Privacy Policy

1. Introduction

Firefite BoxCross Ltd, trading as Boxcross UK ("we," "us," or "our"), is committed to protecting the privacy of our members, visitors, and app users. This Privacy Policy explains how we collect, use, share, and safeguard your personal data when you interact with our gym, website, mobile application, and related services (collectively, the "Services").

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered address is 15 Regal Road, Wisbech, PE13 2RQ.

2. Information We Collect

2.1 Personal Information

When you sign up for a membership, make an enquiry, or use our app, we may collect:

• Full name
• Email address
• Phone number
• Postal address
• Date of birth
• Payment and billing details (processed securely by our payment provider)
• Emergency contact information
• Health and medical information relevant to your training (e.g., PAR-Q forms)

2.2 Usage Information

We may automatically collect:

• IP address and approximate location
• Device type, operating system, and browser
• Pages visited and time spent on our website
• Gym access logs (entry/exit via your membership card or app)

2.3 Cookies & Tracking Technologies

Our website uses cookies and similar technologies to remember your preferences, analyse site traffic, and improve your experience. You can manage cookie preferences through your browser settings. For more detail, see our cookie banner when you first visit the site.

3. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases:

• Contract: To provide your membership and related services.
• Legitimate interests: To improve our facilities, prevent fraud, and ensure safety.
• Consent: For marketing communications. you can withdraw consent at any time.
• Legal obligation: To comply with health & safety, tax, and regulatory requirements.

4. How We Use Your Information

• To set up and manage your gym membership
• To process payments and direct debits
• To grant 24/7 access to our facilities
• To respond to enquiries and provide customer support
• To send marketing updates, newsletters, and promotions (with your consent)
• To improve our website, app, and gym experience
• To comply with our legal and regulatory obligations
• To ensure the safety and security of our premises (including CCTV)

5. Sharing Your Information

We may share your personal data with:

• Payment processors: To handle membership payments securely.
• Membership management software: To manage bookings, access, and your account.
• Marketing platforms: To send communications you have opted into.
• Legal or regulatory bodies: Where required by law.

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Membership records are typically retained for up to 6 years after your membership ends to comply with financial and legal obligations.

7. Your Rights

Under the UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (subject to legal obligations)
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests
• Data portability. receive your data in a structured, commonly used format
• Withdraw consent at any time for marketing communications

To exercise any of these rights, please contact us using the details below.

8. CCTV

CCTV is in operation throughout our premises for the safety and security of our members and staff. Footage is retained for a limited period and accessed only when necessary. Signage is displayed at the gym to inform you of CCTV use.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

11. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: info@firefiteboxing.co.uk
• Phone: 01945 742012
• Address: Firefite BoxCross Ltd, 15 Regal Road, Wisbech, PE13 2RQ