§Legal
Privacy notice
What we collect, why we collect it, how long we keep it and how to make us stop. Written to be read rather than to be survived.
This is placeholder text written for a fictional club as part of a front-end demonstration build. It is not legal advice and must not be used as the policy for a real business.
Who we are
IRONHAUS Athletic Club Ltd, 14 Ferrers Yard, Shoreditch, London E2 8HD, is the data controller for the information described here. Our data protection lead can be reached at concierge@ironhaus.club.
We are registered with the Information Commissioner's Office. This notice is written against the UK GDPR and the Data Protection Act 2018.
What we collect
Membership records — name, date of birth, address, email, phone, emergency contact and payment details. We need these to hold a contract with you.
Health information — injury history, medical conditions you tell us about, and results from assessments, DEXA scans and zone tests. This is special category data and we treat it accordingly.
Training data — classes booked and attended, sessions logged, heart-rate zones and entries your coach adds to your programme.
Access data — the time you entered and left each club, from your membership card or app pass.
Website data — pages visited and how you arrived, collected in aggregate. No advertising cookies and no third-party trackers.
Why we collect it
To provide the membership you paid for, which is contractual necessity. To keep you safe while training, which relies on your explicit consent for health data. To meet legal duties around health and safety and financial record-keeping. And, on the basis of our legitimate interest, to improve the coaching we offer — always using aggregated data rather than individual records.
We do not sell data. We do not share it with advertisers. We have never bought a marketing list and do not intend to start.
Who we share it with
Our payment processor, to take your subscription. Our club management platform, which hosts membership and booking records inside the UK or EEA. Our email provider, for the one weekly newsletter you can leave at any time. Every one of them is bound by a data processing agreement.
Your health information is visible only to the coaches working with you and to our physiotherapy team. It is never shared with a third party without your specific instruction.
How long we keep it
Membership records for six years after your membership ends, which is the limitation period for contract claims. Health and assessment records for eight years, in line with clinical record-keeping guidance. Access logs for ninety days. Newsletter records until you unsubscribe, and then a suppression entry so we never email you again by accident.
Your rights
You can ask for a copy of everything we hold, ask us to correct it, ask us to delete it, object to how we use it, ask us to restrict processing, or ask for it in a portable format. Withdrawing consent for health data is always available, though it may mean we can no longer coach you safely.
Email concierge@ironhaus.club and we will respond within one month. If you are unhappy with how we handled it you can complain to the ICO at ico.org.uk, and we would rather you told us first so we can fix it.
Cookies
This site sets no cookies at all. It stores one item in your browser's session storage — a flag recording that you have already seen the loading animation, so it does not replay on every page. That flag never leaves your device and disappears when you close the tab.
The site loads two JavaScript libraries (GSAP and Lenis) from a public CDN. Those requests reveal your IP address to the CDN in the same way any web request does. No analytics or advertising script runs here.