Privacy Policy | Hype Gym

1. Data Controller

Hype Health Hub Ltd (Company Registration 15374000) is the data controller for the personal data we collect. Our registered address is Unit 7A Baldock Industrial Estate, Baldock, Hertfordshire, SG7 6NG.

Contact: [email protected]

2. What Data We Collect

We may collect the following personal data:

Name, email address, phone number (via membership registration, contact forms, corporate enquiries)
Free day pass claims: name, mobile number, optional email and town, pass code and whether the pass has been used (used to issue your pass and to ensure one free pass per person)
Messages you choose to send us on WhatsApp (e.g. to confirm your free day pass)
Membership and account data (managed via Glofox)
Payment data (processed securely via GoCardless — we do not store card details)
Health questionnaire responses (for personal training services)
CCTV footage (for safety and security purposes)
Website usage data (cookies, analytics — see Cookie Policy)

3. Why We Collect Your Data

We process your personal data on the following legal bases:

Contract performance: To provide gym membership services, manage bookings, and process payments.
Legitimate interests: To improve our services, ensure safety, prevent fraud, and maintain our facilities.
Consent: For marketing communications — you can opt out at any time.
Legal obligation: To comply with tax, accounting, and regulatory requirements.

4. Third-Party Processors

We share data with the following processors who act on our behalf:

Glofox: Membership management, class booking, and CRM
GoCardless: Direct debit payment processing
Google Analytics: Website usage analytics (anonymised)
gymtours.ai: 360° virtual tour hosting
Abacus.AI: Website hosting, secure database storage of form submissions and free pass claims, and email notifications to our team
WhatsApp (Meta): Messages you send us via WhatsApp
Google Maps: Location map embed (loaded only with your consent)

5. Data Retention

We retain personal data for the following periods:

Membership data: duration of membership plus 6 years (for tax/legal purposes)
Contact form submissions: 2 years
Free day pass claims: 2 years (so we can make sure each person only claims one free pass)
CCTV footage: 30 days (rolling)
Website analytics: 26 months (anonymised)

6. Security

Our website is served only over an encrypted HTTPS connection. Membership sign-ups and payments are handled within Glofox's secure booking system and GoCardless — we never see or store your card or bank details on this website. Form data is stored in a secure, access-controlled database.

7. Your Rights

Under the UK GDPR, you have the following rights:

Right of access: Request a copy of your personal data
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your personal data
Right to data portability: Receive your data in a portable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, contact us at [email protected].

8. Cookies

For information about the cookies we use, please see our Cookie Policy.

9. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the "Last updated" date shown above.