This Privacy Statement describes how we collect, use and process personal data, and how, in doing so, we comply with our legal obligations. This Privacy Statement applies to the personal data of our website users, customers, suppliers and other people and organisations whom we may contact digitally to find out more about users of our services or whom they indicate is an emergency contact. It also applies to the emergency contacts of GYM MONKEE LTD.
This Privacy Statement applies in relevant countries throughout our international network. Different countries may approach data privacy in slightly diverse ways. GYM MONKEE LTD. wishes to ensure that it is compliant with all applicable data privacy protections, no matter where you are.
It is very important you read the statement carefully to understand our views and practices regarding the processing of personal information and how GYM MONKEE LTD. will treat it. By visiting the GYM MONKEE LTD. website and/or providing your information to us via use of any of our services, you are accepting and consenting to the practices described in this statement.
If you do not agree with any of the content of this statement: please do not use the GYM MONKEE LTD. services or this website.
Your Privacy Matters
Your privacy is important to us, and GYM MONKEE LTD. is committed to protecting the rights and freedoms of data subjects and safely and securely processing their data in accordance with all its legal obligations and it values your right to control what personal information is collected about you and how this information is used.
While information is the foundation for providing you with superior service, protecting the privacy of your personal information is of highest importance to us. GYM MONKEE LTD. believes that responsible stewardship of the information entrusted to us is crucial in developing and maintaining the public trust essential for our continued success. All information supplied by you to the GYM MONKEE LTD. service will be used and protected by us in accordance with current applicable data protection law and this Privacy Statement.
The Data Protection Principles We Work To
GYM MONKEE LTD. seeks to comply with the principles of data protection (the Principles) enumerated in the EU General Data Protection Regulation and makes every effort possible in all that we do to do so. The Principles are:
- Lawful, fair and transparent; data collection must be fair, for a legal purpose and we must be open and transparent as to how the data will be used.
- Limited for its purpose; data will only be collected for a specific purpose.
- Data minimisation; any data collected must be necessary and not excessive for its purpose.
- Accurate; the data we hold must be accurate and kept up to date.
- Retention; we will not store data longer than necessary.
- Integrity and confidentiality; the data we hold will be kept safe and secure.
Who We Are
GYM MONKEE LTD. is responsible for the processing of any personal information you provide to it while using its services to engage with you. The Gym Monkee team have completed the registration self-assessment on the ICO website (https://ico.org.uk/for-organisations/register/self-assessment/) and considering that we are only processing personal data for the core business purposes, we do not have to register with the ICO.
What We Do
GYM MONKEE LTD. provides a wide range of gym and fitness clothing products through its website: https://gymmonkee.co.uk/
What Kind of Personal Data Do We Collect?
WE DO NOT STORE CREDIT CARD DETAILS AND WE ONLY SHARE CUSTOMER DETAILS WITH THIRD PARTIES IN A SECURE WAY.
The information we collect via this website may include:
- Personal details that you type in and submit to us, such as name, address, email address, age, date of birth and gender;
- Your correspondence and communications with us;
- We collect a limited amount of data from our website users which we use to help us to improve your experience when using our website and to help us manage the services we provide. This includes information such as how you use our website, the frequency with which you access our website, your browser type, the location you view our website from, the language you choose to view it in and the times that our website is most popular. If you contact us via the website, for example by using the contact form function, we will collect any information that you provide to us, for example your name and contact details. Information about your use of our website and your IP address is transmitted to Google Inc and is used by us to evaluate use of our website, compile statistical reports on activity on our website and create profiles of aggregated visitors using Google Analytics demographics. Most web browsers can be set to prevent you from receiving new cookies, notify you before accepting cookies or disable cookies altogether. Details about this can normally be found in the Help facility provided with your browser. If you disable cookies, you will not be able to receive personalised facilities and your progress to check out may take longer. To opt out of being tracked by Google Analytics please visit https://tools.google.com/dlpage/gaoptout
- Your IP address (this is your computer’s individual identification number) which is automatically logged by our web server. This is used to note your interest in our website.
- Your preferences and use of email updates, recorded by emails we send you (if you select to receive email updates on products and offers).
- We use Facebook, Instagram and Google to advertise GYM MONKEE LTD. products and services. Our retargeting will display relevant ads tailored to you based on areas of the website that you have visited, by placing a cookie on your device. This cookie does not give us access to your device. The cookie is used to allow us to identify whether an individual has visited a page and if so, show them related advertisements. Retargeting allows us to tailor our marketing to better suit your needs and only display ads that are relevant to you.
How Do We Safeguard Your Data?
We are committed to taking all reasonable and appropriate steps to protect the personal information that we hold from misuse, loss, or unauthorised access. We do this by having in place a range of appropriate technical and organisational measures. These include measures to deal with any suspected data breach. If you suspect any misuse or loss of or unauthorised access to your personal information, please let us know immediately. Details of how to contact us can be found in this statement.
Our Legal Bases for Processing Your Data
Article 6(1)(f) of the GDPR is the one that is relevant here – it says that we can process your data where it “is necessary for the purposes of the legitimate interests pursued by [us] or by a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of [you] which require protection of personal data.” However, you do have the right to object to us processing your personal data on this basis. We have our own obligations under the law, which it is a legitimate interest of ours to insist on meeting! If we believe in good faith that it is necessary, we may therefore share your data in connection with crime detection, tax collection or actual or anticipated litigation.
In certain circumstances, we are required to obtain your consent to the processing of your personal data in relation to certain activities. Depending on exactly what we are doing with your information, this consent will be opt-in consent or soft opt-in consent. Article 4(11) of the GDPR states that (opt-in) consent is “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.” In plain language, this means that:
- you must give us your consent freely, without us putting you under any type of pressure;
- you must know what you are consenting to – so we’ll make sure we give you enough information;
- you should have control over which processing activities you consent to and which you don’t. We provide these finer controls within our privacy preference centre; and
- you need to take positive and affirmative action in giving us your consent – we’re likely to provide a tick box for you to check so that this requirement is met in a clear and unambiguous fashion.
We will keep records of the consents that you have given in this way.
We have already mentioned that, in some cases, we will be able to rely on soft opt-in consent. We can market products or services to you which are related to the recruitment services we provide if you do not actively opt-out from these communications. Please note that in certain of the jurisdictions in which we operate, we comply with additional local law requirements regarding consenting to receive marketing materials. As we have mentioned, you have the right to withdraw your consent to these activities. You can do so at any time by contacting us.
ESTABLISHING, EXERCISING OR DEFENDING LEGAL CLAIMS
Sometimes it may be necessary for us to process personal data and, where appropriate and in accordance with local laws and requirements, sensitive personal data in connection with exercising or defending legal claims. Article 9(2)(f) of the GDPR allows this where the processing “is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity”. This may arise for example where we need to take legal advice in relation to legal proceedings or are required by law to preserve or disclose certain information as part of the legal process.
GYM MONKEE LTD. have an obligation to report actual or potential data protection compliance failures. This allows us to investigate the failure and take remedial steps (if necessary), maintain a register of compliance failures and notify the relevant supervisory authority of any compliance failures that are material either or, as part of any pattern of failures.
How to Contact Us
The GYM MONKEE LTD. Data Protection Officer has overall responsibility for the day-to-day implementation of this privacy statement if, at any time, you:
- wish to access, amend or take back the personal data that you have given to us;
- suspect any misuse or loss of or unauthorised access to your personal information;
- wish to withdraw your consent to the processing of your personal data (where consent is the legal basis on which we process your personal data);
- want to make a complaint on how GYM MONKEE LTD. has handled your personal data.
You can write to us at the following address:
GYM MONKEE LTD., Ashford House 11 Lawrence Close, Kingswood, Bristol, BS15 4AH
Alternatively, you can send an email to: firstname.lastname@example.org
GYM MONKEE LTD. takes complaints very seriously and will respond to complaints within 30 days.
Updated: 1st May 2018