Privacy Policy

1. Introduction

This Privacy Policy explains how TML Gyms Ltd (“we”, “us”, “our”) collects, uses, stores
and protects your personal data when you:
• Visit www.themusclelab.co.uk
• Purchase a membership
• Use our gym facilities
• Contact us
• Receive communications from us

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

TML Gyms Ltd
Company Number: 16973372
Registered OƯice: Mercury House, Lea Road, Waltham Abbey, EN9 1AT
Email: info@themusclelab.co.uk

We are the “data controller” of your personal data.

3. What Personal Data We Collect

We may collect and process the following types of personal data:

Identity Data

• Full name
• Date of birth
• Gender

Contact Data

• Email address
• Phone number
• Postal address

Financial Data

• Payment details (processed securely via third-party payment providers)
• Billing history

Membership Data

• Membership type Attendance records
• Freeze and cancellation records

Health Information

• Health declarations you provide upon joining
• Injury disclosures (if voluntarily provided)

CCTV Footage

We operate 24-hour CCTV for safety and crime prevention purposes.

Website Data

• IP address
• Browser type
• Pages visited
• Cookies (see Section 10)

4. How We Collect Your Data

We collect data when you:

• Join online or in person
• Fill in membership or health forms
• Contact us via email or phone
• Enter our premises (CCTV)
• Use our website

5. How We Use Your Data

We use your personal data for the following lawful purposes:

To Perform Our Contract With You

•  Managing your membership
• Taking payments
• Communicating essential membership information
• Providing access to gym facilities

Legitimate Interests

• Maintaining gym safety
• Preventing fraud or misuse
• Improving our services
• Internal record keeping Legal

Obligations

• Complying with tax and accounting laws
• Responding to lawful requests from authorities

Marketing (With Consent)

• Sending promotional emails or SMS messages You may opt out of marketing communications at any time.

6. Special Category Data (Health Information)

Health information is considered “special category data” under UK GDPR.

We only process this data:

• With your explicit consent
• For health and safety purposes
• To ensure safe use of gym facilities

7. CCTV

We use CCTV:

• For safety of members and staƯ
• For crime prevention and detection

Footage is stored securely and retained only as long as necessary.

8. How We Store and Protect Your Data

We implement appropriate technical and organisational measures to protect your data,
including:

• Secure payment processing systems
• Password-protected systems
• Restricted staƯ access
• Secure CCTV storage

We only retain personal data for as long as necessary for legal or contractual purposes.

9. Sharing Your Data

We may share your data with:

• Payment processors
• IT and software providers
• Accountants or legal advisers
•  Law enforcement (where legally required)

We do not sell your personal data.

10. Cookies

Our website uses cookies to:

• Improve website functionality
• Analyse visitor behaviour
• Enhance user experience

You can control cookies through your browser settings.

(If you use Google Analytics or Meta ads tracking, I can add a more detailed cookie
section.)

11. Your Legal Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent (where applicable)

To exercise your rights, email: info@themusclelab.co.uk

12. Complaints

If you are unhappy with how we process your data, you may contact:

Information Commissioner’s OƯice (ICO)
Website: https://ico.org.uk

We encourage you to contact us first to resolve any concerns.

13. Data Retention

We retain membership and financial records for up to 6 years in accordance with UK
legal requirements.

CCTV footage is typically retained for a limited period unless required for investigation.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

Last Updated: 25/02/2026