Privacy Policy and Media Consent
1. Data Controller Fortitude Training Co. is the "Data Controller" of your personal information. We are committed to protecting your privacy and processing your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect To provide our services, we collect and process:
Personal Identity Data: Name, date of birth, and contact details.
Emergency Contact Data: Name and telephone number of a designated person to be contacted in the event of a medical emergency or accident.
Financial Data: Bank account or card details for membership billing (processed securely via TeamUp/Stripe).
Special Category Data: Health and medical information provided in your PAR-Q to ensure your safety during exercise.
Media Data: Photographs and video footage captured during sessions.
3. How We Use Your Data We use your information to manage your membership, process payments, ensure your physical safety during coached sessions, and communicate gym updates. We will also contact your designated emergency contact should a medical incident occur while you are on the premises. We do not sell your data to third parties.
4. Data Retention In accordance with UK fitness industry standards and insurance requirements, we retain your PAR-Q and waiver records for a period of six (6) years after you cease to be a member, after which they are securely deleted.
5. Media & Social Media Consent Fortitude Training Co. regularly captures photographs and video footage of classes and events to be used for marketing, social media (Instagram, Facebook, etc.), and our website.
By agreeing to this policy, you grant us a non-exclusive right to use your image in our promotional material.
Your Right to Withdraw: We respect your privacy. If you do not wish to be filmed or photographed, or if you wish for a specific post featuring you to be removed, please notify a member of the coaching staff or email hello@fortitudetrainingco.uk.
6. Your Rights Under UK GDPR, you have the right to:
Request a copy of the data we hold about you (Subject Access Request).
Request the correction of inaccurate data.
Request the deletion of your data (subject to our legal and insurance retention obligations).
7. Third-Party Processors Your data is stored and processed using TeamUp (Gym Management Software). Their privacy protocols are compliant with UK data protection standards.