Privacy Policy.

This policy explains how BEYOND Fitness London Ltd (“BEYOND”, “we”, “us”, “our”) collects and uses your personal information, and the rights you have over it. It applies to our website, our booking app and our studio at 45 Berners Street, Fitzrovia, London.

We are the data controller for your information and are registered with the Information Commissioner’s Office (ICO), registration no. ZC125809.

  • Registered company: BEYOND Fitness London Ltd, company no. 16776638

  • Studio address: 45 Berners Street, Fitzrovia, London, W1T 3NE

  • Contact: hello@beyond.fitness.

1. THE INFORMATION WE COLLECT

1.1 Information you give us

  • Identity and contact details - name, email, phone, date of birth.

  • Account and booking details - membership type, class history, credits, attendance.

  • Health information you share through our Health Declaration / PAR-Q, including conditions, injuries and pregnancy status. This is “special category” data and we treat it with extra care (see Section 3).

  • Emergency contact details you provide.

  • Payment information - handled by our payment provider; we do not store your full card details.

  • Marketing preferences and any messages you send us.

1.2 Information we collect automatically

  • Website and app usage data - via cookies and similar technologies (see Section 8), including device, browser and pages viewed.

1.3 Information from others

  • Limited information from our service providers (e.g. our booking platform) and, where relevant, social media platforms if you interact with us there.

2 HOW WE USE YOUR INFORMATION, AND OUR LAWFUL BASIS

Under UK GDPR we must have a lawful basis for each way we use your data. Ours are:

  • To create and manage your account, take bookings, process payments and provide classes - performance of our contract with you.

  • To keep you safe in the studio and respond in an emergency - our legitimate interests (health & safety) and, for health information, your explicit consent (see Section 3).

  • For administration, records, accounting and meeting our legal and tax obligations - legal obligation and our legitimate interests.

  • To send service emails (booking confirmations, changes, credit expiry) - performance of our contract / our legitimate interests.

  • To send marketing emails about offers, challenges, events and classes - your consent, which you can withdraw at any time.

  • To understand and improve our website and services - our legitimate interests, and your consent for non-essential cookies.

  • To use photos or video in which you’re identifiable - your consent.

  • Where we rely on legitimate interests, we’ve considered your rights and don’t use your data in ways you’d find intrusive. You can object - see Section 6.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

3. HEALTH INFORMATION (SPECIAL CATEGORY DATA)

Because we run a fitness studio, the health details you give us in the Health Declaration are particularly sensitive. We collect them only to look after your safety and to adapt classes appropriately. Our condition for processing this special category data is your explicit consent, which you give when you complete the declaration, and which you can withdraw at any time (though we may then be unable to let you take part where we can’t do so safely).

4. WHO WE SHARE IT WITH

We don’t sell your data. We share it only with trusted providers who help us run BEYOND, each acting under contract and on our instructions:

  • MarianaTek - our booking, membership and class-management platform.

  • Payment provider - Stripe, via MarianaTek - to process payments securely.

  • Squarespace - our website and waitlist host.

  • Klaviyo - our email marketing platform (only if you’ve opted in).

  • Zapier - to connect the systems above.

  • Professional advisers - our accountant and, if needed, legal advisers.

  • Authorities or emergency services - where required by law or to protect someone’s safety.

5. STORING YOUR DATA AND INTERNATIONAL TRANSFERS

Some of our providers are based outside the UK (for example in the United States). Where your data is transferred internationally, we make sure it’s protected by an appropriate safeguard recognised under UK law - such as the UK’s adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

We keep your information only as long as we need it:

  • Account and booking records: for the life of your membership and up to 7 years afterwards (to meet legal, tax and insurance requirements).

  • Health declaration: while you’re an active client and a reasonable period afterwards, then securely deleted.

  • Marketing data: until you unsubscribe or withdraw consent.

6. YOUR RIGHTS

Under UK data protection law you have the right to:

  • Access the personal data we hold about you;

  • ask us to correct inaccurate data;

  • ask us to erase your data (“right to be forgotten”), where applicable;

  • restrict or object to certain processing;

  • request portability of data you gave us;

  • withdraw consent at any time (for marketing, photos, or health data), without affecting earlier processing.

  • To exercise any of these, email hello@beyond.fitness. We’ll respond within one month. You can unsubscribe from marketing at any time using the link in our emails.

If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office - ico.org.uk/concerns or 0303 123 1113 — though we’d appreciate the chance to put things right first.

7. SECURITY

We use appropriate technical and organisational measures to keep your data secure, limit who can access it, and require the same of our providers. No system is completely secure, but we take reasonable steps to protect your information and to respond promptly if anything goes wrong.

8. COOKIES

Our website uses cookies to make it work, to remember your preferences, and - with your consent - to understand usage and support marketing. You can manage non-essential cookies through our cookie banner or your browser settings.

9. CHILDREN

Our services are for adults. We don’t knowingly collect data from anyone under 16 without parental/guardian consent, and 16–17 year-olds may only join with guardian consent (see our Waiver).

10. CHANGES TO THIS POLICY

We may update this policy from time to time. The “last updated” date above shows the current version, and we’ll flag any significant changes.