Privacy Policy

Last updated: May 2026

1. Introduction

Generation Health & Fitness ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website, book services, or interact with us in any way.

2. What Personal Data We Collect

We collect the following types of personal data:

• Contact Information: Your name, email address, and phone number
• Fitness Information: Your fitness goals, health history, and training preferences
• Payment Information: Card details (processed securely via Stripe; we don't store full card numbers)
• Membership Data: Your gym membership details, attendance records, and training history
• Website Usage: Pages visited, time spent, clicks, and device information (via Google Analytics)
• Communications: Emails, messages, and feedback you send us

3. How We Use Your Data

We use your personal data for:

• Providing gym memberships and personal training services
• Processing payments and managing your account
• Sending appointment reminders and fitness updates
• Marketing communications (only if you've opted in)
• Improving our website and services
• Complying with legal obligations
• Resolving disputes and enforcing agreements

4. Third Parties We Share Your Data With

We share your data with the following trusted service providers:

• MailerLite: Email marketing and newsletters (only if you've subscribed)
• Calendly: Appointment scheduling and consultation bookings
• ClubRight: Gym membership management and billing
• Jotform: Contact forms and survey collection
• Google Analytics: Website traffic and user behaviour analysis
• Stripe: Payment processing (PCI compliant)

These providers are contractually obligated to protect your data and only use it for the purposes we've specified.

5. Cookies

Our website uses cookies to improve your experience. These include:

• Essential Cookies: Required for site functionality (login, forms)
• Analytics Cookies: Track how you use our site (Google Analytics)
• Marketing Cookies: Remember your preferences for targeted content

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

6. How Long We Keep Your Data

• Active Members: We keep your data while you're a member and for 3 years after you leave
• Email Subscribers: Until you unsubscribe
• Payment Records: 6 years (required by UK tax law)
• Website Analytics: 26 months (Google Analytics default)

7. Your Rights Under UK GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Restrict Processing: Limit how we use your data
• Data Portability: Receive your data in a portable format
• Object: Opt out of marketing communications or profiling

8. Data Security

We take data security seriously. All personal data is encrypted in transit and at rest. Payment information is processed via PCI-compliant Stripe. However, no system is 100% secure. If you believe your data has been compromised, contact us immediately.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of any material changes by email or by posting a notice on our website. Your continued use of our services means you accept the updated policy.