Legal
Data processing
Effective date:
April 2026
Introduction
Data Processing Policy
Last Updated: 7 July 2026
This Data Processing Policy explains, in more detail, how 7R Performance Ltd, trading as CrossFit Woolwich / 7R The Training Club ("we", "our", "us"), processes your personal data as a "data controller" under the UK GDPR. It should be read alongside our Privacy Policy, Terms of Service, and Cookies Policy.
1. What "Processing" Means
"Processing" covers anything we do with your personal data — collecting, storing, organising, using, sharing, and eventually deleting it. This policy sets out the categories of data we process, why, who we share it with, and how long we keep it.
2. Categories of Data We Process
Category | Examples |
|---|---|
Identity data | Name, date of birth (where relevant to age verification) |
Contact data | Email address, phone number, address |
Membership data | Membership type, attendance, class bookings, performance/log book entries |
Health data | PAR-Q/health screening responses, injury or medical information you disclose |
Financial data | Payment history, billing details (full card data is processed by our payment provider, not stored by us) |
Emergency contact data | Name and phone number of your nominated emergency contact |
Technical data | IP address, browser/device information, cookie identifiers |
Marketing data | Your marketing preferences and consent history |
3. Purposes and Legal Basis for Processing
Purpose | Legal basis |
|---|---|
Managing your membership and delivering coaching services | Performance of a contract |
Assessing your fitness to train safely | Explicit consent / vital interests (special category data) |
Contacting your emergency contact in a safety situation | Vital interests |
Processing membership payments | Performance of a contract |
Responding to enquiries | Legitimate interests |
Sending marketing communications | Consent |
Website analytics and advertising | Consent (cookies) |
Maintaining safety and security via CCTV | Legitimate interests |
Complying with tax, accounting and legal obligations | Legal obligation |
4. Who Processes Your Data
Some of your data is processed on our behalf by third-party processors, who act under our instructions and are contractually required to protect your data. These currently include:
Wodify — our gym management and booking platform, used to store membership, attendance and log book data
Our payment provider — used to process membership payments (we don't store full card details)
Google (Google Analytics) — used for website analytics, with your consent
Meta — used for advertising measurement via Meta Pixel, with your consent
Website hosting/builder provider — used to host and operate 7r-gym.com
We remain responsible as the data controller for how your data is used, even where a processor stores or handles it on our behalf.
5. International Transfers
Some of our processors (for example, global providers such as Google or Meta) may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or an equivalent mechanism recognised under UK data protection law.
6. Automated Decision-Making
We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you.
7. Data Retention
We only keep your data for as long as necessary for the purposes it was collected. See our Privacy Policy, Section 8, for specific retention periods (for example, membership/financial records for 6 years, health screening data for the duration of membership plus 5 years, and CCTV footage for 30 days).
8. Security Measures
We use appropriate technical and organisational measures to protect your data, including access controls limiting staff access to personal data on a need-to-know basis, secure storage via our platform providers, and regular review of the third parties we work with.
9. Your Rights
You have the right to access, correct, delete, or restrict our processing of your data, to object to certain processing, and to request data portability where applicable. See our Privacy Policy, Section 11, for full details on how to exercise these rights and how to complain to the ICO.
10. Changes to This Policy
We may update this Data Processing Policy from time to time to reflect changes in how we process data or in legal requirements. The "Last Updated" date will reflect the latest version.
11. Contact Us
If you have any questions about this Data Processing Policy, please contact:
7R Performance Ltd
Email: hello@7r-gym.com
Website: 7r-gym.com
