Privacy Policy

Effective Date: 1st April 2026

Hylton Health Clubs is committed to protecting your privacy and handling your personal data with care, transparency and integrity. This Privacy Policy explains how Ivy Reign Ltd, trading as Hylton Health Clubs (“we”, “us”, “our”), collects, uses, stores and protects your personal data when you visit our website, contact us, purchase services, become a member, or use our facilities.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws.

Who We Are

For the purposes of data protection law, Ivy Reign Ltd, trading as Hylton Health Clubs, is the data controller responsible for your personal data.

If you have any questions about this Privacy Policy or how your personal data is handled, you can contact us using the contact details provided on our website.

What Information We Collect

We may collect personal data that you provide directly to us, data collected through your use of our website and facilities, and information generated as part of your membership or interactions with the Club.

This may include your name, address, email address, telephone number, date of birth, emergency contact details, payment information, membership details, booking history, access records, attendance information, and correspondence with us.

Where relevant and voluntarily provided by you, we may also collect limited health-related information, such as information about injuries, medical conditions, or physical limitations, where this is necessary to support your safe use of our facilities or services.

We may also collect CCTV footage within the Club premises for the purposes of safety, security and crime prevention.

How We Collect Your Information

We collect personal data in several ways, including when you complete forms on our website, sign up for membership, contact us by email or telephone, book classes or services, make payments, enter the Club using access systems such as QR entry, or interact with our staff.

We may also collect certain technical information automatically when you use our website, such as IP address, browser type, device information and website usage data, through cookies or similar technologies.

How We Use Your Information

We use your personal data to administer your membership, provide access to the Club, process payments, manage bookings, communicate with you, and deliver the services you have requested.

We may also use your data to maintain health and safety standards, monitor access to the Club, improve our services, manage customer support, investigate complaints or incidents, and protect the security of our premises.

Where permitted, we may use your contact details to send you information about Club updates, services, events, promotions or offers that may be relevant to you. You may opt out of marketing communications at any time.

Legal Basis for Processing

We process your personal data where it is necessary for the performance of a contract with you, including managing your membership and providing access to our facilities and services.

We may also process your data where necessary to comply with legal obligations, including financial, accounting, regulatory, and health and safety requirements.

In some cases, we process personal data on the basis of our legitimate interests, such as managing the operation of the Club, maintaining security, improving services, and communicating with Members, provided these interests do not override your rights and freedoms.

Where you provide health-related information, we will only process this where necessary for safety and service delivery and, where required, on the basis of your consent.

Sharing Your Information

We may share your personal data with trusted third-party service providers where necessary for the operation of the Club and the delivery of our services. This may include payment processors, membership and booking software providers, IT support providers, professional advisers, and other service providers who assist us in running the Club.

We require such third parties to process personal data securely, confidentially and in accordance with applicable data protection law.

We do not sell your personal data to third parties.

We may also disclose your personal data where required by law, where necessary to protect our legal rights, or where necessary to protect the safety, rights or property of the Club, our members, staff or others.

Health Information

If you provide health-related information to us, we will use it only where reasonably necessary to support your safe use of the Club and its services. This may include helping us understand whether adjustments, restrictions or additional precautions may be appropriate.

You are responsible for ensuring that any health information you provide is accurate and up to date.

CCTV

CCTV operates throughout the Club, excluding private areas such as changing rooms, for the purposes of safety, security and crime prevention.

CCTV footage may be reviewed where necessary and may be disclosed to law enforcement or other relevant parties where required by law or where necessary for the investigation of incidents.

Marketing Communications

Where you have agreed, or where otherwise permitted by law, we may contact you by email, phone or other channels with updates, promotions, events, services and other marketing communications.

You may opt out of receiving marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including managing your membership, providing services, meeting legal and regulatory obligations, resolving disputes, and enforcing our agreements.

The length of time we retain information may vary depending on the type of data and the reason we hold it.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, damage or disclosure.

Access to personal data is restricted to authorised personnel and trusted service providers who need such access for legitimate business purposes.

Your Rights

Subject to applicable law, you have the right to request access to the personal data we hold about you, request correction of inaccurate or incomplete data, request erasure of your personal data, request restriction of processing, and object to certain types of processing, including direct marketing.

Where processing is based on consent, you may withdraw that consent at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully.

Third-Party Data

If you provide us with personal data relating to another person, such as an emergency contact, you confirm that you have informed that person and, where necessary, obtained their consent for us to process their information in accordance with this Privacy Policy.

Cookies and Website Usage

Our website may use cookies and similar technologies to improve functionality, analyse website traffic, and enhance user experience. You can manage cookie preferences through your browser settings.

A separate Cookie Policy may also be provided on our website where applicable.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, our services, or our data practices.

The most current version will always be available on our website, and we encourage you to review it periodically.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Ivy Reign Ltd
520a Purley Way
CR0 4RE
Email: hello@hyltonhealthclubs.com
Website: www.hyltonhealthclubs.com