GYM & JAB PRIVACY POLICY

Last Modified: 8 November 2025


Introduction

Gym and Jab Ltd (“we”, “our”, or “the Company”), registered in England and Wales under company number 15952912, with registered address at First Floor, 40 Windsor House, High Street, Esher, Surrey, England, KT10 9QY, is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website www.gymandjab.co.uk (“the Site”) or otherwise interact with us (collectively: “Users”).


Legal Basis for Processing Personal Information

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We process your personal information on the following legal bases:

  • Contractual necessity: to perform our obligations when you register, make bookings, or purchase memberships.
  • Legitimate interests: to manage our business, improve our services, and communicate relevant updates.
  • Legal obligations: to comply with applicable laws and financial recordkeeping requirements.
  • Consent: where you have opted in to receive marketing communications.

By using our Site, you consent to the collection, storage, use, and disclosure of your Personal Information as described in this Privacy Policy.


Information We Collect

We collect two types of information from users:

1. Non-Personal Information

Unidentified and non-identifiable information collected automatically when you interact with our Site. This includes aggregated usage data, browser type, device type, operating system, language preference, and browsing actions (e.g. pages viewed, links clicked).

2. Personal Information

Information that identifies you as an individual, such as:

  • Contact details: full name, email address, phone number, and postal address.
  • Account details: username and password for your Gym & Jab online account.
  • Payment information: details provided during online purchases via Stripe (note: we do not store card information; payments are processed securely by Stripe).
  • Booking and membership details: class history, bookings, and preferences.
  • Marketing preferences: your choices for receiving promotional communications.
  • Device and usage data: IP address, location, and activity logs for site functionality and security.

How We Collect Your Information

We may collect your Personal Information in the following ways:

  • When you register, book classes, or purchase memberships via our Site.
  • When you contact us directly by email, phone, or through online forms.
  • Automatically, through cookies and analytics tools.
  • From third-party service providers, such as Stripe (payments) and analytics vendors.

How We Use Your Information

We use your Personal Information to:

  • Register you as a customer and manage your Gym & Jab account.
  • Process your bookings, memberships, and payments securely.
  • Communicate with you regarding your account, bookings, and service updates.
  • Send marketing emails or text messages about offers, news, and classes (where you have given consent).
  • Improve and personalise our website, services, and user experience.
  • Comply with legal and financial obligations.
  • Protect against fraud, abuse, or misuse of our systems.

We do not sell or rent your information to third parties.

Sharing of Information

We may share your information with:

  • Service providers and business partners, such as Stripe (payment processing), website hosting, email and SMS marketing platforms, and analytics providers.
  • Legal authorities, when required to comply with law or enforce our terms.
  • Corporate transactions, such as mergers, acquisitions, or business transfers, in which case your data may be transferred to the acquiring entity under the same protections.

All third-party partners are required to handle your data in compliance with applicable privacy laws and use it only for the purposes we specify.

Cookies

We use cookies and similar technologies to improve your experience, understand how our Site is used, and deliver relevant advertising.
Cookies help us remember your preferences, manage sessions, and analyse traffic.

Types of cookies used include:

  • Session cookies: deleted when you close your browser.
  • Persistent cookies: stored for repeat visits.
  • Third-party cookies: used by analytics and advertising partners (e.g. Google Analytics).

You can manage or delete cookies in your browser settings. Disabling cookies may affect some site functionality.

For more information, see our Cookie Policy.

Google Analytics

We use Google Analytics to collect anonymised information about website usage (e.g. pages visited, session duration). This helps us improve our Site and services.
Google’s use of this data is governed by the Google Analytics Terms of Use and Google Privacy Policy.

Marketing

We may use your Personal Information (e.g. name, email, phone number) to send promotional emails or SMS messages about classes, offers, and updates.
You can unsubscribe at any time using the link provided in our emails or by contacting hello@gymandjab.co.uk.

Even if you unsubscribe from marketing, we may still send service-related communications (e.g. class updates, billing notices).

Children and Minors

We offer certain fitness programmes and classes for individuals under 18.
For users under 16, we require parental or guardian consent before collecting or processing any personal data.
If you believe a minor has provided us with personal information without consent, please contact us immediately at hello@gymandjab.co.uk, and we will promptly delete the data.

Data Security

We employ industry-standard security measures to protect your data against loss, misuse, or unauthorized access.
This includes encrypted SSL connections, secure storage systems, restricted access, and regular monitoring for vulnerabilities.
However, no online transmission is entirely secure, and we cannot guarantee absolute protection.

International Transfers

Some of our third-party partners may process data outside the UK or EEA.
In such cases, we ensure that transfers occur only to countries with adequate data protection or are protected by approved contractual safeguards (e.g. UK International Data Transfer Agreements).

Data Retention

We retain your personal data only for as long as necessary to:

  • Provide our services and manage your account.
  • Comply with legal and financial obligations.
  • Resolve disputes and enforce our agreements.

When data is no longer required, it is securely deleted or anonymised.

Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (where legally permitted).
  • Object to or restrict certain processing.
  • Request data portability.
  • Withdraw consent for marketing at any time.

To exercise any of these rights, contact our Data Protection Officer, Holly Jaber, at hello@gymandjab.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Modified” date.
Your continued use of the Site after such updates constitutes acceptance of the revised Policy.

Contact Us

For any questions about this Privacy Policy or how we handle your personal information, please contact:

Gym and Jab Ltd
Attn: Holly Jaber, Data Protection Officer
📍 First Floor, 40 Windsor House, High Street, Esher, Surrey, England, KT10 9QY
📧 hello@gymandjab.co.uk
🌐 www.gymandjab.co.uk