Privacy policy

Privacy Policy - The Health & Performance Studio Effective date: 13 August 2026 1) Who we are The Health & Performance Studio (“we”, “us”, “our”) provides a premium gym and treatment room rental space for independent health and performance professionals. Address: 16–17 Little Portland Street, London, W1W 8BP Phone: 07955379515 Website: https://www.healthandperformance.studio Email: info@healthandperformance.studio We are the “data controller” for the personal data we collect and use. 2) What this policy covers This policy explains how we collect, use, store, and share personal data when you: - Visit our website - Contact us or enquire about membership - Become a member (practitioner) - Use our facilities - Use our branded app: **Health and Performance Studio Members Portal** - Interact with us on social media - Visit our premises (CCTV) 3) Personal data we collect We may collect and process the following categories of personal data: A) Identity and contact data - Name - Email address - Phone number - Business name and role (if you are a practitioner) B) Membership and onboarding data (practitioners) - Membership type and status (including freezes/cancellations) - Booking and usage information (e.g., sessions booked) - Proof of qualifications (e.g., Level 3 PT or equivalent) - Proof of insurance (including insurer/policy details and renewal date) C) Client matching/referral data (where you provide it) If you complete a questionnaire, we may collect information such as: - Preferences (times, coach preferences) - Goals and training history - Budget and frequency preferences If you choose to share health information, this may include special category data under UK GDPR. D) Communications data - Emails/messages you send us - Notes related to support queries or complaints E) Website technical data (cookies/analytics) - IP address, device and browser information - Pages visited and interactions - Approximate location (from IP) F) CCTV footage CCTV may capture your image when you are on-site. We do not place CCTV in private areas. 4) How we collect your data We collect data when you: - Use our Wix website (including via cookies) - Submit a form or contact us by email/phone - Apply for membership and provide onboarding documents - Use the Health and Performance Studio Members Portal (e.g., bookings/member hub features) - Visit our premises (CCTV) - Interact with our social media pages 5) How we use your data (and our lawful bases) Under UK GDPR, we must have a lawful basis for using your data. We use your data to: A) Respond to enquiries and manage relationships - Reply to messages and provide information Lawful basis: Legitimate interests B) Manage practitioner membership and facility use - Onboard you, verify qualifications/insurance, administer membership, manage bookings and access Lawful basis: Contract / Legitimate interests C) Provide client referrals and matching (where applicable) - Match clients to suitable practitioners and manage referrals Lawful basis: Legitimate interests / Contract Where we process health information, we will rely on explicit consent where required. D) Improve our website and measure performance - Understand how people use our website and improve it Lawful basis: Consent (for non-essential cookies, including analytics cookies, where enabled) E) Security and safety - Protect people, prevent incidents, investigate complaints or safety issues Lawful basis: Legitimate interests F) Legal and compliance - Comply with legal obligations and respond to lawful requests Lawful basis: Legal obligation 6) Cookies and your choices Our Wix website uses cookies and similar technologies. - Essential cookies help the site work properly. - Non-essential cookies (such as analytics cookies) are used only if you accept them via our cookie banner. You can also control cookies through your browser settings. 7) Payments Clients do not pay The Health & Performance Studio for training sessions. If you are a practitioner, membership fees and related payments may be processed by payment providers. We do not store full card details. 8) Who we share your data with We may share personal data with trusted third parties where needed to run the business, such as: - Wix (website hosting and website tools) - Analytics providers*(e.g., Google Analytics), where enabled and accepted via cookies - Providers that support the Health and Performance Studio Members Portal (booking/member hub/access features) - Payment providers used for membership payments - Professional advisers (legal/accounting/insurance) where necessary - Law enforcement or regulators where required by law We only share what is necessary for the specific purpose. 9) International transfers Some suppliers may store or process data outside the UK. Where this happens, we use appropriate safeguards (such as adequacy regulations or approved contractual protections) to protect your data. 10) How long we keep your data We keep personal data only as long as needed for the purposes in this policy, including legal, accounting, or reporting requirements. Examples: - Enquiry data: kept for a reasonable period to manage follow-up and reporting - Membership records: kept for the duration of membership and a period afterwards for admin/legal reasons - Qualification/insurance records: kept to evidence compliance while you are a member and for a period afterwards - CCTV footage: typically retained for up to 30 days, unless needed for an incident investigation 11) Your rights You have rights under UK GDPR, including: - Access your data - Correct inaccurate data - Request deletion (in some cases) - Restrict or object to processing (in some cases) - Data portability (in some cases) - Withdraw consent (where we rely on consent) To exercise your rights, contact: info@healthandperformance.studio You also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/ 12) Security We take reasonable technical and organisational measures to protect your personal data. No system is completely secure, but we work to prevent unauthorised access, loss, or misuse. 13) Changes to this policy We may update this policy from time to time. The latest version will be posted on our website with the effective date.