Privacy Notice

Last updated: September 2026

By using this website, you agree to the terms below.

AEPT Gym ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store and safeguard your information when you interact with our website, inquire about membership, book classes, or work with us.

If you have any questions, please contact us at the details provided at the end of this notice.

What We Do

AEPT Gym provides fitness facilities, classes, coaching and training support to help members achieve their health and fitness goals. Our services include group classes, personal training, membership packages and ongoing fitness support.

Through our facilities, class scheduling, coaching sessions and community support, we work to understand your fitness goals and provide personalised guidance and facilities designed to enhance your training experience and help you achieve sustainable fitness progress.

How We Obtain Your Personal Data

You may give us personal information when you:

  • Enquire about or purchase a membership

  • Book a class or training session

  • Complete a membership form or health questionnaire

  • Submit a contact form or enquiry via the website

  • Subscribe to emails, newsletters or fitness updates

  • Communicate with us by email, phone or social media

  • Make a payment for membership or services

  • Participate in classes, training sessions or fitness programmes

This information may include:

  • Name, email address, phone number and postal address

  • Date of birth and age

  • Health and fitness information (medical conditions, injuries, fitness level)

  • Fitness goals and training preferences

  • Emergency contact details

  • Payment details (processed securely via third-party providers – we do not store full card details)

  • Class booking and attendance history

  • Any additional information voluntarily provided during membership or training

We use this data to deliver the membership and services you have purchased, manage your account, communicate with you about classes and updates, and support your fitness journey.

The legal basis for processing this data is legitimate interest and/or contractual necessity.

Information Collected Automatically

When you use our website, we may automatically collect:

  • IP address

  • Device and browser information

  • Pages viewed and session statistics

  • Behavioural data (e.g. time on page, clicks, navigation)

  • Information collected through cookies, analytics tools or tracking pixels

You can control cookies through your browser settings.

Information Received From Third Parties

We may receive personal information from:

  • Payment processors

  • Website and booking platforms

  • Analytics providers

  • Email marketing or CRM services

  • Social media platforms

We only receive information that you have consented to share.

How We Use Your Personal Data

We may use your data to:

  • Provide and fulfil your membership and services

  • Communicate with you regarding membership, classes, bookings or account updates

  • Manage your bookings, invoices and payments

  • Provide personalised coaching and fitness support

  • Improve our website, facilities and services

  • Send you fitness tips, class schedules, newsletters or updates (only with your consent)

  • Provide customer support

  • Comply with legal and regulatory requirements

  • Maintain health and safety records (where relevant)

We always handle your data in line with GDPR and take appropriate security measures to safeguard it.

Do You Share My Information With Other Organisations?

We keep your information confidential.

We only share your data with third parties when necessary to provide services or fulfil legal obligations, including:

  • Coaches, trainers or staff who support your training

  • Payment processors

  • Website hosting and booking platform providers

  • Email marketing or CRM services

  • Cloud storage providers

  • Legal or regulatory authorities (only if required by law)

We never sell your data.

Any third parties we work with are required to keep your information secure and confidential.

What Are Your Rights?

Under GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request corrections to inaccurate or outdated data

  • Request deletion of your data (where legally permitted)

  • Withdraw consent to marketing emails and communications

  • Restrict or object to how your data is processed

  • Obtain a copy of your data in a portable format

  • Submit a complaint to the ICO (Information Commissioner's Office)

To exercise any of these rights, contact us using the details at the end of this notice.

What Safeguards Are In Place to Ensure Data That Identifies Me Is Secure?

We take data protection seriously and use appropriate measures such as:

  • Password-protected accounts

  • Secure devices and storage

  • Encrypted systems for storing sensitive information

  • Restricted access to authorised personnel only

  • Secure third-party processors

While no online system is 100% secure, we follow best practices to minimise risk.

How Long Do You Hold Confidential Information For?

We keep your information only for as long as necessary for:

  • Providing membership and services

  • Managing your account

  • Accounting and tax purposes

  • Managing legal obligations

  • Health and safety records (as required by law)

Once your membership has ended, we will retain your data for a reasonable period in case you return or for legal/tax purposes. You can request deletion of your data at any time.

Website & Cookies

Our website uses cookies and analytics tools to improve user experience. This may include:

  • Standard cookies for functionality

  • Analytics cookies (e.g. Google Analytics)

  • Tracking cookies for performance measurement

You can opt out or manage cookie settings through your browser.

Payments

Payments for membership and services are processed securely through trusted payment processors that adhere to PCI-DSS standards. We do not store full credit card information.

GDPR Compliance

AEPT Gym is committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. We take your privacy seriously and ensure that any personal data we collect, store, or process is handled in line with these regulations.

Your Rights Under GDPR

  • Access: You have the right to request a copy of any personal information we hold about you.

  • Correction: You can ask us to correct any inaccuracies in your data.

  • Erasure: You can request that your personal data be deleted where it is no longer necessary for the purpose it was collected.

  • Restriction: You can request that the processing of your data is limited in certain circumstances.

  • Portability: You have the right to receive your data in a structured, commonly used, machine-readable format and to transfer it to another controller.

  • Objection: You can object to how your data is processed, including for marketing purposes.

Lawful Basis for Processing

We process your personal data only when there is a lawful reason to do so. This could include:

  • To provide the services you have requested (contractual necessity).

  • To comply with a legal obligation.

  • For legitimate business interests, such as improving our services, marketing (with your consent), providing support, and managing our facilities.

  • Where you have given explicit consent for a specific purpose.

Data Security

We take appropriate measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. This includes using secure systems, password protection, and limiting access to authorised personnel only.

Data Retention

We will only retain your personal data for as long as necessary to provide our services, comply with legal obligations, or resolve disputes. Once no longer required, your data will be securely deleted.

Contacting Us Regarding Your Data

If you wish to exercise any of your rights under GDPR, or if you have any questions about how your personal data is used, please contact us using the details below.

Changes to This Privacy Notice

We may update this Privacy Notice occasionally. Any changes will be posted on this page, and continued use of the website indicates acceptance of the revised terms.

Contact Us

If you have questions, concerns or requests relating to this policy, please contact:

AEPT Gym

Data Controllers: Alex Morgan and Emma Morgan

Email: aephysicaltraining@outlook.com

Phone: 07753234192

Address: Unit 3, College Road North Business Park, Aston Clinton, Bucks, HP22 5EZ