Privacy Policy

The MapYourGym website and app are operated by MapYourGym Limited, which is the data controller for your personal data. We are registered in England and Wales under company number 15513614, with our registered office at 1 George Street, Wolverhampton, England, WV2 4DG. You can contact us about anything in this policy at enquiries@mapyourgym.co.uk.

We have adopted this Privacy Policy, which determines how we are processing the information collected by MapYourGym, which also provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using MapYourGym website.

We take care of your personal data and undertake to guarantee its confidentiality and security.

When you visit the MapYourGym, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the installed cookies on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.” Moreover, we might collect the personal data you provide to us (including but not limited to Name, Surname, Address, payment information, etc.) during registration to be able to fulfill the agreement.

Our top priority is customer data security, and, as such, we may process only minimal user data, only as much as it is absolutely necessary to maintain the website. Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding website usage. This statistical information is not otherwise aggregated in such a way that it would identify any particular user of the system.

You can visit the website without telling us who you are or revealing any information, by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the website’s features, or you wish to receive our newsletter or provide other details by filling a form, you may provide personal data to us, such as your email, first name, last name, city of residence, organization, telephone number. You can choose not to provide us with your personal data, but then you may not be able to take advantage of some of the website’s features. For example, you won’t be able to receive our Newsletter or contact us directly from the website. Users who are uncertain about what information is mandatory are welcome to contact us via enquiries@mapyourgym.co.uk.

MapYourGym Limited is the data controller for the personal data described in this policy. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018. If you are in the UK or the European Economic Area, you have the following rights over your personal data:

• The right to be informed.
• The right of access.
• The right to rectification.
• The right to erasure.
• The right to restrict processing.
• The right to data portability.
• The right to object.
• Rights in relation to automated decision-making and profiling.

To exercise any of these rights, contact us using the details below. We will respond within one month, as required by the UK GDPR. There is no charge for making a request.

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office, the UK's supervisory authority for data protection. You can do so at ico.org.uk, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to address your concerns first.

The UK GDPR requires us to have a lawful basis for each purpose we process personal data for. Ours are:

• Contract — to provide the MapYourGym service to gyms and their members, including creating and maintaining your account.
• Legitimate interests — to keep the website and app secure, prevent abuse, and understand how our services are used so we can improve them. We balance these against your rights and only process what is necessary.
• Consent — for analytics cookies, for marketing emails, and for the health and fitness information described below. You can withdraw consent at any time, and withdrawing it is as easy as giving it.
• Legal obligation — where we must retain or disclose information to comply with the law.

If you use the MapYourGym app, we store the training you log — the exercises you complete, the weights and repetitions you record, distances and times on cardio equipment, and any notes you add. Depending on what you choose to record, some of this may amount to data concerning health, which the UK GDPR treats as a special category requiring extra protection.

We process it on the basis of your explicit consent, given when you create an account and start logging training, and we use it only to show you your own history and progress and to tailor what the app suggests to you. You can withdraw that consent at any time by deleting your account in the app, which removes your training history.

Your gym can see aggregate information about how its equipment and workouts are used. It cannot see your individual training records. Your display name and training totals appear on your gym's leaderboard, visible to other members of that gym, unless you turn this off — you can do so at any time under Profile, and your name is removed as soon as you do.

The MapYourGym app is rated 9+ on the App Store, and gyms commonly admit members from 16, sometimes younger when accompanied. We have designed the app with that in mind and follow the Information Commissioner's Age Appropriate Design Code.

In the UK a child can consent to an online service from the age of 13. If you are under 13, a parent or guardian must give consent on your behalf before you create an account. We do not use children's data for marketing, and we do not profile children to suggest content beyond their own training history.

If you believe a child has given us personal data without the consent they needed, contact us at enquiries@mapyourgym.co.uk and we will delete it.

We keep personal data only for as long as we need it. Account data is retained while your account is active and deleted within 30 days of you deleting your account, except where we must keep records longer to meet a legal obligation — for example, financial records, which we keep for six years. Website analytics data is retained for 12 months. Enquiry emails are kept for two years so we can pick up a conversation where it left off.

We do not sell your personal data. We share it only with the suppliers who help us run the service, each of whom processes it on our instructions under a written contract. Naming them rather than describing them in the abstract is deliberate — you cannot judge whether you are comfortable with a transfer you cannot see.

Where a supplier processes data outside the UK — Expo, Stripe, Apple and Google above — we rely on the UK's adequacy regulations where they apply, or on an International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so your data keeps the same protection it has here.

Your gym also sees limited information about you: that you are a member, and aggregate use of its equipment and workouts. It does not see your individual training records.

Our website may contain links to other websites that are not owned or controlled by us. Please be aware that we are not responsible for such other websites or third parties' privacy practices. We encourage you to be aware when you leave our website and read the privacy statements of each website that may collect personal information.

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We keep reasonable administrative, technical, and physical safeguards to protect against unauthorized access, use, modification, and personal data disclosure in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

We will disclose any information we collect, use or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may send an email to enquiries@mapyourgym.co.uk.