InspireAll Leisure is committed to complying with the Data Protection Act 2018 and the General Data Protection Regulation 2018.
We update this Policy from time to time so please return and review this Policy regularly.
Who is InspireAll Leisure?
InspireAll Leisure & Family Support Services, is a UK registered charity no. 1093653 and a company limited by guarantee no. 4343347. Our registered office is The Venue, Elstree Way, Borehamwood, Herts WD6 1JY.
Why InspireAll Leisure collects your personal information and legal basis for doing so:
In order to operate our business, we need to process personal data. We use this to provide you with the services you request, tell you about the services you are eligible for, keep in contact with you and manage your account. We are committed to protecting your personal data and will only process the data if we need to for a specific purpose and providing we have a legal basis, as explained below.
We have different legal bases for collecting your personal information. We may have your consent to collect your contact details when you sign up to receive newsletters or information about offers or services. We may enter into a contract with you and process your personal data in order to provide you with gym membership. We may have legitimate interests in processing your personal data in order to promote our services and we may have legal obligations to inform authorities if your safety or the safety of others is at risk.
The information we collect may include any of the following:
Information you type into our websites or provide to one of our colleagues such as, but not limited to: when you become a member, complete an enquiry form, provide activity data from a device, make a booking, sign up as a volunteer, or visit one of our centres.
This information may include your personal contact data, fitness-related data which has been obtained in order to create personalised fitness workouts for you or health-related data. We use this to provide you with the services you request, tell you about services you are eligible for, to keep in contact with you, manage your account.
If you contact us by email, via the website, in person or by telephone we may keep a record of your contact information and enquiry and may subsequently use your contact details to respond to your enquiry.
Information which allows us to recognise you
Such as a unique ID number; storing this data saves you from re-entering your details again when you return to the website.
Details of your transactions
We collect data for any transactions you carry out through our websites and services, so that we can administer the services you have with us. Please note that we never store your payment details on our website.
Sensitive Health Data
We occasionally collect any personal health data you provide to us when registering and signing up for our services. We collect this information to ensure we are offering you the right services and so your progress can be tracked by yourself and us. We may ask you for information about your health in order to recommend appropriate exercise regimes or offer our other services.
We will store your bank account number and sort code data where you have a Direct Debit mandate in place. When the Direct Debit mandate finishes we will remove this data from our operational systems within 30 working days.
We process bank card information at the time we take payment. This data is not stored on our systems and is processed on Payment Card Industry Data Security Standard compliant banking systems.
Information about website visits including IP address
We will record customer comments and surveys about how we are performing
Other Sensitive data
We are sometimes required to collect information about your ethnicity and other sensitive data in order to provide aggregated reports to your local authority or commissioning group. This information is used only for statistical purposes and is always kept secure.
By using our site, you may also receive certain third-party Cookies on your computer or device. Third-party Cookies are those placed by websites, services, and/or parties other than us. Third-party Cookies are used on our site for joining our mailing list or managing your website. These Cookies are not integral to the functioning of our site and your use and experience of our site will not be impaired by refusing consent to them.
All Cookies used by and on our site are used in accordance with current Cookie Law.
Before Cookies are placed on your computer or device, you will be shown a requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of our site may not function fully or as intended.
Certain features of our site may depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”.
In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third-party Cookies. By default, most internet browsers accept Cookies, but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.
You can choose to delete Cookies on your computer or device at any time, however, you may lose any information that enables you to access our site more quickly and efficiently including, but not limited to, login and personalisation settings.
It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.
Your communications preferences
We keep a record of any permissions and preferences you give us about what types of communication you are happy to receive from us. If you want to change your preferences please let us know when you next visit us or contact us using the details below.
Data relating to children
Our services are used by people of all ages. InspireAll Leisure accepts website enquiries and collects personal information from individuals. Children aged under 13 years must have a parent or guardian’s consent before providing personal information to us. We will not collect any personal information without this consent.
How do we store and protect your personal information?
These are the basic guidelines we use to look after your personal data:
- We maintain secure systems to protect your personal information
- We respect your wishes about how we contact you, whether by post, telephone, email or text message
- We will update your information or preferences promptly when you ask us to
- We will respond fully to requests from you to see the information that we hold on you.
- We will not hold your personal information for longer than is necessary for our legitimate business uses
- We follow strict procedures when storing or handling information that you have given us. Some information is encrypted, such as payment transactions and
- We will never sell your personal information to a third party
InspireAll Leisure reserves the right to store and process information securely outside of the European Economic Area (“EEA”).
We retain personal information as long as we consider it useful to contact you, or as needed to comply with our legal obligations.
Services provided by contracted third parties
InspireAll Leisure may share information with third party organisations that provide specific services on our behalf which enhance our products and your experience with us. These organisations act as a Data Processor under our instructions. They may process data securely outside of the EEA. There is a contract in place with each third party which includes strict terms and conditions to protect your privacy.
Our current processing partners include XN Leisure, Harlands, Junction 9 Design Consultants, Cascade, Core Business Systems and TRP.
Please note: Use of services provided by our partners will be subject to the terms and conditions and/or Privacy Policies of these third-party organisations.
InspireAll Leisure will never sell your personal information to any third party for marketing or other purposes.
In some cases, InspireAll Leisure works in partnership with other organisations to provide services to you. In these cases, partners may contact you for marketing purposes if you have given the partner organisation your permission to do so.
How do we use your information?
We use your information to help us provide and improve our services for you. We may use your information in the following ways.
- to provide you with any services that you have purchased or receive free as part of a health or other scheme
- to check your identity
- to check your eligibility where appropriate
- to update our records with any new information you give us
- to notify you if we will be unable to provide a service you have booked before
- to provide marketing communications (if you have given us your permission)
- for research and analysis so we can develop and improve our services for your benefit
- to tailor our communications to you to ensure relevance (if you do not want us to do this please contact us using the details below)
- to comply with legal obligations
- to safeguard users of our services
Keeping you updated
There are certain communications we need to send to you provide our services. We call these service communications and include, for example, notices about your direct debit payments, change of password, registration confirmations, appointment reminders and waiting list announcements. We would not be able to provide you with services if we did not send these.
We may, from time to time, contact you about our services or products we think you might find interesting by email, by post, telephone or SMS, but only if you have given us your permission to do so.
If you do not want us to contact you other than for service emails, let us know when you next visit us or contact us using the details below.
Your rights to manage your personal data
Accuracy of data
We will strive to ensure the data we hold about you is accurate and relevant. If you believe the information we hold about you is out of date or incorrect, please tell a member of staff or contact our Data Protection officer (details below). You will need a form of identification to request any changes.
Seeing your data – subject access request
The Data Protection Act 2018 and the General Data Protection Regulation 2018 give you the right to know what personal information we hold about you. This is called a Subject Access Request. If you would like to make a request please tell a member of staff or contact our Data Protection officer (details below).
Removing your data
If you no longer use our services and products and wish us to delete your personal data we will do this if there are no legal or statutory regulations requiring us to keep this information. If you would like to make a request for us to do this, then please tell a member of staff or contact our Data Protection officer (details below).
If you want us to stop using your personal data but don’t want us to delete it we will restrict its use unless we have a legal duty or legitimate reason to use it. If you would like to make a request please tell a member of staff or contact our Data Protection officer (details below).
Objecting to your data being used
You have the right to stop to your personal data being used for direct marketing. If you would like to make a request please tell a member of staff or contact our Data Protection officer (details below). You can also object to your personal data being used for statistical purposes, our legitimate interests and for a task being carried out in the public interest. If you would like to make a request please tell a member of staff or contact our Data Protection officer (details below).
Transferring your data
In some circumstances, you can ask us to transfer your information to another organisation.
Complaints about how we manage your data
If you are not happy about the way we manage your data please contact us as quickly as possible by contacting your centre or usual contacts for providing our service. You may also contact our Data Protection officer (details below) – who will get back to you as soon as possible.
Information Commissioner’s Office (ICO)
The ICO is the UK’s independent authority set up to uphold information rights. You have the right to contact them should you wish. Details can be found on their website: https://ico.org.uk/
Links to other websites
Our websites may contain links to and from external websites, advertisers and affiliates. If you follow a link to other sites please note that these will be governed by their own privacy policies. We cannot accept liability for data use on those websites.
In most instances, it is best to contact us locally where you take part in our services such as the Leisure Centre you normally attend. We can usually deal with most of your queries here.
You can also contact us through our contacts pages on our website such as inspireall.com
Alternatively, you can write or email our Data Protection Officer, Baronie Shepherd email@example.com
Data Protection Officer, InspireAll, Head Office, The Venue, Elstree Way, Borehamwood, WD6 1JY