Data Protection

This is the Data Processing Notice (also known as a Privacy Policy) of Storm Force Fitness Ltd.  It is issued in compliance with the Data Protection (Bailiwick of Guernsey) Law, 2017 “the Law”
 
We care about your personal data and ensuring you are informed about how we use it.  We promise to protect your data, and to manage any information you share with us in line with data protection law.
 
This Notice sets out how and why we collect and use your personal data and our legal basis for doing so.
 
Who Are We?
 
We are Storm Force Fitness and we are registered with the Guernsey Registry (51040).  We are also registered with The Office of the Data Protection Authority (registration number DPA7370).
 
What Data We Collect
 
We only hold postal address, email and telephone details of our customers/clients/members.  This not only enables us to contact our customers/clients/members and to enable us to carry out our core business services or comply with a contract, but also to comply with statutory requirements and our legal obligations.
 
Where Does This Information Come From?
 
The personal data we process is given to us directly by you, our customers/clients/members as per our account registration procedures through the TeamUp gym software system. We do not collect any personal data from any other sources.
 
Our Lawful Basis For Processing Your Personal Data
 
In order to be able to provide you with the services you require, we use our legal contractual basis for processing your data or rely on our legitimate business interests.
 
Consent
 
In cases where we are not relying on a contractual or legitimate business interests basis, we rely on consent to lawfully process your data.  This can be obtained (orally, by email or by an online process.  You have the right to withdraw your consent at any time, however, it must be highlighted that by withdrawing your consent we may not be able to provide you with our core business services.
 
Types of Personal Data We Collect
 
Your contact details, such as name, postal address, email address and contact number
 
Card details are stored in the encrypted TeamUp software for the purpose of automated monthly payments. 
 
A record of our communications with you via email
 
Special Category Data
 
Defined in the Law as – “
 
Personal data revealing an individual’s racial or ethnic origin, political opinion, religious or philosophical belief, trade union membership, genetic data, biometric data, health data, data concerning an individual’s sex life or orientation, & criminal data.”
 
We ask for certain health data on registration and creation of your TeamUp account as a matter of ensuring whether the exercise or nutrition program you have chosen is suitable and whether further discussion is necessary with you before you begin.
 
Sharing of your Personal Data
 
We do not share your personal data with any third party without express written permission such as during interactions with other medical / rehabilitation professionals.
 
Transfer of Data
 
We do not transfer your personal data outside the Bailiwick of Guernsey.
 
Direct Marketing
 
We will from time to time send emails to current and past members through Constant Contact email software which is integrated with TeamUp. Every email provides the option to unsubscribe.
 
Retention of Data
 
All data is retained securely and only used for the purposes for which it was collected under the Law.  Data is retained on our TeamUp account for the purpose and ease of re-registration for our programs or for as long as is required to comply with our statutory obligations, in order for us to provide you with the services forming part a contract or with your consent.  Your account can be deleted at any time via email request. Please see our Retention Policy for details.  
 
Your Rights
 
The Law provides you with a number of rights, but specifically and of relevance, you have the right to:
 
request confirmation of the personal data that we hold about you and what we are doing with your data
 
request correction of your personal data if incorrect, out of date or incomplete
 
request that we stop any consent-based processing of your personal data after you have withdrawn that consent
 
Contacting Us
 
We are defined as a Controller according to the Law.  If you have any questions or queries regarding how your personal data is being managed, please contact Jon Le Tocq by emailing info@stormforcefitness.com
 
Contacting the Regulator
 
If you feel that your data has been handled incorrectly or you are unhappy with our response to any requests you have made to us regarding the use of your personal data, you have the right to lodge a complaint with the data protection regulator – The Office of the Data Protection Authority (ODPA).  You can contact them for advice by writing to: 
 
The Office of the Data Protection Authority
 
St Martin’s House
Le Bordage
St Peter Port
Guernsey
GY1 1BR
 
by telephoning (01481) 742074 or by email to enquiries@opda.gg or you can submit a complaint online at www.odpa.gg  and complete the ‘make a complaint’ section.