Legal
Privacy policy
Last updated: 18 September 2026
This policy explains what personal data Bude Gym collects, why, and what your rights are, under UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025. We keep it in plain English.
1. Who we are
Bude Gym is the data controller for your personal data.
Address: Unit 8b, Kings Hill Industrial Estate, Bude, EX23 8QN. Email: budegym01@gmail.com. Phone: 07835 505827.
2. What data we collect
On this website
This website has no forms and no accounts. It does not use analytics, advertising or tracking. It does not set its own cookies. Our web host keeps standard server logs (such as IP address and pages requested) for security. Our web host is Netlify.
If you choose to show the Google map, Google receives data from your browser. See our cookie policy.
When you join or buy a pass
You sign up on our membership system (ClubManager). We collect: name, date of birth, mobile number, email, address, emergency contact, medical information you choose to give us, your consent for medical treatment, your photo/video consent choice and your marketing choice. For under 18s we also collect the details of the parent or carer.
Payments are taken by GoCardless (direct debit) and Stripe (card). We do not see or store your full card or bank details.
When you contact us
If you call, text, WhatsApp, email or message us on social media, we get the details you send, such as your name, number and message. WhatsApp, Instagram and Facebook are run by Meta.
In the gym
We keep a record of access codes issued to members and pass holders.
3. How we use your data, and our lawful basis
| What | Why | Lawful basis (UK GDPR Article 6) |
|---|---|---|
| Name, contact details, date of birth, address | Run your membership or pass, send your access code, take payment | Contract |
| Emergency contact and medical information | Keep you safe and help in an emergency | Explicit consent (Article 6(1)(a) and 9(2)(a)); vital interests in an emergency (Article 9(2)(c)) |
| Messages you send us | Answer your question | Legitimate interests |
| Email or text marketing | Tell you about offers and news | Consent (only if you opt in). You can opt out at any time. |
| Server logs (IP address, pages requested) | Keep the website secure and working | Legitimate interests |
| Your choice about the Google map | Load the map only if you allow it | Consent |
| Door access records | Security of the gym and members | Legitimate interests |
| Photos and videos in the gym | Our social media | Consent (you choose on the sign-up form) |
4. Who we share your data with
- ClubManager: our membership and access system.
- GoCardless: direct debit payments.
- Stripe: card payments.
- Google: our email (Gmail) and, only if you allow it, the map on this website.
- Meta (WhatsApp, Instagram, Facebook): only if you message us there.
- Netlify: our web host.
We do not sell your personal data. We do not make decisions about you by automated means alone.
To join, we need your name, date of birth, contact details and an emergency contact. Without them we cannot give you access to the gym. Medical information is optional.
5. How long we keep it
- Membership records: while you are a member, then as long as the law requires (up to 6 years for tax records).
- Day and week pass records: as long as the law requires (up to 6 years for tax records).
- Messages: only as long as we need them to help you.
- Marketing consent: until you withdraw it.
- Website server logs: kept by our host for a short time, for security.
6. Your rights
Under UK GDPR you have the right to:
- see the personal data we hold about you
- correct data that is wrong
- ask us to delete your data
- restrict how we use it
- get a copy to move to someone else
- object to how we use it
- withdraw consent at any time
To use any of these rights, email budegym01@gmail.com. We reply within one month.
7. How to complain
Please tell us first, so we can put it right. Email budegym01@gmail.com with “Data complaint” in the subject. We confirm we have it within 30 days and tell you what we will do. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk, phone 0303 123 1113.
8. International transfers
Some of our suppliers (for example Google, Meta and Stripe) may process data outside the UK, including in the USA. When they do, they rely on the UK-US Data Bridge or the UK International Data Transfer Addendum.
9. Changes to this policy
We may update this policy. The latest version is always on this page, with the date at the top.