Privacy policy.

Who is responsible for the processing of your personal data?

The Jones’ entity responsible for the processing of your personal data will depend on how you interact with Jones’ Sites and Apps. The relevant Jones’ entity is referred to as “Jones’ Fitness”, “our”, “we” or “us” in this privacy policy.

What data do we collect?

The data collected by Jones’ Fitness can include but isn’t limited to:

• Name
• Date of birth
• Mobile telephone number
• Email address
• Height
• Weight
• Sensitive data that may have an impact on whether you should or should not take part in physical activity
• Emergency contact details (third party): name, emergency contact number and relationship

Information about third parties

Information we process, as described in this notice, may also include information about third parties such as your spouse or family members. If you give us information on behalf of someone else, you confirm that the other person has agreed that you can:

• Give consent on his or her behalf to the processing of his or her personal data;
• Receive on his or her behalf data protection notices; and
• Give consent to the processing of his or her potentially sensitive personal data (for example, any health issues relating to accessibility or dietary requirements).

If you’re setting up a membership, a third party is responsible for your payment data. Depending on your membership, it will either be Glofox, GoCardless, Stripe or Square. You have the right to request this information at any point. We are not responsible for the security or privacy policies of those third-party sites, and we recommend that you review those parties’ privacy notices before sharing your personal data on those platforms.

What do we do with the information we gather?

The information collected on PAR-Q forms or from consultation notes is used by the company to tailor training sessions and nutritional guidance. Data is not shared with any third parties, but it may be shared with members of the Jones’ Fitness team if it will affect your experience. For example, if a previous injury has been discussed, this might be passed on to a team member so they can avoid or help to strengthen that area.

Those who opt in to our email list will receive communications on upcoming events, products, information, education and other appropriate things related to Jones’ Fitness. Any information collected for consultation purposes cannot be used for marketing purposes.

We cannot ask for more information than is necessary to do our job. For example, a salesperson should not ask for your date of birth and email address before processing an order, as this information is not necessary to make a sale.

We will not sell any of your personal information to third parties, nor will we transfer your personal data outside of the European Union without your prior consent.

Where is your data stored (paper)?

All PAR-Q information related to Jones’ Fitness is stored on paper in a locked filing cabinet. Only staff have access to this information, and it is not shared with anyone else.

Our legitimate interests in this information include, but go beyond:

• Ensuring that you are kept up to date with any scheduling changes.
• The ability to contact someone appropriate in case of an emergency.
• Measuring your progress during your fitness journey.
• Highlighting any contraindications to exercise that a coach should be aware of, to ensure the exercise programme is both safe and effective.

How long will data be stored?

We will retain your personal data in accordance with your instructions and as required by applicable law. We may also retain certain information in order to conduct audits, comply with our legal obligations (and to demonstrate compliance) and resolve disputes. However, we will not retain your personal data for longer than is reasonably necessary.

Keeping your data secure

We have appropriate security measures in place to prevent your personal information being accidentally lost, or used or accessed in an unauthorised way. We also limit access to your personal information to those who have a genuine business need to know it. Some of the technical and organisational measures we use to safeguard your personal data are:

• Storing your personal data, in all forms, in a secure environment;
• Training our staff on the importance of data protection measures;
• Employing SSL (secure sockets layer) encryption on every domain we own, which allows us to encrypt any passwords to prevent unauthorised access or disclosure;
• Securing our network with an advanced firewall, supported by industry-standard anti-virus software.

We also have policies and procedures in place to deal with any suspected data breach, so that we can act quickly to minimise any potential damage.

Cookies

This website does not set any cookies. We do not use Google Analytics, advertising pixels or any other tracking technology that stores information on your device.

We use Cabin, a privacy-focused analytics service, to understand how many people visit our website and which pages they view. Cabin does not collect personal information, does not use cookies and does not track individual visitors across other websites, so it cannot identify you.

Some links on this website take you to third-party services, such as our class and membership booking pages (Glofox), physiotherapy bookings (Cliniko) and WhatsApp. Those services may set their own cookies once you arrive on their sites. We have no control over these cookies, so please review their privacy and cookie policies before using them.

If you want to find out more about cookies in general, or how to delete them from your browser, you can visit aboutcookies.org.

Your rights

Under the GDPR you have a number of important rights. These include:

• The right to fair processing and transparency. We are required to tell you why we want to gather your personal information, what we will do with it, who it will be shared with and how long it will be kept. This information is set out in this privacy policy, but if you need anything further, please contact us.
• The right to request a copy of your information. You can request a copy of the information we hold about you (known as a “subject access request”). Please contact us with proof of your identity and let us know what information you would like. We will provide it in a commonly used, machine-readable format.
• The right to have mistakes corrected. You can ask us to correct any information we hold that is inaccurate. Please contact us with details of what is incorrect and what it should be replaced with.
• The right to stop direct marketing. You can ask us to stop contacting you for direct marketing at any time. Please contact us and let us know which method of contact (one or all) you are not happy with.
• The right to restrict processing. You can ask us to suspend the processing of your personal data in certain circumstances. For example, if you have told us there is a mistake in the information we hold about you, you can ask us to suspend processing until it has been corrected.
• The right to erasure (“the right to be forgotten”). You can ask us to delete or remove your personal data from our systems where there is no compelling reason for us to continue processing it.

To exercise any of these rights, please write to us using the details at the bottom of this page, and provide enough information for us to confirm your identity. We may also ask for proof of identity, such as a copy of your driving licence or passport and a recent utility bill or bank statement, to make sure we are not releasing your personal data to anyone other than you.