Factory Gym Swansea
Privacy Policy



Factory Gym (Swansea) Ltd

Membership Privacy Policy

Last updated: 12/02/2026

Factory Gym (Swansea) Ltd
Registered in England & Wales
Company No: 15435964
Registered Office: Unit 1 & 2a Samlet Road, Swansea Enterprise Park, Swansea, SA7 9AG

This Privacy Policy explains how Factory Gym (Swansea) Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to members and prospective members of the Swansea location only.


1. Data Controller

1.1 The data controller for membership-related personal data is Factory Gym (Swansea) Ltd.

1.2 If you have any questions about this policy or your personal data, please contact:

Email: swansea@factorygyms.co.uk


2. Personal Data We Collect

2.1 We collect personal data necessary to administer your membership and operate the gym safely and effectively.

2.2 This may include:

  • Identity data (name, date of birth)

  • Contact data (address, email address, telephone number)

  • Payment data (billing details and transaction records via our payment provider)

  • Attendance and access records

  • CCTV footage for security and safety purposes

  • Emergency contact details

  • Health information provided in PAR-Q forms or health declarations


3. Special Category Data (Health Information)

3.1 We collect health information (including PAR-Q responses and relevant medical information) to assess your fitness to exercise safely and to maintain a safe training environment.

3.2 Health data is classified as “special category data” under UK GDPR and is processed under the following lawful bases:

  • Article 6(1)(b) UK GDPR – performance of a contract

  • Article 9(2)(a) UK GDPR – explicit consent

  • Article 9(2)(h) UK GDPR – health and safety obligations, where applicable

3.3 Health data is stored securely and accessed only where necessary for health and safety or legal compliance purposes.

3.4 You may withdraw your consent to processing health data at any time; however, this may affect your ability to continue membership where health information is required for safe participation.


4. How We Use Your Personal Data

4.1 We use your personal data to:

  • Administer your membership

  • Process payments

  • Provide access to the gym

  • Ensure health and safety compliance

  • Communicate important membership information

  • Respond to enquiries

  • Comply with legal obligations

4.2 We do not sell or rent your personal data.


5. Sharing Your Data

5.1 We may share your data with:

  • Our club management software provider

  • Payment processing providers

  • IT and hosting service providers

  • Professional advisers where necessary

  • Law enforcement or regulatory authorities where legally required

5.2 All third-party providers are required to process data securely and in accordance with data protection laws.


6. Data Retention

6.1 We retain personal data only for as long as necessary for membership administration, legal compliance, and legitimate business purposes.

6.2 Health data is retained only for as long as required to manage membership safely and to meet legal obligations.

6.3 After this period, data is securely deleted or anonymised.


7. Data Security

7.1 We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

7.2 Access to personal data is restricted to authorised personnel only.


8. CCTV

8.1 CCTV operates within the gym for the purposes of security, crime prevention, member safety, and protection of property.

8.2 CCTV footage is retained for a limited period unless required for investigation or legal proceedings.


9. Your Rights

9.1 Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of data (where applicable)

  • Restrict or object to processing

  • Withdraw consent (where processing is based on consent)

  • Request data portability

9.2 Requests should be made to:

Email: swansea@factorygyms.co.uk

9.3 If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.


10. Changes to This Policy

10.1 We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes.

10.2 The most recent version will always be available upon request or via our membership system.