Privacy Policy

This Privacy Policy (the "Policy") outlines how CrossFit Paratus, hereinafter referred to as the "Facility," collects, uses, protects, and manages personal information in accordance with the laws of the United Kingdom, including but not limited to the General Data Protection Regulation (GDPR).

Information Collection and Use: The Facility may collect and process the following categories of personal information:

• Contact Information: This may include names, addresses, phone numbers, and email addresses of individuals associated with the Facility, such as members, staff, and trainers.
• Health and Fitness Data: The Facility may collect health and fitness-related information, such as medical conditions, training goals, and performance measurements, as necessary to provide services and ensure the safety of individuals.
• Payment Details: The Facility may collect payment information, including credit card details or bank account information, to process payments for membership fees or other services.

Purpose and Legal Basis for Processing: The Facility collects and processes personal information for the following purposes and legal bases:

• Contractual Obligations: The processing is necessary for the performance of a contract, such as managing memberships, scheduling classes, and providing requested services.
• Legitimate Interests: The processing is necessary for the legitimate interests pursued by the Facility, such as maintaining a safe training environment, managing operations, and communicating important updates or promotions.
• Consent: The Facility may seek explicit consent for specific processing activities, such as sending marketing communications or processing sensitive health data.

Data Retention: The Facility retains personal information only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law. Personal information of inactive members or individuals no longer associated with the Facility will be securely deleted or anonymized.

Data Security: The Facility implements appropriate technical and organizational measures to protect personal information from unauthorized access, loss, misuse, or alteration. This includes secure storage, restricted access controls, and regular data backup procedures.

Third-Party Disclosure: The Facility may share personal information with trusted third parties who assist in providing services, such as payment processors or software providers. The Facility ensures that such third parties are compliant with data protection laws and maintain adequate security measures.

Individual Rights: Under the GDPR, individuals have certain rights regarding their personal information. These include the right to access, rectify, erase, restrict processing, object to processing, and data portability. Individuals may exercise these rights by contacting the Facility in writing using the contact information provided in this Policy.

Updates to the Policy: The Facility may update this Policy from time to time to reflect changes in legal or operational requirements. The updated Policy will be posted on the Facility's website, and individuals will be notified of any significant changes.

Contact Information: If you have any questions, concerns, or requests regarding this Privacy Policy or the Facility's data processing practices, please contact:

KBS23 Lrd T/A Crossfit Paratus

10B Mercia Road

Gloucester

GL1 2SQ

crossfitparatus@gmail.com