Privacy
policy.

Last updated: 3 October 2026

1. Who we are

House of Gainz Gym is the trading name of House of Iron Paradise Ltd, registered in England and Wales under company number 15774509. Our registered office is 25–29 Sandy Way, Yeadon, Leeds LS19 7EW and our gym is at St Catherines Mill, Broad Lane, Bramley, Leeds LS13 2TD.

House of Iron Paradise Ltd is the controller of the personal information described in this notice. Contact us at info@gainzstation.com, call 0113 468 9161, or write to the gym address above.

2. Information we collect

• Identity and contact details, including your name, date of birth, postal address, email address and telephone number.
• For applicants aged 16 or 17, parent or legal guardian identity and contact details, consent records and details of the required in-person meeting.
• Membership and application details, including your chosen plan, student eligibility, membership status and communications with us.
• Payment and transaction information. Payments may be handled by ClubRight or another payment provider; we do not normally receive full payment-card details.
• Facility and security information, including entry records, incident records and CCTV images.
• PAR-Q responses and other medical, health, injury, accessibility or emergency information supplied through ClubRight or directly to the gym. This may be special-category personal data and is handled with additional care.
• Marketing preferences and newsletter activity.
• Technical, advertising and usage information, including IP address, browser/device data, page visits, referral information and selected website interactions where permitted by your cookie choices.

3. How and why we use it

• Membership applications and administration: to assess applications, apply age and access restrictions, obtain and record parent or guardian involvement where required, create and manage memberships, provide access and communicate about your membership. This is necessary to take steps at your request and perform our contract with you.
• Payments and records: to administer fees and maintain tax and accounting records. We rely on contract and legal obligations.
• Safety and security: to operate CCTV and access controls, protect members, staff, premises and equipment, manage incidents and prevent or detect misuse and crime. We rely on legitimate interests, legal obligations and, where appropriate, vital interests.
• PAR-Q, medical and accessibility information: to assess participation information, support safe gym use, respond to emergencies and make reasonable adjustments. Where required for special-category data, we rely on an appropriate additional condition such as explicit consent, vital interests or the establishment, exercise or defence of legal claims.
• Enquiries: to respond to questions and provide requested information. We rely on steps at your request and legitimate interests.
• Newsletter and marketing: to send optional news and offers where you have actively subscribed or another lawful permission applies. You can unsubscribe at any time.
• Website measurement and advertising: with your consent, to use Google Analytics and the Meta Pixel to understand website use, measure membership enquiries and advertising performance, and improve our campaigns. You can withdraw this consent through Cookie settings.
• Website operation and improvement: to secure the website and remember privacy choices.
• Legal matters: to establish, exercise or defend legal claims and comply with legal or regulatory requirements.

4. Who we share information with

We share only what is reasonably needed with service providers and advisers supporting the gym. ClubRight processes membership, PAR-Q, medical and related administration data on our behalf. Other recipients may include Brevo for newsletter subscriptions, payment providers, website and email hosting providers, Google where analytics or reCAPTCHA services are used, Meta where you consent to advertising measurement through the Meta Pixel, CCTV or access-control suppliers, IT/security suppliers, accountants, insurers and professional advisers.

We may also disclose information where required by law, to emergency services, regulators, courts, law-enforcement bodies, or in connection with a business sale or reorganisation. We do not sell personal information.

5. International transfers

Some providers may process information outside the United Kingdom. Where this happens, we require an appropriate legal safeguard, such as UK adequacy regulations, an approved transfer agreement or contractual safeguards, together with any additional measures required by law.

6. How long we keep information

We keep information only for as long as needed for the purpose collected and to meet legal, accounting, safety and dispute-resolution requirements. As a general guide:

• Unsuccessful or incomplete membership applications are normally retained for up to six months, unless needed for an ongoing enquiry or claim.
• Membership, contract, parent or guardian consent, PAR-Q and payment records held through ClubRight or by the gym may be retained for the duration of membership and afterwards where required for legal, safety, insurance, accounting or dispute-resolution purposes.
• General enquiries are normally retained for up to two years.
• Newsletter details are kept until you unsubscribe or the list is cleaned following prolonged inactivity.
• CCTV footage is normally retained for approximately 14 days and is then overwritten, unless footage must be preserved for a specific security incident, investigation, legal matter or insurance claim. Related access and incident records may be kept longer where reasonably necessary.
• Analytics information follows the periods described in our cookie policy.

7. Your rights

Depending on the circumstances, you may have the right to access your information, correct it, ask for deletion or restriction, object to processing, receive certain information in a portable format and withdraw consent. Withdrawing consent does not affect processing already carried out lawfully.

To exercise a right, email info@gainzstation.com. We may need to confirm your identity. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, although we would appreciate the opportunity to resolve the issue first.

8. Children

Full-access membership is restricted to people aged 18 or over. Eligible members aged 16 or 17 are restricted to attending during published staffed hours and require parent or legal guardian consent plus an in-person meeting before membership is activated. We collect the parent or guardian details needed to arrange and document that process. We do not knowingly offer membership to anyone under 16.

9. Security

We use reasonable technical and organisational measures to protect personal information. No website, email system or storage method can be guaranteed completely secure, so please avoid sending unnecessary sensitive information by email.

10. Cookies and linked services

Our cookie policy explains website storage, analytics and marketing choices, including Google Analytics and the Meta Pixel. Links to ClubRight, Google Maps and other external services lead to websites controlled by those providers and covered by their own privacy information.

11. Changes

We may update this notice when our services, providers or legal obligations change. The latest version will be published here with a revised date.