PRIVACY NOTICE

Last updated – August 2024

Hello

We are JD Sports Gyms Limited (JD Gyms/we/us). We operate a network of gyms across the United Kingdom and we are part of the JD Sports group of companies, owned by JD Sports Fashion plc. We offer gym memberships as well as related products and services online and at our gym facilities. When you use our website or app, or when you visit one of our gyms, you give us some information about yourself which we then use. We’d like to tell you about what information you give us and how we use it. If you have any questions, you can email us at [email protected]

Before we go on, please bear in mind that our website and app may contain links to the websites of other companies that are not part of the JD Sports Fashion Plc group of companies. If you follow a link to any of these websites, please remember that they will have their own privacy information for you to look at and we’re not responsible for how they use your information.

What information do we collect?

Online:

your contact details (name, email address, date of birth, postal address, and telephone number)
billing and payment information (where you buy products and services)
information about your membership, orders, the purchases you make, your saved items, your payment methods, shopping preferences and any other information that you add when making an order
information you put into forms which are then sent to our Contact Centre if you choose to upgrade or cancel your membership
information about the type of device, operating system and browser you use when on our website or app
Internet Protocol (IP) address used to connect your device to the internet
what products and pages you look at on our website and app, your mouse clicks, mouse movements, scrolling of pages and the text that you key into forms on our websites
your interest in new soon to be opened gyms, where you have asked to be kept informed
your marketing preferences and limited information about how you interact with our marketing emails, see our cookies policy for further information on this
MAC addresses, traffic data, location data, your login information, time-zone setting browser type and version, browser plug-in types and versions, operating system and platform, weblogs, cookies and other communication data, and the resources that you access. For more information please see our cookies policy https://www.jdsports.co.uk/page/cookies/

In our gyms:

billing information and payment method (where you buy products and services)
Information about the purchases you make
your image on our CCTV or body worn cameras
your image and/or voice where you have agreed to participate in photos, videos or social
media posts within the gym or at gym events
a record of your visit each time you scan your member QR to gain access (date and time of
entry and location of the gym)
the vehicle registration number for vehicles that you park on car parks used by JD Gyms, when
you add your registration number on our system upon arrival
information that you provide in a witness statement or Accident Book entry where you have
suffered an injury in the gym or have witnessed an accident
information about your booking when you arrange a session with a Personal Trainer

Other places:

information about any complaints, queries, rights requests and comments that you make and
details of our interactions
notes of our conversations with you and details of your query and from time to time we may
record your calls for training and monitoring purposes
information you add to forms (e.g. contact forms or competition entry forms)
If you wish to provide it and where we make it available, information to confirm your eligibility
as a member of a group which may qualify for discounts or other benefits – subject to terms
and conditions
information about yourself that you publish on social media or provide to social media
platforms, including where you tag us, and the content of any messages that you send to us
on our social media channels
information about you from third parties, including other companies e.g. brand partners,
companies within the JD Sports group of companies, retail analytics companies, consumer
insight companies, credit reference agencies, social media platforms, identity attribute
verifiers, and other publicly available sources
information about you when you decide to take part in promotions, surveys and loyalty
programmes
other information about you from publicly available sources to assist us with understanding
customer demographics and shopper behaviours
when you link your Facebook, Instagram, TikTok or X accounts with us
other businesses where we merge with or otherwise acquire another business

Please see our cookies policy for further information about what information may be automatically collected when you visit our websites https://www.jdsports.co.uk/page/cookies/

Why do we collect it?

to provide you with the products and services that you have purchased from us and any receipts of purchase, to deliver products and to administer your account/membership as applicable;
to take payments for the products and services that you have purchased and to give refunds or exchanges;
to provide customer service and support to you;
to process complaints/queries;
to develop and improve our products and services;
to create and provide you with marketing communications
to develop and improve our website and app and set default options for you (such as language and currency) and to ensure that content is presented in the most effective manner;
to provide you with information that you request from us or which we feel may interest you. We may send you marketing information by email, SMS or post. This can include information about new products, services and offers that you may find interesting;
to research our customers’ preferences and trending products;
to run surveys and competitions;
to notify you about changes to our products;
as part of our efforts to keep our gyms safe and secure (for example through the use of CCTV);
to prevent and detect fraud and crime (for example, through the use of CCTV)
to manage our car parks and other facilities
to communicate with you about new, soon to opened gyms
to enable you to enter our gyms and enable us to retain a record of your visits, analyse our customers’ use of gym facilities and compile data on the average number of monthly visits
to investigate accidents and comply with our legal obligations including obligations under health and safety law
to enable you to arrange sessions with our Personal Trainers
to send you service messages
to process requests by you to upgrade or cancel your membership

From time to time, we will combine personal data that we receive from different sources with personal data you give to us for the above purposes.

What automated decisions do we make about you?

We use some of the information about you to build a picture of you (‘profiling’). This is for the purposes of improving and developing our products and services and to help us to tailor our marketing to you. We use information that we learn about you such as your gender, preferences, hobbies, interests, purchase history and how you react to the marketing we send you to make sure the marketing you receive from us, and the way our websites and mobile apps are displayed to you, are appropriate and tailored to you.

Category	Content
Compliance with legal obligations	We must comply with the law. This requires us to use your data to verify your identity and to prevent fraud and other types of crime. If you choose not to give us certain information when signing up for an account and when using our websites and mobile apps, we may not be able to sell you our products or provide our other services
Necessary for the entry into or performance of a contract with you	When you buy our products or services, you enter a contract with us. To fulfil our obligations under the contract (e.g. to allow you access to services, place an order and receive products from us), we will process your personal information. If you do not provide the information we need or if you ask us to delete this information, it may mean we cannot sell you our products and services
Legitimate business interests	We use your personal data for the following, which we do because they are in the legitimate interests of our business: Providing you with products and services you want and developing and improving our products and services Researching and understanding our customers and how they buy and use our products and services Offering promotions and loyalty programmes, including jointly with select brand partners Passing your data to other companies within the JD Group and to selected third parties including brand partners Managing your account and running our website and app Updating our website and app Enforcing or applying rights under any contract between us Ensuring the health and safety of our customers and the security of our data and property Preventing and detecting fraud and other crimes Where necessary, when merging with or acquiring another business or re-organising our business, your information may be shared with a prospective buyer or otherwise but only so far as is strictly necessary Sending you marketing communications where you have not unsubscribed… Although you also benefit from many of the above activities, we are required to carry out a balancing test of our legitimate business interests to ensure that the way we use your data for these purposes does not unreasonably intrude on your rights under data protection law. We are satisfied that processing of your data for these purposes does not unreasonably intrude upon your privacy and that we can therefore reasonably rely on legitimate interests as our basis for the above-mentioned processing activities.
Consent	You will also receive marketing communications where you have consented to them. You have the right to withdraw your consent at any time by updating your marketing preferences in your account, using the settings in your mobile device (where applicable) and/or contacting our data protection team using the details below. Marketing. We always give you the choice of whether or not you wish to receive marketing communications from us (for example by providing opportunities to opt-out of receiving marketing from us). We may rely on your consent or our legitimate interests to process your data for marketing purposes, as explained above. From time to time we may take photos, videos or create social media posts for marketing purposes. If you are features in our photos, videos or social media posts, we will only do this with your consent. By contacting us at [email protected], you can tell us that you do not wish to receive marketing communications from us and we will update your records. You can also click on the unsubscribe link in any promotional emails.

Who do we share it with?

We do not, and will not, sell any of your information to any third party, including your name, address, email address or credit card information. However, we do share your information with some select trusted third parties to enable us to provide our products and services to you, to send marketing information and to improve our business as set out below.

Category	Content
Other members of the JD Group	For group analysis and business purposes, to improve our products and services.
Carefully selected third parties including brand partners	To help us to provide you with products, services and to market to you Companies that do things to get your purchases to you, such as payment service providers, warehouses, order packers and delivery companies Our trusted service providers, such as marketing agencies, advertising partners, website and app hosts and other third parties who provide services to help us to tailor our marketing to you. In some instances, these companies will use your personal data to produce anonymised and aggregated information for their own purposes Our brand partners and trusted third parties to run collaborative promotions, member programmes, competitions, to improve our business and the products and services we provide to you. If you are a competition winner, we may share your data with the brand partner or trusted third party so they can contact you to deliver the prize to you. Credit reference agencies, law enforcement and fraud prevention agencies Companies approved by you, such as social media sites, including companies such as Facebook and Google; Learn more about how Google uses your personal data here https://policies.google.com/technologies/partner-sites Companies that provide services which enable us to verify whether you are eligible for a discount on purchases due to being a member of a qualifying group We will only share your information with third party suppliers where it is necessary for them to provide us with the services we need We may provide third parties with aggregated but anonymised information and analytics about our customers and, before we do so, we will make sure that it does not identify you.
Other companies	In connection with any merger, acquisition, insolvency situation or otherwise, in which case we will only disclose your information so far as is necessary
Other third parties	To comply with a legal or regulatory obligation, or if necessary for legal proceedings To manage our car parks or other premises

Where do we store it and how long for?

Sometimes, the information we collect about you will be transferred outside the UK and the European Economic Area but only where we have taken steps to give it extra protections that are required by the law. Depending on where we are sending your information, this may include using some extra protections called Standard Contractual Clauses, the UK Addendum or UK International Data Transfer Agreement. These are additional safeguards that we put into our agreements with the companies that we give your data to. We can give you more information about these added protections if you want it. Just ask us using the contact info below.

We will only keep your information for as long as is necessary to do the things that we collected it for (the things we’ve set out in this privacy notice) unless the law requires us to keep it longer. We typically keep your personal data for 6 years from the date we collect it. This usually allows us to deal with any issues or concerns you may have about the products or services you have received, and for other legal reasons such as if we need to keep your information to bring or defend legal proceedings etc.

In some circumstances, some of your data will be deleted in much shorter timescales, for example:

Cookies – deleted in accordance with our cookies policy
CCTV images – deleted after 30 days

If reasonably necessary or required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions or other legal rights, we will also keep hold of some of your information, even if it is no longer needed to provide our services to you.

How do we keep it safe?

Using the internet to send information can never be completely and utterly secure. We will always do our best to protect your data, but we cannot guarantee the security of your data that you send to our websites and mobile apps. You send it at your own risk.

Once we have received your information, we will use strict procedures and security features to try and keep it safe.

What rights do you have?

to request access to your personal data (‘Subject Access Request’)
to ask us to restrict the processing of your personal data
to ask us to erase your personal data (‘right to be forgotten’)
to object to our processing of your personal data
to move your personal data to another Data Controller
to withdraw your consent
to not be subject to automated decisions
to complain to the Supervisory Authority (see below)
to ask us to rectify your personal data

You may contact us using the details below if you wish to exercise any of these rights. In some cases, we won’t be able to carry out your request, in which case we will contact you to explain why.

Privacy Request Form

Our contact info

[email protected] / JD Sports Fashion Group plc, Hollinsbrook Way, Pilsworth, Bury, Lancashire, BL9 8RR, United Kingdom / Customer Contact Centre Number: 01942 914 914

What if you have a complaint?

If you have any concerns regarding our processing of your personal data or if you are not satisfied with our handling of any request made by you, or would otherwise like to make a complaint, please contact us using the details below and we will do our very best to sort out the problem.

If you are still unhappy after speaking with us, you can also contact the Information Commissioner’s Office at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, www.ico.org.uk