IRONHQ LTD PRIVACY POLICY

Effective Date: 27 November 2025

IronHQ ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services, visit our website, or engage with us in any way. We take the privacy of our members very seriously and ensure compliance with the UK’s General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or interacting with us, you consent to the collection and use of your information in accordance with this Privacy Policy.

1. Information We Collect

We collect and process personal information that you provide to us when you register for membership, use our gym facilities, or communicate with us. The types of personal information we may collect include:

  • Personal Identification Information: Name, email address, phone number, home address, date of birth, emergency contact details, and other relevant details for membership registration.

  • Payment Information: Payment details such as credit card numbers, billing addresses, and payment history.

  • Health and Fitness Information: Details related to your fitness goals, medical conditions, injuries, and any other information you voluntarily provide for fitness assessments, workout plans, and health monitoring.

  • Usage Data: Information about how you use our website, gym facilities, and services, including IP address, browser type, operating system, and usage patterns.

2. How We Use Your Information

We use the personal information we collect for the following purposes:

  • Providing Services: To process your membership, manage your account, and provide access to our gym facilities and fitness programs.

  • Communication: To send you membership-related communications, important updates, offers, and respond to your inquiries.

  • Health and Safety: To ensure your safety and wellbeing when using our gym facilities, including adapting fitness plans to your health status.

  • Payment Processing: To process and manage payments for memberships, classes, and additional services.

  • Marketing: To send you newsletters, promotional offers, or marketing materials if you have opted in to receive them. You can opt out of marketing communications at any time.

  • Service Improvement: To improve our services, gym facilities, and customer experience based on feedback and usage patterns.

3. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds under the UK GDPR:

  • Contractual Necessity: To provide you with gym services and fulfill our contractual obligations, such as membership agreements.

  • Consent: Where you have given us explicit consent (e.g., for marketing communications, health assessments, etc.).

  • Legitimate Interests: For administrative purposes, customer feedback, and improving our services, provided our interests do not override your rights and freedoms.

  • Legal Obligation: For compliance with legal or regulatory requirements (e.g., tax or health and safety laws).

4. How We Protect Your Information

We implement appropriate technical and organizational measures to protect your personal data. This includes:

  • Using encryption technology for sensitive data transmission (e.g., payment information).

  • Limiting access to your personal information to staff who need it to provide services.

  • Regularly reviewing and improving our security practices to ensure your information is secure.

However, please be aware that no system is 100% secure, and we cannot guarantee the absolute security of your information.

5. Sharing Your Information

We do not sell or rent your personal data. We may share your personal information in the following cases:

  • Service Providers: We may share your information with third-party companies who help us run our business, such as payment processors, website hosts, or marketing partners. These companies are required to protect your data and may only use it for the services they provide.

  • Legal Compliance: We may disclose your personal information if required by law, legal processes, or to protect our rights, property, or safety, or the rights, property, or safety of others.

  • Medical Emergencies: If there is an emergency, we may share your health information with emergency medical personnel or authorities to ensure your safety.

6. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You can ask us to correct any inaccuracies in the personal data we hold about you.

  • Right to Erasure: You can request that we delete your personal data, subject to certain legal obligations.

  • Right to Restriction of Processing: You can ask us to restrict the processing of your personal data in certain situations.

  • Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.

  • Right to Object: You can object to the processing of your personal data, particularly in relation to direct marketing.

To exercise any of these rights, please contact us at info@ironhq.uk.

7. Cookies and Tracking Technologies

We use cookies and other tracking technologies on our website to enhance your user experience, improve functionality, and collect information about usage patterns. You can control cookies through your browser settings, but please note that disabling cookies may affect the performance of certain features on our website.

For more information on how we use cookies, please refer to our Cookie Policy.

8. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to read their privacy policies before providing any personal information.

9. Children’s Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child under 13, we will take steps to delete such data.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically to stay informed about how we are protecting your personal information.

11. Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise your rights under the UK GDPR, please contact us at:

IronHQ
Unit 1 Ranch House, Chapel Lane, Bingham, NG13 8GF

info@ironhq.uk