Privacy & Cookie Policy FreeGym

You can access and browse parts of www.freegym.co (“our site”) without having to supply any personal data. But if you want to set up an account and use our services you will need to provide us with some personal data.

Please note that you can always monitor and control the processing of your personal data by exercising your rights.

When you set up an account, fill in forms or correspond with us, you will give us some personal information, such as your name, address, e-mail address, phone number and health information. We do not collect financial information and credit or debit card information. However, you will need to provide such information to our third-party payment provider Stripe when you use one of our services for which payment is required. We do have limited access to your card information (the last four digits of your card and its expiry date), but we can’t use or otherwise process it. Processing of such information is governed by Stripe’s privacy policy, which you can find on their website.

This information is used to:

• •provide you with the information and services you request from us;
• •provide you with information about services we feel may interest you;
• •notify you about changes to our services or policies;
• •send you our newsletter.

If you visit our site, we will also collect the following information:

• •technical information: the Internet Protocol (IP) address used to connect your computer to the Internet, login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform
• •information about your visit: the full Uniform Resource Locators (URL), clickstream to, through and from our site including date and time, services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page;
• •location data: we may access, collect, monitor and/or remotely store your location data, which may include GPS coordinates or similar information regarding the location of your device. Some features of our site, particularly location-based services, may not function properly if the use or availability of location data is impaired or disabled.

This information is used:

• •to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
• •to improve our site to ensure that content is presented in the most effective manner for you and for your device;
• •to allow you to participate in interactive features of our services, when you choose to do so;
• •as part of our efforts to keep our site safe and secure;
• •to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
• •to make suggestions and recommendations to you and other users of our site about services that may interest you or them.

If you create your account or sign in with Google, Google passes us your name and email address so we can set up and recognise your FreeGym account. That is the only third-party sign-in we offer and the only information we receive this way – we do not access your contacts or anything else on your Google account. You can review the access granted in your Google account settings at any time.

Our site and our services are not intended for children under the age of 16. We do not knowingly collect or distribute personal information from or about children under the age of 16. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us so we can take appropriate measures.

In order to enable our partners (the fitness vendors offering their services via our site) to perform their obligations to you (to offer you their services), we routinely share your personal data with the partner you have purchased or claimed an offer of. In practice this means that when you claim or purchase an offer, we share your name, email address and phone number with that venue so they can contact you to arrange your visit and verify your voucher. Our partners are given this information solely to perform their contract with you and for no other purpose. This means that our partners are not allowed to use your information for marketing purposes, including approaching you with unsolicited offers. Should you become aware of any unauthorised use of your personal information, please do let us know so that we can take appropriate action.

Our partners may not disclose or sell your personal information to other parties.

There are two other instances in which we may share your personal data with other parties, namely:

• •if our business is sold or if we buy another business with the prospective seller or buyer;
• •if we are obliged by law to do so, or in order to enforce or apply our Terms of Use and other agreements, or to protect the rights, property, or safety of us, our users, or others, with the relevant governmental body or organisation.

We will not share your personal information with any other third party.

Our site may contain links to and from websites of our partners. If you follow a link to any of those websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for the use of these websites. Please check the applicable policies before you submit any personal data to these websites.

You can create an account or sign in using your Google account. If you do, Google shares your name and email address with us to create your FreeGym account – nothing more. We do not access your contacts, and we do not offer Facebook or other social sign-ins. Your use of Google sign-in is also governed by Google's own privacy policy.

We use a small number of trusted providers to run FreeGym, each processing personal data only on our instructions:

• •Supabase – our database and sign-in system, hosted in London, UK.
• •Resend – sends our transactional emails (voucher receipts, account emails).
• •Mailchimp (Intuit) – manages our newsletter mailing list, if you opt in. Mailchimp is based in the United States; transfers are protected by recognised safeguards under UK data protection law.
• •Google – provides maps and location search on our site, and Google Analytics if you have accepted analytics cookies.
• •DigitalOcean – hosts our website.
• •Stripe – processes online payments. Your card details go directly to Stripe and never pass through FreeGym; at most we see the last four digits and expiry date for support purposes. Stripe's processing is governed by its own privacy policy.

We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

All personal information we collect or receive from you is stored on secure servers.

Where we have given you - or where you have chosen - a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your personal information, we will use strict procedures and security features to try to prevent unauthorised access and data breaches.

We only retain your personal data for as long as your account is active or for as long as we need it to fulfil the purposes for which we have initially collected it, unless otherwise required by law. The personal data we share with our partners is only held by our partners for as long as necessary to fulfil their obligations to you under the contract you have with them.

You can delete your account at any time from your account settings. When you do, we erase your personal data – your name, contact details, favourites, reviews and preferences. Purchase records are kept in an anonymised form only (amount, date, offer and redemption status, with nothing that identifies you), because UK law requires us to keep transaction records for six years. We also keep a one-way cryptographic hash of your email address, which lets us prove your erasure request was actioned and prevents old data imports from re-adding you – the hash cannot be turned back into your address.

Because those records can no longer be connected to you, we will not be able to investigate or resolve queries about past purchases after your account is deleted.

Under data protection laws, you have the following rights, which you can enjoy free of charge.

• •Right of transparency and information about how we use your personal information.
• •Right to ask us to confirm whether or not we hold any personal information from you and if we do, the right to ask us what information we have stored about you and for a copy of that information.
• •Right to rectify any inaccurate personal data we hold about you or to complete any incomplete information.
• •Right to have all personal data we keep from you erased in the following situations:
• –the personal data are no longer necessary in relation to the purpose for which it was collected;
• –you have withdrawn your consent to process your data and we do not have any other legal ground to keep processing your data;
• –you object to the processing of your data while we do not have any overriding legitimate grounds to do so;
• –your data have been unlawfully processed.

Right of restriction of processing

You have the right to ask us to restrict the processing of your personal data if any one of the following applies:

• •if you contest the accuracy of the personal data, for a period so long that we can verify the accuracy of your personal data
• •if the processing is unlawful and you oppose the erasure of your data and ask for a restriction instead
• •we do no longer need your personal data for the purpose for which it was collected, but you require your data for the purpose of establishment, exercise or defence of legal claims
• •you have objected to the processing pending verification of the legitimate grounds to override such objection
• •Right to object to:
• –processing of personal data concerning you based on legitimate interests or the performance of a task in the public interest. Such objection must be based on grounds relating to your particular situation. We are obliged to stop processing your data, unless either we can demonstrate that we have compelling legitimate grounds to override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims;
• –direct marketing.
• •Right to withdraw consent you have given us to process your personal data, where consent is being relied on as the lawful basis of such processing.
• •Right to receive the personal data concerning you in a structured, commonly used, machine-readable format.

You can exercise your rights by checking certain boxes on the forms we use to collect your data, by adjusting your settings in your account or by contacting us. We may request you for proof of identity and address when you exercise your rights.

A cookie is a small text file placed on your device when you visit our site; localStorage is a similar mechanism your browser provides. Here is exactly what we use today:

• •Strictly necessary cookies: when you sign in, our authentication provider (Supabase) sets cookies that keep you logged in securely. The site cannot work without these, so they cannot be turned off.
• •Strictly necessary localStorage: we store small pieces of information in your browser to make the site function – your last searched location (so distances stay accurate), your favourites, your cookie choice itself, and, for signed-in vendors, their portal session. This data stays on your device; it is not used to track you across other websites.
• •Third-party content: when you open the map view, it is provided by Google Maps, which may set its own cookies. This only happens on pages where a map loads, and is governed by Google's privacy policy.
• •Analytics (only with your consent): if you choose "Accept" in our cookie banner, we use Google Analytics 4 to understand how the site is used – pages visited, searches made, and similar usage patterns. Google Analytics sets cookies (such as _ga) and processes data on our behalf; IP addresses are anonymised. If you choose "Essential only", no analytics run at all – the script is never even loaded.

We use no advertising or targeting cookies of any kind.

When you first visit, a banner offers two equal choices: "Essential only" and "Accept". You can change your choice at any time using the "Cookie choices" link in the footer, or by clearing your browser data for our site.

From time to time we may change this policy, for example when we add a new feature or provider. We will post the updated version on this page, and where a change is significant we will tell you – by email or a notice on the site – before it takes effect. Where our processing relies on your consent, we will ask for it again if the change requires it.

If you encounter any problems in relation to the use of your personal data, please contact us so we can try to resolve your issue or concern. You also have the right to lodge a complaint with the supervisory authority in the EU member state where you work, normally live or where any alleged data infringement of data protection has occurred. In the UK, this authority is the Information Commissioner who you can contact via https://ico.org.uk.

Free Gym Ltd, trading as FreeGym, a private limited company incorporated in England and Wales under number 10978664 with our registered offices at Free Gym LTD, c/o Xitax Ltd, Pera Business Park, Nottingham Road, Melton Mowbray, Leicestershire LE13 0PB.

hello@freegym.co

© Free Gym Ltd 2026