GymFlex Privacy Policy
Who we are
In this privacy policy references to "we", "us" and "our" are to Epassi UK Limited, company number 03397432.
Rockwood House, 9-17 Perrymount Road, Haywards Heath, West Sussex, RH16 3TW
References to "our Website" or "the Website" are to www.gymflex.co.uk.
You can contact us at [email protected] for any privacy-related queries.
This policy explains how we use any personal information we collect about you.
What information do we collect?
In order to set up your gym membership we collect the following information:
· Name · Address and postcode
· Date of Birth · Contact telephone number
· Payroll Number · IP Address
· Email Address
We will also collect the name and date of birth of partners when taking out joint memberships.
We also use cookies to collect data about your session to help us manage your online experience while using the site.
Why do we collect this information?
We process personal information for our legitimate business interest of enabling the selected gym to set you your membership and then arranging payment with your employer and your selected gym.
How do we collect this information?
If your employee has a Single Sign On arrangement with us, the information is passed to us from your benefits platform. If your employer does not have a Single Sign On agreement with us, you will be asked to enter this information in this website.
How do we use the information we collect about you?
The information we collect is sent by us to your selected gym so that they can set up your gym membership. We will also use this information to help answer any queries you may have during the period of your membership.
We will also pass your information back to your employer to support our billing process.
We will not pass your information to any party other than your employer and your selected gym.
We will use your email address to send you a confirmation email, a renewal email, and customer feedback form.
How long do we keep the information that we hold about you?
The information you provide is kept in the GymFlex website until it is passed to your selected gym so that they can set up your gym membership. This will be no more than 90 days after your selection window closes.
This information is also held in our customer services system (which is only accessible by our customer services and support teams) for up to one year after your membership has expired (so, two years in total). This is to enable us to answer queries about memberships and invoices for a reasonable period of time after the membership has expired.
In addition, the information you provide may be kept in paper archives until it is six years old in support of invoices for HMRC purposes.
Your Rights
If you wish to exercise any of your rights as a data subject, please email us at [email protected], call us on 0345 600 6474 or write to us at Epassi UK Ltd.
Rockwood House, 9-17 Perrymount Road, Haywards Heath, West Sussex, RH16 3TW
Please note that the rights below are not all automatic rights and may not apply in all instances. You may also be asked for some form of identification before we share or amend any information.
Access to your information and rectification
You have the right to request a copy of the information that we hold about you. Once we receive your request, we will provide you with your information within one month.
We want to make sure that your personal information is up to date. You may ask us to update or remove any data that you believe to be inaccurate and add information where it may be incomplete.
Right to erasure
You have the right to ask us to delete all information relating to you where:
· Your personal information is no longer required by us for the purpose for which it was originally obtained
· You object to our processing on the grounds of legitimate interest and no overriding legitimate interest still exists
· Consent is relied on as the legal basis for processing and you withdraw your consent
· Your information is being processed unlawfully
· Erasure of the information is required to comply with a legal obligation
· Data is collected for direct marketing purposes and you object to that form of processing
Right to Object
You have the right to object to processing that is based on our legitimate interests where you believe you have grounds relating to your particular situation and that your rights and freedoms override our legitimate interest in processing your information.
Right to complain to a supervisory authority
You have the right to complain to a supervisory authority in relation to the personal information that we hold about your and the reasons for or manner in which that information is processed.
In the UK, the supervisory authority is the Information Commissioner’s Office. Further details about the ICO can be found on their website, www.ico.org.uk.
Other Websites
This privacy policy only covers this website. Any other websites which may be linked to by our website are subject to their own policy, which may differ from ours.