Skip to main content
Home
Sign In

HWBOD+
Privacy Policy



Last updated: 29/05/2026


This policy explains what personal information we collect about you, why, how we use and protect it, and the rights you have. It applies to members, prospective members, coaching clients, and visitors to our gym, website and app.


1. Who we are

High Performance Human Ltd ("we", "us", "our"), trading as HWBOD+, is the data controller responsible for your personal information. We are registered in England and Wales under company number 16701003.


  • Trading address: Building 12, Parc Dewi Sant, Job's Well Road, Carmarthen, SA31 3HB

  • Registered office: 52 Goetre Fawr Road, Killay, Swansea, SA2 7QU

  • Email: info@hwbodgym.com

  • Phone: 07961 727778

  • ICO registration number: ZC080728


If you have any questions about this policy or your data, contact us using the details above.


2. The information we collect

Depending on how you interact with us, we may collect:


Information you give us


  • Your name, date of birth, email address, phone number and home address.

  • Emergency contact details.

  • Payment information — collected and processed by our payment providers (ClubRight for memberships; Stripe for The Method). We don't store full card or bank details ourselves.

  • Health information — answers to health questionnaires (PAR-Q), and any medical conditions, injuries, pregnancy or medications you tell us about. This is "special category" data and we treat it with extra care (see section 4).

  • Information you give when you fill in our enquiry, onboarding or sign-up forms (including via Typeform), book a class, or message us.

  • Coaching information — for Method and coaching clients, your goals, training and nutrition details, check-ins, photos you choose to send us, and progress notes.


Information we collect automatically


  • Attendance and check-in records (including when you enter using your app QR code), class bookings, and your use of the gym and app.

  • Website and app usage data and cookies (see section 9).


Photos and video


  • Marketing photos and video taken in the gym, which may include members (see our Terms & Conditions, and section 4 below).


3. How we collect it

We collect information when you: make an enquiry; sign up for membership or coaching; complete a form (online, in the app, or on paper); use the gym, app or website; communicate with us; or take part in our content.


4. Why we use your information, and our legal basis

Under data protection law we must have a lawful basis for using your information. We rely on the following:


What we use it for

Lawful basis

Setting up and managing your membership or coaching, taking payment, providing access, bookings and support

Performance of our contract with you

Keeping records, managing our accounts, meeting tax and other legal duties

Legal obligation

Keeping the gym safe and secure, improving our services, dealing with complaints, and protecting our business

Our legitimate interests (balanced against your rights)

Sending you marketing (email, SMS or app messages about offers, classes and content)

Your consent, which you can withdraw at any time

Using health information to help keep you safe and tailor your training/coaching

Your explicit consent, and where needed to protect your vital interests in an emergency

Featuring you as the focus of marketing photos/video

Your consent (incidental background footage is covered by our legitimate interest and the approach set out in our Terms)


You can withdraw any consent at any time — see section 7.


5. Who we share it with

We do not sell your personal information. We share it only with:


  • Our service providers ("processors") who help us run the business, including:

    • ClubRight — our membership management, booking and payment platform.

    • Stripe — payment processing for The Method.

    • Mailchimp — email marketing.

    • Wix — our website and contact form.

    • Typeform — enquiry and onboarding forms.

    • Our accountant/bookkeeper, and IT providers. These providers act on our instructions and are only allowed to use your data to provide their service to us.

  • Professional advisers (e.g. legal, accounting) where reasonably needed.

  • Authorities or regulators where we're legally required to, or to protect someone's safety.

  • A buyer if we ever sell or restructure the business (your data would stay protected by this policy).


6. Sending information outside the UK

Some of our providers (for example Mailchimp, Stripe and Typeform, which are US-based) may store or process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK "adequacy" arrangements or standard contractual clauses approved for UK transfers, so your data stays protected to the same standard.


7. Your rights

You have the right to:


  • Access the personal information we hold about you.

  • Correct information that is wrong or incomplete.

  • Erase your information ("right to be forgotten") in certain circumstances.

  • Restrict or object to how we use it in certain circumstances.

  • Data portability — receive certain data in a reusable format.

  • Withdraw consent at any time (e.g. unsubscribe from marketing) — this won't affect anything we did beforehand.


To exercise any of these, contact us using the details in section 1. We'll respond within one month. There's normally no charge.


You can unsubscribe from marketing emails at any time using the link in the email, or by telling us.


8. How long we keep your information

We keep your information only as long as we need it:


  • Membership and contact details: for the life of your membership and for 6 years afterwards (to meet legal, tax and accounting requirements and handle any disputes).

  • Health questionnaires: for the duration of your membership and a reasonable period after, then securely deleted.

  • Marketing consent records: until you withdraw consent, then a short record that you opted out.

  • Payment records: as required by tax law (usually 6 years).


After these periods we securely delete or anonymise your information.


9. Cookies

Our website uses cookies and similar technologies to make it work and to understand how it's used. You can manage your choices through the cookie banner on our site, see our separate Cookie Policy at [link], and control cookies through your browser settings.


10. Keeping your information secure

We use appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access — including restricting staff access to only what they need, and using reputable, secure providers. No system is ever completely secure, but we take this seriously and will tell you and the ICO about a serious data breach where the law requires it.


11. Children

We do not offer membership to anyone under 16. Where we hold information about members aged 16–17, we also process the contact details of their parent or guardian, who consents on their behalf.


12. Changes to this policy

We may update this policy from time to time. The latest version will always be on our website with the date it was last updated. If we make a significant change, we'll let you know by email or through the app.


13. How to complain

If you're unhappy with how we've handled your information, please tell us first so we can put it right.


You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:


  • Website: ico.org.uk

Helpline: 0303 123 1113