Privacy Notice – Unique Fitness
At Unique Fitness we take your privacy very seriously and always treat your personal data with the utmost respect.
We collect and use information about you and which identifies you which is known as personal data. We are subject to the UK’s data protection laws: the UK GDPR and the Data Protection Act 2018 in terms of our processing of your personal data.
Unique Fitness is part of the University of Bradford and the University of Bradford is known as the “Controller” as it is ultimately responsible for the processing of your personal data.
Please read this privacy notice carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or the supervisory authority in the event you have a complaint.
Under what legal basis does the processing of my personal data take place?
The UK’s data protection laws provide specific limited reasons why an organisation may process personal data. Each of these is known as a legal basis. In this case, the following legal bases apply:
Performance of a contract: This is the legal basis we use for the Purpose No 1 above. The contract is the contract of service between you and Unique Fitness.
Consent: This is the legal basis we use for the Purpose No 2 above. If you wish to withdraw your consent by speaking to us on the reception desk emailing us: email@example.com, or by telephone: 01274 234871.
Legitimate interest: This is the legal basis we use for the Purpose No 3 above. You have the right to opt out of receiving marketing communications at any time by contacting us at firstname.lastname@example.org with “unsubscribe” in the subject line, using the ‘unsubscribe’ link in emails or updating your marketing preferences via our Portal.
Vital interests: This is the legal basis we use for the Purpose No 4 above. This would only be done if you were unable to communicate with medical professionals yourself.
What do we use your personal data for? (Purposes of Processing)
We collect and use your personal data to provide you with use of our facilities in the form of a membership or use of space and equipment which you pay for. This could be on an annual, monthly, individual use or short-term basis.
We ask for further information which helps us to make sure that we are able to offer you the most appropriate services. It is up to you whether you provide this information but if you do not, it may delay or prevent us from providing you with the products and services we offer. Some of the data we collect is special category personal data e.g. your ethnic origin and medical information. In the case of medical information, we use this information to ensure that you are physically able to use our facilities in a manner which is safe and not likely to cause you any injury.
We may use your personal data to send you updates about our membership, facilities and services including exclusive offers, promotions or new membership offers or services. We may ask you to confirm or update your marketing preferences if you ask us to provide further products or services or in the future.
If we hold health information about you, we may pass this on to paramedics or other professionals in the event of an emergency.
What categories of personal data are used?
We may collect and use the following personal data about you:
- your name and contact information, including email address and telephone number;
- information to check and verify your identity, e.g., your date of birth.
- your gender;
- location data;
- security information from CCTV and access control systems;
- usage data from door entry systems and reception logs;
- your billing information, transaction, and payment card information;
- your personal or professional interests;
- information from social media accounts;
- your responses to surveys, competitions, and promotions;
- emergency information and medical data.
Where do we get your personal data from?
We collect most of this personal data directly from you—in person, by telephone, text, or email and/or via our website and apps. However, we may also collect information from other sources. These include:
- from a third party, e.g. When you agree to be referred by your GP under the BEEP (Bradford Encouraging Exercise in People) exercise referral programme.
- through automated monitoring of our websites and other technical systems, such as our computer networks and connections, communications systems, email, member portal and instant messaging systems.
Who else do we pass this information on to?
We only allow University of Bradford’s internal departments to handle your personal data. For example, if you opt to pay for your membership by direct debit, your bank details will be processed by the University’s Finance Department for your payments to be set up. Personal details will not be shared within the University where there is no reason to so so.
We would never transfer your information overseas.
We never share personal data with other organisations for marketing purposes.
How long do we keep this information for?
We will keep your personal data while you have an account with us or we are providing services to you. Thereafter, we will keep your personal data for 6 years. This is a standard retention period for contracts and it allows us to:
- respond to any questions, complaints or claims made by you or on your behalf;
- show that we treated you fairly;
- meet our legal obligations.
What are your rights as a data subject?
As a person whose personal data we are processing, you have certain rights in respect of that personal data; you have the right:
- to withdraw consent where this is the legal basis for processing;
- to access the personal data of yours that we process;
- to rectify inaccuracies in personal data that we hold about you if it is inaccurate or incomplete;
- to request the deletion or removal of your personal data where there is no compelling reason for its continued processing;
- to restrict the processing of your personal data in certain ways;
- to obtain your personal data for reuse;
- to object certain processing of your personal data;
- to complain to the supervisory authority (i.e. the Information Commissioner’s Office) about the way in which we process your personal data.
For further guidance on how to exercise these rights, please speak to Unique Fitness or the University’s Data Protection Officer using the details below.
Where can I get more information?
For more information about Unique Fitness and how we use your personal data, you can speak to us on the reception desk tel: 01274 234871.
For more information about data protection, please contact the University’s Data Protection Officer, email@example.com,tel: 01274 233111, University of Bradford, Richmond Road Bradford BD7 1DP
You can also seek information from the Information Commissioner’s Office https://ico.org.uk/make-a-complaint or tel: 0303 123 1113.
Reviewed by DPO:
Matthew Stephenson 16/4/2021
Next Review Date: