data, you consent to its use as described in this policy. You may withdraw your consent at any time by contacting us.

8. Contact Us

If you have questions about this policy or how we process your personal information, please contact:

Gym In A Tin Ltd
2 Ash Combe
Chiddingfold
Godalming
GU8 4RY
Email: sales@gyminatin.com
Phone: +44 (0)7787 700471