Privacy & cookies
Your data, in plain English.
This explains what personal data Electrohiit collects through this booking site and the Electrohiit Live app, why, who helps us process it, and the choices you have.
Last updated 11 October 2026
01
Who we are
The data controller is ELECTROHIIT LTD (trading as Electrohiit), 17 The Row, New Ash Green, Longfield, Kent, DA3 8JB. For anything about your data, email info@electrohiit.com or use our contact page.
02
What we collect
- Account and contact details: name, email address and phone number (if you give it). We also keep a record of when you accepted membership or Live terms and any marketing choice you make.
- Bookings and payments: classes, PT sessions, events, open gym visits, memberships, packs, promo codes and waitlist places, plus payment amounts and Stripe references. Card details are entered on Stripe and never reach or get stored by us.
- Health and safety information: your PAR-Q health questionnaire answers, any medical notes, your emergency contact's name and phone number, and your signed declaration. For open gym, your waiver signature with the date, IP address and device/browser details, plus any issue or emergency reports.
- Electrohiit Live data: age, sex, height, weight, activity level, goals and a few safety flags (under 18, pregnancy, history of eating disorders) used to set your targets; workout and follow-along progress, sets and feedback; weigh-ins and body measurements; weekly check-ins, including optional progress photos that only you and your coach can see; and food logs and saved foods.
- Heart-rate workout data from Fittest: if you use Fittest in the studio, we link your Fittest account to your Electrohiit account by name and email and import your workouts (date, duration, calories, heart-rate zones, average and max heart rate, points) for your history and member leaderboards.
- Sign-in codes: when you sign in we email you a one-time code, which expires after 15 minutes.
- Push notifications: if you allow them, your browser's push subscription details, device/browser type and which reminders you want.
- Referrals: your referral code, who referred you and any rewards earned.
- Reviews you choose to leave (name, rating and comment).
- Website usage: only if you accept analytics cookies, Google Analytics measures pages visited and bookings completed. We never send your name, email or other contact details to Google.
03
Why we use it and our lawful basis
| What we do | Lawful basis |
|---|---|
| Create your account, sign you in, take bookings and payments, run memberships, PT and Live, and send service emails (confirmations, reminders, receipts, sign-in codes) | Contract |
| Keep payment and booking records for tax and accounting | Legal obligation |
| Health questionnaire, Live safety flags, body measurements and progress photos | Explicit consent (see section 4), plus contract |
| Emergency contact details and incident reports | Legitimate interests (keeping you safe), and vital interests in an emergency |
| Open gym waiver records, studio security, fraud prevention and keeping the site working | Legitimate interests |
| Importing Fittest workouts and showing member leaderboards | Contract (part of the service) and legitimate interests |
| Push notifications | Consent, which you can turn off in your browser or account at any time |
| Marketing emails about events and offers (only if you opt in) | Consent |
| Crediting referrals | Legitimate interests |
| Google Analytics | Consent (cookie banner) |
04
Health information
Your PAR-Q answers, medical notes, Live safety flags, body measurements and progress photos are special category (health) data. We use them only to train you safely and to tailor your programme. Our lawful basis is your explicit consent, which you give when you submit the questionnaire or enter the information. We also need it to provide the service under our contract with you.
Only Electrohiit coaches can see it. You can withdraw consent at any time by emailing info@electrohiit.com. If you do, we may not be able to offer you some sessions safely.
06
International transfers
Some providers (including Stripe, Google, Resend and Railway) may process data outside the UK, for example in the USA or EU. Where they do, the transfer is protected by safeguards recognised under UK law, such as the UK–US data bridge, UK adequacy regulations or the UK International Data Transfer Agreement/Addendum.
07
How long we keep it
- Account, health, Live and workout data: while your account is active, or until you ask us to delete it.
- Payment and booking records: 6 years, as needed for tax and accounting. If you ask for deletion, these are anonymised so they no longer identify you.
- Sign-in codes: 15 minutes.
- Backups: we take a daily backup of the database, and each backup is deleted after 30 days. Deleted data drops out of backups within that time.
08
Your rights
Under UK GDPR you have the right to:
- Access a copy of your data
- Rectification of anything that's wrong
- Erasure of your data
- Restrict how we use it
- Object to processing based on legitimate interests, and to marketing at any time
- Portability: get your data in a machine-readable format
- Withdraw consent at any time, without affecting what we did before
Do it yourself: sign in and go to My account, then under Your data: Download my data gives you everything we hold about you as a JSON file, and Request deletion sends a deletion request to us. We confirm by email and delete your personal data once any active subscription has ended. Booking and payment records are kept anonymised for our accounts.
For anything else, email info@electrohiit.com. We'll reply within one month.
10
Complaints
If you're unhappy with how we've handled your data, please contact us first at info@electrohiit.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
We may update this policy. The date at the top shows the latest version.
electrohiit.com · Electrohiit · New Ash Green, Kent · ELECTROHIIT LTD
