Elev8 Journeys
Become a Member

Privacy Policy​

Privacy Policy

Elev8 Journeys Limited - 16654902

Last Updated: September 2025

  1. 1. INTRODUCTION

    Elev8 Journeys Limited (“we,” “us,” “our”) is committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, app, or website.

    Company Details:
    – Company Name: Elev8 Journeys Limited
    – Registration Number: 16654902
    – Address: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE
    – Contact: Craig Jenkinson, Managing Director

    2. LEGAL BASIS FOR PROCESSING

    We process your personal data under the following legal bases:
    – Consent: For marketing communications and non-essential processing
    – Contract Performance: To provide our fitness and nutrition services
    – Legitimate Interest: For business operations and service improvement
    – Legal Obligation: For health and safety requirements

    3. DATA WE COLLECT

    Personal Information:
    – Name, address, phone number, email address
    – Date of birth, gender, emergency contact details
    – Payment information (processed securely via Stripe)

    Health & Fitness Data:
    – Medical history and health conditions
    – Current medications and doctor’s advice regarding physical activity
    – Physical measurements, progress photos, and transformation videos
    – Workout performance and nutrition tracking data
    – Dietary requirements, allergies, and eating disorders history
    – Physical limitations and injury history

    Technical Data:
    – Elev8 Nutrition App usage data and preferences
    – Website cookies and analytics
    – Communication records (email, WhatsApp, phone)
    – Social media interactions

    4. HOW WE USE YOUR DATA

    We use your personal data to:
    – Provide personalized fitness and nutrition programs
    – Process payments and manage subscription tiers (Bronze, Silver, Gold, Journeys, Platinum)
    – Monitor your progress and adjust 12-week transformation programs
    – Ensure health and safety compliance during boxing and fitness sessions
    – Communicate about your journey, milestones, and services
    – Create success stories and testimonials (with explicit consent)
    – Film transformation journeys for social media content (Journeys package only)
    – Improve our services and app functionality
    – Send marketing communications (with consent)
    – Provide emergency assistance when required

    5. DATA SHARING

    We may share your data with:
    – Our coaching team and nutritionist (for service delivery)
    – Payment processors (Stripe) for secure transactions
    – Emergency services and your emergency contacts (if required for safety)
    – Social media platforms (for success stories with explicit consent)
    – Legal authorities (if legally required)

    We will NEVER sell your personal data to third parties.

    6. SPECIAL CATEGORY DATA (HEALTH DATA)

    We process health data under Article 9 of GDPR for:
    – Provision of health and fitness services
    – Ensuring your safety during physical activities
    – Emergency medical assistance

    Legal basis: Explicit consent and substantial public interest (health and safety).

    7. DATA RETENTION

    We retain your data for:
    – Active clients: Duration of service plus 7 years
    – Health and medical records: 8 years from last treatment
    – Progress photos and videos: Until you withdraw consent or request deletion
    – Marketing data: Until you withdraw consent
    – Financial records: 6 years for tax compliance
    – Emergency contact information: Duration of service plus 2 years

    8. YOUR RIGHTS UNDER GDPR

    You have the right to:
    – Access your personal data (Subject Access Request)
    – Rectify inaccurate or incomplete data
    – Erase your data (“right to be forgotten”)
    – Restrict processing of your data
    – Data portability (receive your data in a structured format)
    – Object to processing based on legitimate interests
    – Withdraw consent at any time (for consent-based processing)
    – Not be subject to automated decision-making

    To exercise these rights, contact us at [data protection email] or write to our Data Protection Officer.

    9. DATA SECURITY

    We implement appropriate security measures including:
    – Encrypted data storage and transmission
    – Secure password-protected systems
    – Access controls and staff training on data protection
    – Regular security assessments and updates
    – Secure payment processing via Stripe (PCI DSS compliant)
    – Physical security for paper records (locked filing systems)
    – Regular data backups with security protocols

    10. INTERNATIONAL TRANSFERS

    We primarily store data within the UK/EU. Any international transfers (such as cloud storage providers) comply with GDPR requirements through:
    – Adequacy decisions
    – Standard contractual clauses
    – Binding corporate rules
    – Appropriate safeguards

    11. COOKIES POLICY

    Our website uses:
    – Essential cookies: For website functionality and security
    – Analytics cookies: To understand website usage (with consent)
    – Marketing cookies: For targeted advertising (with consent)

    You can manage cookie preferences through your browser settings.

    12. CHILDREN’S DATA

    For clients under 18:
    – We require parental/guardian consent for all processing
    – Parents/guardians have the right to access, rectify, or delete their child’s data
    – Special protections apply to marketing communications

    13. AUTOMATED DECISION-MAKING

    We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

    14. DATA BREACH PROCEDURES

    In the event of a data breach:
    – We will assess the risk within 72 hours
    – Report to the ICO if required by law
    – Notify affected individuals if there is a high risk to their rights
    – Take immediate steps to contain and remedy the breach

    15. COMPLAINTS

    You have the right to lodge a complaint with the supervisory authority:

    Information Commissioner’s Office (ICO)
    Email: casework@ico.org.uk
    Phone: 0303 123 1113
    Website: ico.org.uk

    16. CHANGES TO THIS POLICY

    We may update this policy periodically to reflect:
    – Changes in law or regulation
    – Changes to our services
    – Improvements to our data protection practices

    We will notify you of significant changes via:
    – Email notification
    – App notification
    – Website banner
    – Direct communication during sessions

    17. CONTACT US

    For any data protection queries or to exercise your rights:

    Data Protection Officer: [Name]
    Email: [data protection email]
    Phone: [phone number]
    Address: Elev8 Journeys Limited
             3rd Floor, 86-90 Paul Street
             London, EC2A 4NE

    18. CONSENT RECORD

    By signing below, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described.

    Client Name: _________________________________

    Signature: ___________________________________

    Date: _______________________________________

    Parent/Guardian (if under 18):
    Name: _______________________________________
    Signature: ___________________________________
    Date: _______________________________________

    —

    This Privacy Policy forms part of your service agreement with Elev8 Journeys Limited and should be read in conjunction with our Terms and Conditions.

Start your journey today and take the first step toward a stronger, healthier you.