1. Who We Are
Schofield Fitness Ltd (trading as Atlas Fitness) is committed to protecting your privacy and personal data. We are registered in England and Wales under company number 11198686.
3. How We Use Your Information
3.1 Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: For marketing communications and non-essential cookies
- Contract: To provide our fitness services and process payments
- Legitimate Interests: To improve our services and website functionality
- Legal Obligation: To comply with health and safety regulations
3.2 Purposes of Processing
- Providing fitness coaching and personal training services
- Processing payments and managing memberships
- Communicating about classes, schedules, and updates
- Marketing our services (with your consent)
- Improving our website and services
- Complying with legal obligations
4. Who We Share Your Information With
4.1 Service Providers
We share data with trusted third parties who help us operate:
- GoHighLevel (CRM): Customer relationship management and communications
- GoTeamUp: Class booking and schedule management
- Stripe & GoCardless: Secure payment processing
- Email Marketing Platforms: For newsletters and promotional emails (with consent)
- Google Analytics: Website performance and user behavior analysis
- Meta (Facebook): Advertising and marketing analytics
4.2 Legal Requirements
We may disclose your information if required by law, court order, or to protect our legitimate interests.
4.3 International Transfers
Some of our service providers are located outside the UK/EU. We ensure appropriate safeguards are in place for any international data transfers, including:
- Adequacy decisions by the UK/EU authorities
- Standard Contractual Clauses
- Certification schemes where applicable
5. Cookies and Tracking Technologies
5.1 Essential Cookies
We use essential cookies to make our website function properly. These cannot be disabled.
5.2 Analytics and Marketing Cookies
- Google Analytics: Tracks website usage and performance
- Facebook Pixel: Enables targeted advertising and measures ad effectiveness
- Marketing Cookies: Help us show you relevant advertisements
You can manage cookie preferences through your browser settings or by clicking here to open your cookie preferences.
5.3 Facebook/Meta Data Usage
When you interact with our Facebook ads or website, Meta may collect information including:
- Website visits and page views
- Form submissions and conversions
- Device and browser information
This data is used to:
- Show you relevant advertisements
- Measure advertising effectiveness
- Create lookalike audiences for marketing
For more information, see Meta's Privacy Policy.
6. Data Retention
We retain your personal data for different periods depending on the type:
- Customer Records: 7 years after last interaction (legal requirement)
- Financial Records: 7 years (tax and accounting requirements)
- Marketing Data: Until you unsubscribe or withdraw consent
- Website Analytics: 26 months (Google Analytics default)
- CCTV Footage: 30 days (if applicable)
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
7.1 Right of Access
Request a copy of the personal data we hold about you.
7.2 Right to Rectification
Ask us to correct inaccurate or incomplete data.
7.3 Right to Erasure ("Right to be Forgotten")
Request deletion of your personal data in certain circumstances.
7.4 Right to Restrict Processing
Ask us to limit how we use your data.
7.5 Right to Data Portability
Receive your data in a structured, machine-readable format.
7.6 Right to Object
Object to processing based on legitimate interests, including direct marketing.
7.7 Rights Related to Automated Decision Making
We do not use automated decision-making or profiling that significantly affects you.
7.8 How to Exercise Your Rights
Contact us at sam@atlas-gyms.co.uk or 07490 253471. We will respond within one month.
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption: Data is encrypted in transit and at rest
- Access Controls: Limited access on a need-to-know basis
- Regular Security Updates: Our systems are regularly updated
- Staff Training: Team members receive data protection training
- Secure Payment Processing: We use PCI-compliant payment providers
9. Children's Privacy
Our services are designed for adults. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.
10. Marketing Communications
10.1 Consent
We only send marketing emails with your explicit consent.
10.2 Unsubscribing
You can unsubscribe at any time by:
- Clicking the unsubscribe link in any email
- Contacting us directly at sam@atlas-gyms.co.uk
- Updating your preferences in our system
10.3 Facebook/Meta Advertising
We may use your contact information to create custom audiences for Facebook advertising. You can opt out by:
- Adjusting your Facebook ad preferences
- Contacting us to exclude you from custom audiences
- Using Facebook's "Why am I seeing this ad?" feature
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on our website
- Sending an email notification (for significant changes)
- Updating the "Last updated" date at the top of this policy
13. Complaints and Concerns
13.1 Contact Us First
If you have concerns about how we handle your data, please contact us:
13.2 Regulatory Authority
You have the right to lodge a complaint with the UK's data protection authority:
14. Specific Information for EU Residents
If you are located in the European Union, you have additional rights under the GDPR. Our EU representative for data protection matters can be contacted at sam@atlas-gyms.co.uk.