Toro Gym – Privacy Policy
Toro Gym (“we”, “our”, “us”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, and protect your personal data when you use our unmanned gym facilities, website, and services.
⸻
1. Who We Are
Toro Gym
For the purpose of data protection laws, Toro Gym is the “data controller”.
⸻
2. What Data We Collect
We may collect and process the following information:
a) Personal Information
• Full name
• Date of birth
• Address
• Email address
• Phone number
• Emergency contact details
b) Health Information
• PAR-Q responses (fitness readiness)
• Relevant medical declarations (if provided)
c) Access & Security Data
• Entry/exit logs (key fob/app access)
• CCTV footage within the gym
d) Payment Information
• Billing details (processed via secure third-party providers)
e) Technical Data
• IP address
• Website/app usage data
• Login activity
⸻
3. How We Use Your Data
We use your data for the following purposes:
• To register and manage your membership
• To provide secure access to our unmanned gym
• To ensure health and safety within the facility
• To monitor and prevent misuse or unauthorised access
• To process payments and manage billing
• To communicate important updates (e.g. access issues, safety notices)
• To comply with legal obligations
⸻
4. CCTV Monitoring
Toro Gym operates 24/7 CCTV surveillance for:
• Member safety
• Crime prevention and detection
• Facility monitoring in an unmanned environment
Footage is securely stored and only accessed when necessary.
⸻
5. Legal Basis for Processing
We process your personal data under the following lawful bases:
• Contractual necessity – to provide your gym membership
• Legal obligation – to comply with applicable laws
• Legitimate interests – to ensure safety, security, and service improvement
• Consent – where required (e.g. marketing communications)
⸻
6. Data Sharing
We may share your data with:
• Payment processors (e.g. Stripe, GoCardless)
• Gym management software providers
• Security and IT service providers
• Law enforcement or regulatory bodies (if required by law)
We do not sell your personal data.
⸻
7. Data Retention
We retain your data only as long as necessary:
• Membership data: for the duration of your membership + up to 6 years
• CCTV footage: typically retained for 30 days (unless required longer)
• Health data: retained securely and only as needed for safety purposes
⸻
8. Your Rights
Under UK data protection law, you have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
⸻
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
• Secure servers and encryption
• Restricted access controls
• Secure third-party providers
⸻
10. Cookies & Website Use
Our website may use cookies to:
• Improve user experience
• Track website performance
• Support login functionality
You can control cookies through your browser settings.
⸻
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
⸻
12. Contact Us
If you have any questions about this Privacy Policy or your data:
Toro Gym
Email: torogymdunoon@gmail.com