Last Updated: October 27, 2025
Introduction
Unit 9 Gym ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy applies to all visitors, members, and users of our website and gym facilities located at Unit 9 Coed Gwilym Industrial Estate, Quay Road, Neath, SA11 2SE.
Data Controller
Unit 9 Gym is the data controller responsible for your personal information. For any privacy-related queries, please contact us:
Email: info@unit-9.co.uk
Phone: 07535 741771
Address: Unit 9, Saville Gordon, Quay Road, Neath, SA11 1SL
Personal Data We Collect
We collect and process the following categories of personal information:
Contact Information
- Full name
- Email address
- Phone number
- Home address
Membership Information
- Membership type and status
- Payment details (processed securely by our payment provider)
- Class bookings and attendance
- Emergency contact information
Health and Fitness Information
- Health declaration and medical conditions (if disclosed)
- Fitness goals and preferences
- Personal training session notes
Technical Information
- IP address and browser type
- Website usage data (via cookies)
- Device information
How We Use Your Data
We process your personal data for the following purposes, each with a lawful basis under UK GDPR:
Contract Performance
To provide gym membership services, process payments, manage class bookings, and communicate about your membership.
Legal Obligation
To comply with health and safety regulations, financial record-keeping requirements, and other legal obligations.
Legitimate Interests
To improve our services, send relevant communications about classes and facilities, ensure facility security, and manage member safety.
Consent
To send marketing communications about special offers, events, and new services (you can withdraw consent at any time).
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, or misuse:
- Secure SSL encryption for all website transactions
- Password-protected systems and encrypted databases
- Regular security audits and updates
- Staff training on data protection and confidentiality
- Secure payment processing through PCI-DSS compliant providers
- Limited access to personal data on a need-to-know basis
Data Sharing and Third Parties
We do not sell your personal data. We may share your information with:
- Payment processors - to process membership payments securely
- Email service providers - to send membership communications and newsletters
- Analytics providers - to understand website usage (only with your consent)
- Legal authorities - when required by law or to protect our legal rights
All third-party providers are carefully selected and required to protect your data in accordance with UK GDPR standards.
Your Data Protection Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data (subject to legal obligations)
Right to Restrict Processing
Request limitation on how we use your data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent
Withdraw consent for marketing communications at any time
To exercise any of these rights, please contact us at info@unit-9.co.uk
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Active membership data - retained while your membership is active
- Financial records - retained for 7 years as required by UK tax law
- Marketing communications - retained until you unsubscribe
- Website analytics - anonymised after 26 months
After the retention period, we securely delete or anonymise your personal data.
Children's Privacy
Our services are intended for individuals aged 16 and over. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately.
Cookies and Tracking
Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email to members. The "Last Updated" date at the top of this policy indicates when it was last revised.
Contact Us & Complaints
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Email: info@unit-9.co.uk
Phone: 07535 741771
Address: Unit 9, Saville Gordon, Quay Road, Neath, SA11 1SL
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your data properly. Visit ico.org.uk for more information.