Privacy Policy

---

Who We Are

CIRC-HIIT UK Ltd (“we”, “our”, “us”) is the data controller for your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
 

Registered Office:
CIRC-HIIT UK Ltd
Elstree Studios
Shenley Road
Borehamwood
Hertfordshire
WD6 1JG
 

If you have questions about your data, contact our Data Protection Officer (DPO) at circhiit@gmail.com.

2. What Personal Data We Collect

We collect and process the following personal data:
- Contact details: name, email, phone number, postal address
- Account and membership data: booking history, payment status, Direct Debit or card details (via our payment provider)
- Sensitive personal data (special category): health and fitness information (e.g., medical conditions, PAR-Q forms) collected for your safety
- Technical data: IP addresses, device/browser type, website usage via cookies

3. Why We Process Your Data & Legal Basis

We process your data for the following purposes:
- To provide classes, memberships, bookings, billing, and customer support (Contractual performance)
- To send membership communications, updates, or promotional offers (Legitimate interests, unless you opt out)
- To send marketing emails (Consent)
- To ensure your safety during exercise sessions, including the processing of health information (Legal obligation / Vital interests)
- To comply with legal obligations such as maintaining financial records (Legal obligation)

4. Who We Share Your Data With

We may share your data with:
- Service providers (e.g., GoCardless, Stripe for payments; GloFox for bookings; Mailchimp for email campaigns; Google Analytics for website insights) — all bound by data processing agreements.
- Legal or regulatory bodies, if required by law (e.g., HMRC, courts).
- Third parties only with your consent, for example, for marketing purposes.

5. International Data Transfers

We may transfer your data outside the UK/EEA (for example, to Mailchimp servers in the U.S.). Where we do this, we ensure adequate safeguards such as Standard Contractual Clauses are in place to protect your information.

6. How Long We Keep Your Data

We retain your personal data for as long as you remain a member — plus up to 6 years afterward to meet legal, tax, and insurance obligations.
Health and consent data may be retained longer only if absolutely necessary and permitted by law.

7. Your Rights Under UK GDPR

You have the right to:
- Access your data (make a Subject Access Request)
- Rectify inaccurate or incomplete data
- Request erasure of your data (“right to be forgotten”)
- Restrict processing in certain circumstances
- Object to processing (e.g., direct marketing)
- Request data portability
- Withdraw consent at any time, without affecting lawful processing
 

To exercise your rights, contact us at circhiit@gmail.com or by writing to our registered office (details above). We will respond within one month unless an extension is required.

8. Security of Your Data

We implement technical and organisational measures to protect your data, including secure servers, encryption, password protection, and access controls. Staff are trained in data protection.
 

However, no online system can be guaranteed completely secure, and you share data with us at your own risk.

9. Children & Minors

Our services are intended for individuals 18 and over. We do not knowingly collect data from minors. If you believe we have collected data in error, please contact us to request its deletion.

10. Cookies & Tracking

We use cookies (see our separate Cookies Policy) to improve your experience and understand usage patterns (e.g., Google Analytics).
You may disable non-essential cookies via our cookie banner or your browser settings. Essential cookies are required for site functionality.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. Updates will be posted on our website with the latest date shown below.
We will notify members of significant changes by email or via our platform.

12. Contact Us

For any questions, requests, or complaints regarding your personal data, please contact:
 

CIRC-HIIT UK Ltd
Elstree Studios
Shenley Road
Borehamwood
Hertfordshire
WD6 1JG
 

Email: circhiit@gmail.com
 

If you are not satisfied with our response, you may lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk/concerns/

Last Updated: 28 August 2025