Privacy Policy
Last updated: 3 March 2026
This Privacy Policy explains how Gym49 Carntyne Ltd collects, uses, stores and shares personal information when you visit our website, contact us, enquire about memberships, attend the gym, book sessions, or use our services.
We aim to keep this clear and practical. If anything is unclear, contact us and we will help.
1. Who we are
Data Controller: Gym49 Carntyne Ltd
Address: 49 Camelon Street, Carntyne Industrial Estate, Glasgow, G32 6AF
Email: gym49cartntyne@gmail.com
If you need this policy in another format, email us.
2. What information we collect
Depending on how you interact with us, we may collect:
Information you give us
Name, email, phone number
Membership details and account information
Enquiry details and messages you send us
Booking information for classes, inductions, personal training, or other services
Payment status and transaction references (we do not store full card details on our own systems)
Feedback and survey responses
Information collected when you use the site
Device and browser information
Pages viewed and how you move through the site
IP address and approximate location (city level)
Information collected at the gym
Attendance and entry logs (where used)
Incident reports (where relevant for safety)
CCTV images if cameras operate on site (used for safety and security)
Health and special category information
Sometimes, you may choose to share health information with us, for example injuries, conditions, or training limitations, to help us coach safely. This type of information is treated with extra care.
3. How we collect your information
We collect information when you:
Fill in forms on our website
Join as a member or request a trial
Book classes or services
Email, call, message, or speak to staff
Provide feedback
Use our website (including via cookies and similar technologies)
4. Why we use your information and the lawful basis
UK GDPR requires us to have a lawful basis for using personal data.
We use your information for the reasons below:
To provide memberships and gym services
Examples: setting up your account, managing access, bookings, delivering classes or PT
Lawful basis: Contract, or steps before entering a contract
To run the business safely and properly
Examples: managing attendance, handling complaints, preventing fraud, security, incident management
Lawful basis: Legitimate interests, and sometimes Legal obligation
To communicate with you
Examples: replying to enquiries, confirmations, updates about bookings or membership changes
Lawful basis: Contract, Legitimate interests
To improve Gym49
Examples: analysing feedback, improving operations, training and customer experience
Lawful basis: Legitimate interests
Marketing
Examples: sending offers, updates, or news
Lawful basis: Consent where required, otherwise Legitimate interests for existing customers, and you can opt out at any time
Health information used for coaching safety
Examples: adapting training because of an injury you tell us about
Lawful basis: Explicit consent, or another valid condition under data protection law depending on context
5. Who we share your information with
We may share data with trusted service providers who help us run Gym49, such as:
Membership management, booking, and CRM systems
Payment processors
Email and messaging providers
Website hosting and analytics providers
We only share what is necessary, and we expect suppliers to protect your information.
We may also share information if required by law, or to protect rights, safety, and security.
6. International transfers
Some of our suppliers may store or process data outside the UK. Where this happens, we use appropriate safeguards required by UK data protection law.
7. How long we keep your information
We keep personal information only as long as needed for the purpose it was collected, including:
While you are a member or actively using services
A reasonable period after you leave, for admin, legal, dispute handling, and tax requirements
Longer if required for legal reasons (for example, payment records)
If you want more detail for a specific type of data, email us.
8. Your rights
You have rights under UK GDPR, including:
The right to be informed
The right to access your data
The right to correct inaccurate data
The right to delete data in some situations
The right to restrict processing in some situations
The right to object to processing in some situations
The right to data portability in some situations
The right to withdraw consent (where consent is our basis)
To make a request, email info@gym49cartntyne.com
.
We may need to verify your identity.
9. Complaints
If you have concerns, contact us first and we will try to resolve it quickly.
You also have the right to complain to the UK Information Commissioner’s Office (ICO).
10. Cookies and analytics
Our website may use cookies and similar technologies to:
Make the website work properly
Understand how people use the site
Improve performance and content
You can manage cookies through your browser settings and, where available, our cookie controls.
The ICO provides guidance on cookies and privacy notices for small organisations.
11. Security
We take appropriate security measures to protect personal information, including access controls and secure systems. No system is perfectly secure, but we work to reduce risk.
12. Children
If we knowingly collect personal data from children, we will handle it with appropriate care and only where necessary for gym operations. If you believe a child has provided data without appropriate permission, contact us.
13. Changes to this policy
We may update this policy from time to time. The latest version will be posted on our website with the updated date.
14. Contact
For privacy questions or requests:
gym49cartntyne@gmail.com