Privacy notice for workplace members

DRAFT for legal review before go-live. This applies when you register for Collective's gym, classes or clinic through your employer.

Who we are

Collective Fitness ("Collective"), Dublin, Ireland, is the controller of the information you give us when you register. Contact: info@collectivefitness.ie.

What we collect

Your name, work email, phone number, team, emergency contact, induction bookings and attendance. We also collect your answers to our health and training questionnaire, which include health information.

Why, and on what basis

We use your contact details to run your membership and bookings (contract and legitimate interests). We use your health answers only to plan and supervise your training safely. For this we rely on your explicit consent under GDPR Article 9(2)(a), which you give when you register.

Who can see it

Only Collective's coaches and clinicians can see your health answers. Every time a staff member opens a health record it is logged. Your employer never sees your health information. We may tell your employer how many people have registered and attended, and we may share your name and induction time with their facilities team so you can get into the building.

How we protect it

Health answers are encrypted at rest. Access is limited to named, signed-in Collective staff. We don't sell your data or use it for advertising.

How long we keep it

We keep it for as long as you're a member, and delete it within 12 months of you leaving or your employer's contract with us ending, unless the law requires us to keep it longer.

Your rights

You can ask to see, correct or delete your information, or withdraw your consent, at any time. Email info@collectivefitness.ie. Withdrawing consent means we may not be able to coach you safely in the gym. You can also complain to the Data Protection Commission (dataprotection.ie).