Functional Fitness Gym Ltd ("we", "us", "our") is a UK-registered company (Company No. 13386226) providing personal training, group classes, open gym access and wellness services.
We are the data controller responsible for your personal data.
This Privacy Policy is written in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
We may collect and process the following categories of personal data:
Payment card details are processed securely by third-party providers and are not stored by us.
You may verbally disclose injuries, medical conditions or other health information to coaches before or during training sessions to ensure your safety. We do not record or store this information. It is your responsibility to inform staff of any conditions that may affect your ability to train safely.
This data is collected via our electronic access control system (Kisi) to manage building security and monitor who is on the premises.
CCTV is in operation at the premises for safety and security purposes. During opening hours, live remote monitoring may be in operation via a third-party security provider (Secure24). Monitoring staff may contact emergency services if they observe an incident.
This information is recorded in our accident book as required by health and safety law.
We use your personal data to:
We process your personal data under the following lawful bases:
You may withdraw consent at any time.
We do not collect or store medical history or ongoing health records. Members may verbally share health information with coaches to ensure safe training, but this is not recorded in your membership profile.
Exception: We are legally required to record details of any accidents, injuries or first aid administered on our premises. These records are retained securely in our accident book in accordance with health and safety law.
In a medical emergency, we may share relevant information with emergency services to protect your vital interests.
We use TeamUp, a third-party gym management platform, to manage:
TeamUp acts as a data processor on our behalf and processes personal data only in accordance with our instructions and applicable data protection laws.
All data stored within TeamUp is protected by appropriate technical and organisational security measures. Where data is processed outside the UK or EEA, appropriate safeguards are in place.
We use Kisi, a third-party access control platform, to manage:
Kisi acts as a data processor on our behalf. Access logs are used to monitor building security and ensure we know who is on the premises at any time. This data may be shared with emergency services or insurers in the event of an incident.
CCTV cameras are in operation at our premises for the following purposes:
During opening hours, live remote monitoring may be provided by Secure24, a third-party security provider. Monitoring staff may observe the premises via CCTV and contact emergency services if they witness an incident. However, remote monitoring is not a substitute for on-site supervision and assistance may be delayed.
CCTV footage is retained for up to 30 days unless required for longer in connection with an incident or legal proceedings.
Signage is displayed at the premises to inform visitors that CCTV is in operation.
We offer Youth memberships for members aged 11-17. For members under 18:
We do not knowingly collect personal data from children under 11.
We do not sell or rent your personal data.
We may share data with:
All third parties are required to protect your data appropriately.
Our website uses cookies to:
You can manage cookie preferences through your browser settings.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
While no system can guarantee absolute security, we take reasonable steps to safeguard your information.
We retain personal data only for as long as necessary:

Retention Period
Under UK GDPR, you have the right to:
Membership and waiver records
Up to 6 years after membership ends (limitation period for legal claims)
To exercise any of these rights, contact us at functional-fitness18@outlook.com. We will respond within one month.
Access control and CCTV
As required for security purposes
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
Accident records
As required by health and safety law
Our website may contain links to third-party websites. We are not responsible for their privacy practices.
Financial records
As required for tax and accounting purposes
We may update this Privacy Policy from time to time. The most current version will always be available on our website and at the gym on request.
If you have any questions about this Privacy Policy or how we handle your data, please contact:
Functional Fitness Gym Ltd