Privacy Policy

Brooke Fitness Studio Privacy Policy

Last updated: 12 August 2026

Brooke Fitness Studio respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with and your rights under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Brooke Fitness Studio provides private gym membership and personal training services.

For the purposes of UK data protection law, Brooke Fitness Studio is the data controller for the personal information we collect and use in connection with our services.

Website: brookefitnessstudio.co.uk
Email: brookefitnessstudio@gmail.com

If you have any questions about this Privacy Policy or how your personal information is handled, please contact us using the email address above.

2. Personal Information We Collect

Depending on how you use our website and services, we may collect information including:

  • Your name
  • Email address
  • Telephone number
  • Membership information
  • Booking and attendance information
  • Personal training booking information
  • Communications you send to us
  • Information you voluntarily provide when contacting or registering with us
  • Technical information associated with your use of our website, such as IP address, browser type, device information and cookie information where applicable

We only collect information that is reasonably necessary to operate Brooke Fitness Studio and provide our services.

3. Payment and Banking Information

Brooke Fitness Studio uses GoCardless to process Direct Debit payments.

Brooke Fitness Studio does not directly collect or store your bank account details, debit card details or other banking credentials on our website or internal systems.

When you set up a Direct Debit, the financial information required to establish and process the payment is provided to and processed through GoCardless.

We may have access to limited payment-related information necessary to administer your membership, such as whether a payment has been successfully collected, failed, refunded or cancelled and relevant transaction information. This does not mean that we store your full banking credentials.

GoCardless processes personal information in accordance with its own privacy policy and applicable data protection legislation.

More information about how GoCardless processes personal information can be found in the GoCardless Privacy Notice.

4. How We Use Your Personal Information

We may use your personal information to:

  • Set up and manage your gym membership
  • Manage gym and personal training bookings
  • Communicate with you about your membership or bookings
  • Provide personal training and other services you have requested
  • Administer membership payments and payment status
  • Respond to enquiries and customer service requests
  • Notify you of important changes affecting the gym, your membership or our services
  • Maintain appropriate business and financial records
  • Improve our website, services and customer experience
  • Protect the security of our website and systems
  • Comply with legal, regulatory, accounting and tax requirements

We will not use your personal information for purposes that are incompatible with the reasons for which it was originally collected unless permitted or required by law.

5. Our Lawful Basis for Processing Your Information

Under UK data protection law, we must have a lawful reason for processing your personal information.

Depending on the circumstances, we may rely on:

Contract – where processing your information is necessary to provide your membership, personal training, bookings or other services you have requested.

Legal obligation – where we are required to process or retain information to comply with applicable laws, including accounting and tax requirements.

Legitimate interests – where processing is reasonably necessary to operate and protect Brooke Fitness Studio, communicate with customers, administer our services and improve our business, provided those interests do not override your rights.

Consent – where we specifically ask for your permission, for example for certain forms of marketing or non-essential website cookies where required.

Where processing is based on consent, you may withdraw your consent at any time.

6. Marketing Communications

We may occasionally send information about Brooke Fitness Studio services, membership updates, offers or other relevant news where we have a lawful basis to do so.

Where consent is required, we will obtain it before sending marketing communications.

You can unsubscribe from marketing communications at any time by following the unsubscribe instructions contained in the communication or by contacting us.

Important communications relating directly to your membership, payments, bookings or changes to our services are not considered marketing and may still be sent where necessary.

7. Who We Share Your Information With

We do not sell or rent your personal information.

We may share limited personal information with trusted third-party service providers where necessary to operate our business, including providers involved in:

  • Direct Debit and payment processing
  • Website hosting and maintenance
  • Booking or membership management
  • Email and communications
  • IT and data storage
  • Accounting or professional services
  • Website analytics, where applicable

These organisations are only provided with information where there is a legitimate reason for them to receive it and are expected to handle personal information appropriately.

We may also disclose information where required by law, regulation, court order or another lawful authority.

8. GoCardless

We use GoCardless to process Direct Debit payments for memberships and other applicable services.

When you use GoCardless, certain personal and financial information will be processed by GoCardless for purposes including setting up and administering Direct Debit mandates, processing payments, preventing fraud and complying with financial regulations.

Brooke Fitness Studio does not directly store the banking credentials you provide when setting up your Direct Debit.

Please refer to the GoCardless Privacy Notice for further information about how GoCardless processes your personal information and your data protection rights.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that can help websites operate correctly, remember preferences, understand website usage and improve performance.

Some cookies may be essential for the operation of the website, while others may be used for analytics or other purposes.

Where required by law, non-essential cookies will only be used after you have provided consent.

You can also control cookies through your browser settings.

10. How Long We Keep Your Information

We only retain personal information for as long as reasonably necessary for the purpose for which it was collected.

The length of time information is retained may depend on:

  • How long you remain a member or customer
  • Whether information is required to administer your membership
  • Legal, tax and accounting requirements
  • The need to resolve disputes or complaints
  • The establishment, exercise or defence of legal claims

When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.

11. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access
  • Loss
  • Misuse
  • Alteration
  • Disclosure
  • Destruction

Access to personal information is restricted where appropriate to people and service providers who need it for legitimate business purposes.

No internet-based system can be guaranteed to be completely secure, but we take reasonable precautions appropriate to the nature of the information we process.

12. Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights over your personal information.

These may include the right to:

  • Request access to the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your personal information in certain circumstances
  • Ask us to restrict how your information is processed
  • Object to certain types of processing
  • Request the transfer of certain information to you or another organisation
  • Withdraw consent where processing is based on consent

If you would like to exercise any of these rights, please contact us at:

brookefitnessstudio@gmail.com

We may need to confirm your identity before completing certain requests.

13. Third-Party Websites

Our website may contain links to websites operated by third parties.

Brooke Fitness Studio is not responsible for the privacy practices of external websites. We recommend reviewing the privacy policy of any third-party website before providing personal information.

14. Children’s Information

Our services are not intended to collect personal information from children through the website without appropriate involvement or consent from a parent or guardian where this is required.

Where services are provided to anyone under the age of 18, we may request appropriate parent or guardian information and consent depending on the nature of the service.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, third-party providers or legal requirements.

The latest version will be published on our website and the date at the top of this policy will show when it was last updated.

16. Complaints

If you have a concern about how Brooke Fitness Studio handles your personal information, please contact us first so that we can investigate the matter.

You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

17. Contact Us

If you have questions about this Privacy Policy, would like to exercise your data protection rights or have concerns about how your personal information is being handled, please contact:

Brooke Fitness Studio
Email: brookefitnessstudio@gmail.com

Website: brookefitnessstudio.co.uk