Privacy Policy
How GainzFit collects, uses and protects your personal information.
Last updated: September 2026
1. Who we are
This membership service is provided by GainzFit (“we”, “us”), a gym in Morley, Leeds. We are the “data controller” responsible for your personal information.
Contact: gainz@gainzfit.co.uk · Unit A Rear, Queen Street, Morley, LS27 8HE · 07789 254911.
2. The information we collect
- Your details — name and email address.
- Membership — the plan you choose, join date, and membership status.
- Health information — your answers to the pre-exercise (PAR-Q) questions. This is sensitive “special category” data and we treat it with extra care.
- Payment — your Direct Debit is set up and collected through GoCardless. Your bank details are entered on GoCardless’ own secure page — we never see or store your bank account number. We only hold references (customer/mandate IDs) and a record of payments.
- Access — your digital membership pass and, where used, entry records at the gym.
- Rewards card — if you get our loyalty card: your first name, your email and mobile number if you give them, whether you want follow-up texts and offers, and a record of your stamps and free visits. If you add it to Apple Wallet, your iPhone also gives us an anonymous device code so we can update the card when you get a stamp.
3. Why we use it, and our lawful basis
- To provide your membership and collect payment — because it’s necessary to perform our contract with you.
- Your health answers — with your explicit consent, to keep you safe and advise whether to speak to your GP before exercising.
- To run the gym safely and keep records — our legitimate interests as a business.
- GAINZFIT emails (Gregg's Q. and our Friday emails on training, food, mindset and gym news). If you tick the box when you join, that's your consent. Every email has an unsubscribe link, and you can opt out at any time without affecting your membership.
- Your rewards card — to run the scheme you signed up to (contract). We only send thank-you texts, offers or emails if you ticked the box to say yes. Every text has an opt-out link, and you can change your mind at any time.
4. Who we share it with
We only share your data with trusted providers who help us run the service, under contract:
- GoCardless — to set up and collect your Direct Debit.
- Railway — secure cloud hosting for the membership system.
- MailerLite - to send our emails, if you receive them.
- Apple / Google — only if you choose to add your pass to Apple Wallet or Google Wallet.
- Our text-message provider — your mobile number and the message, only if you agreed to follow-up texts, so the text can be delivered.
We never sell your personal information.
5. How long we keep it
We keep your membership and payment records for as long as you’re a member and for a reasonable period afterwards to meet our legal and accounting obligations, then we securely delete them. Ask us at any time and we will delete your rewards card and its history straight away.
6. Your rights
Under UK data protection law you have the right to: access your data, correct it, ask us to delete it, restrict or object to how we use it, receive a copy of it, and withdraw consent at any time. To exercise any of these, contact us at gainz@gainzfit.co.uk.
7. Keeping your data safe
Your data is stored securely, sent over encrypted (HTTPS) connections, and staff access is protected by individual logins. Payments are handled by GoCardless, a regulated provider.
8. Complaints
If you’re unhappy with how we’ve handled your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Changes
We may update this policy from time to time. The latest version will always be shown here.