Privacy Policy
Last Updated: July 17, 2026
Welcome to the Privacy Policy for Elysium Fitness Edinburgh and CrossFit Edinburgh. We operate through our dual web platforms: elysium-edinburgh.com and crossfit-edinburgh.com. We are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our websites, sign up for a free trial, purchase a gym membership, book coaching sessions, or visit our physical facility in Edinburgh.
1. Who We Are (Data Controller)
Under the UK General Data Protection Regulation (UK GDPR), the data controller responsible for your personal information is:
- Business Name: Elysium Fitness / CrossFit Edinburgh
- Physical Address: 24 Duke St, Edinburgh, EH6 8HQ
- Contact Email: info@elysium-edinburgh.com
- Contact Number: 0131 521 4262
2. The Information We Collect
We collect various types of personal information to provide you with the best possible training, coaching, and fitness community experience. This data includes:
Information You Provide Directly
- Contact Details: Name, email address, physical address, and phone number when you fill out a form or register interest.
- Account & Membership Data: Username, password, gym membership preferences, and class booking details.
- Health & Fitness Information: Physical Activity Readiness Questionnaires (PAR-Q), health conditions, injuries, goals, and nutrition notes shared with coaches to ensure safe training.
- Payment Details: Billing information and credit/debit card tokens processed securely via our third-party merchant partners (we do not store raw card data).
Information Collected
Automatically
- Usage & Device Data: IP addresses, browser types, operating systems, and page interactions tracked during your site visits.
- Cookies: Small text files used to remember preferences and track website performance.
3. How and Why We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your data for the following reasons:
- Contractual Necessity: To set up your gym account, manage your membership, and fulfill your class or PT bookings.
- Legal Obligation: To keep health records (PAR-Q forms) ensuring you can safely participate in CrossFit, HYROX, or conditioning classes.
- Legitimate Interests: To send you schedules, gym updates, feedback requests, and operational emails to improve our community.
- Consent: To send marketing newsletters or share social media photos/videos of group workouts (which you can opt out of at any time).
4. Who We Share Your Data With
We do not sell your personal data. To run our gym operations smoothly, we share data with trusted service providers:
- Gym Management Software: Platform providers used to handle member accounts, class timetables, and keyless gym check-ins.
- Payment Processors: Secure financial institutions that manage recurring membership billings.
- Marketing Tools: Communication platforms used to send gym newsletters and emergency facility alerts.
- Professional Coaches: Our certified internal trainers who require access to your fitness goals and injury limitations to program safely.
5. Data Retention
We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or health and safety reporting requirements.
- Active member data is kept for the duration of your membership.
- Inactive member data, inquiry logs, and PAR-Q forms are stored securely or safely destroyed after a statutory period, in accordance with UK insurance and health guidelines.
6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed in an unauthorised way. Access to your health and fitness data is strictly limited to coaches and staff who have a business need to know.
7. Your Legal Rights
Under UK data protection laws, you have specific rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct incomplete or inaccurate data.
- Erasure: Request that we delete your personal data (where legally permissible).
- Restriction: Object to or restrict the processing of your data.
- Data Portability: Request the transfer of your data to another organization.
- Withdraw Consent: Opt-out of any marketing or photography permissions previously granted.
To exercise any of these rights, please email us directly at info@elysium-edinburgh.com.
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
8. Third-Party Links
Our websites may include links to third-party social media pages (like Instagram and Facebook) or external payment portals. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
9. Changes to This Privacy Policy
We update this policy occasionally to match changes in our services or UK laws. Any changes will be posted on this page with an updated timestamp.
