Fitwise is a London-based exercise class and personal training business. Fitwise collects a variety of personal data in the general course of doing business. This may include data on clients, prospects, suppliers or employees. This document sets out our policies and procedures on data protection and has been updated in line with the General Data Protection Regulation comes into force on 25 May, 2018.
The personal data we collect
Fitwise collects personal data solely for the purpose of conducting its business. This information may be collected through emails, telephone calls/messages, meetings or forms submitted electronically.
The types of personal data that we collect is likely to include name, address, email, telephone and date of birth.
In addition to personal data, the GDPR defines special categories of sensitive data – race, ethnic origin, political opinions, religion, philosophical beliefs, trade union membership, genetic data, biometric data, health data, concerning a person’s sex life or sexual orientation.
In specific instances where an individual has consented to the collection of sensitive personal data, this may also include information on medical conditions, general health, pregnancy and photos. Other than data regarding the health or medical history of a client, Fitwise will never process any of the other categories of personal data. In addition, Fitwise does not process any data regarding children.
The purposes for which we keep data
Fitwise runs outdoor exercise classes and personal training sessions. There are broadly two reasons that Fitwise will keep your personal data;
- Marketing – in this instance Fitwise will process names, telephone numbers and emails of persons who have a legitimate interest in its services
- Health and safety – where individual clients have enrolled with Fitwise, the data subject will have signed a pre-exercise questionnaire and our Terms and Conditions. In this instance, we are required to keep the information to enable us to perform our contracts with you and exercise you safely.
Where information has been submitted to use electronically, it may be stored on secure email servers or iCloud. Where sensitive information has been submitted to us in hard copy, ie pre-exercise questionnaires, it will be stored securely in its original format and not transferred to any electronic database.
Your rights regarding your personal data
Fitwise is committed to maintaining a high standard of privacy. At all times your information will be processed lawfully and fairly, collected only for the purposes specified above and kept in a secure manner.
At all times we respect your privacy and we encourage you to contact us if you have any questions regarding your data. The GDPR specifies specific rights that you have at any time;
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to object
Please note that the right to object does not apply to data held with regard to the performance of a contract as we are required for health and safety reasons to maintain your records. Fitwise does participate in any automatic profiling.
How data is processed
Fitwise is committed to only keep the minimum amount of data required for the purposes of running outdoor exercise classes. We will only store this data for as long as is required and in any event no longer than three years after you last attended sessions, contacted or otherwise engaged with Fitwise.
Fitwise does not transfer data to third parties and where data may be transferred outside the EEA, this will only be done once the adequacy of data transfer has been assessed.