This notice explains what we do with your personal information once you become a member, buy a day pass, book a bay or come in as somebody's guest. It's written to be read, not to be survived — if anything here isn't clear, email us and we'll explain it properly.
If you're on our founding list but haven't joined yet, the registration privacy notice is the one that applies to you.
The short version. We hold what we need to run your membership, let you into an empty building safely, and know who's inside. That includes a health declaration and an emergency contact, because the club is unstaffed and you may be here alone. There are cameras, there is no audio recording, and there are none in the changing rooms or showers. We don't sell anything to anyone. You can see it, correct it or have it deleted whenever you ask.
Who we are
The Bunkr Club is operated by The Bunkr Club Ltd (registered in England and Wales, company number 17313373), whose registered office is Unit 16 Faldo Road, Barton-le-Clay, Bedford, MK45 4RP. The club is at Unit B5, Barton Industrial Estate, Faldo Road, Barton-le-Clay, MK45 4RP. We are the data controller for everything described here, and we are registered with the Information Commissioner’s Office.
For anything to do with your data, contact us at info@bunkrclub.co.uk.
Why there's more of it than you might expect
Worth saying plainly, because it explains most of this page. Bunkr Club is unstaffed. There's nobody at a desk to see who came in, notice someone struggling, or check that a person should be here. So the things a receptionist would do are done instead by access codes, cameras and records — and that means we hold a bit more about you than a staffed gym of the same size would need to.
We've tried to keep it to what genuinely does that job, and nothing else. Where we've decided not to collect something, or not to use it for something, we've said so below.
What we collect
| Information | Where it comes from |
|---|---|
| Name, email, mobile number and date of birth | You, when you join |
| Your membership tier, start date, price and credit balance | Created when you join |
| Your bookings, the bays and classes you use, and the credits you spend | Recorded as you book |
| A payment reference from our payment provider. We never see or store your card number | Created when you set up payment |
| Your health declaration — seven yes/no answers, anything you add in the optional notes box, and whether a doctor has cleared you to exercise unsupervised | You, at signup and once a year after that |
| An emergency contact — their name, their relationship to you and a phone number | You, when you join |
| Your door and bay access code, and a log of every time it's used | Recorded automatically as you come and go |
| CCTV footage of you while you're on the premises | Recorded automatically |
| Whether you've completed the gym induction, and when | Recorded when you watch it |
| The name and mobile number of any guest you bring | You, before they come in |
| If you have a junior add-on: your child's first name and date of birth | You, when you add it |
| If you have a Student Gym membership: your parent or guardian's details, their consent, the health answers they give for you, and a record of your ID check. More on this below | You, your parent or guardian, and our staff at your first visit |
| Your agreement to these terms — the date and time, the exact version you agreed to, your IP address and browser | Recorded automatically when you tick the box |
| Your marketing preference, separately from the above | You, ticking a box you don't have to tick |
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Run your membership — take payment, track credits, take bookings, let you in | Performance of our contract with you. |
| Keep your health declaration, and act on it if you answer yes to something | Your explicit consent. Health information gets the highest level of protection in law, so we ask for it separately and you can withdraw it at any time — though doing so means we have to withdraw gym access, because it's the only basis on which we can issue it. |
| Hold your emergency contact, and use it if something happens to you here | Your vital interests, and our legitimate interests in being able to get help to you. We use it for nothing else, ever. |
| Know who is in the building, and let only entitled people in | Legitimate interests — the safety and security of an unstaffed venue. |
| Record who used a bay and when, so we can settle a billing or credit query | Performance of our contract, and legitimate interests in resolving disputes fairly. |
| Investigate a shared access code | Legitimate interests — a shared code is the main way an unstaffed club gets abused, and it's unfair on everyone paying properly. |
| Student Gym membership: ask a parent or guardian for consent, keep a record of it, check ID at the first visit, and hold the parent or guardian as the emergency contact | Legal obligation and our legitimate interests in being able to show that a parent or guardian agreed before a 16 or 17 year old trains alone, and in getting help to the student if something happens. The health answers a parent or guardian gives are held on explicit consent, given on the student's behalf. |
| Keep a record of the terms you agreed to and when | Legal obligation. Data protection law requires us to be able to demonstrate consent, and contract law requires us to know what was agreed. |
| Send you news, offers and club updates | Consent. A separate box you don't have to tick, and unticking it later takes one click. |
| Operational emails — a payment failed, a booking is confirmed, the club is closed tomorrow | Performance of our contract. These aren't marketing and you can't unsubscribe from them while you're a member. |
Your health declaration
This is the most sensitive thing we hold, so it gets its own section.
We ask seven yes/no questions before we issue gym access, and again once a year. We're not qualified to assess your fitness to exercise and we don't try to — the point is that you think about it honestly before training alone in an empty building, and that we're not handing a code to somebody a doctor has told not to exercise.
- Only named directors and approved managers can see it. Every time somebody looks at it, that's logged.
- It never appears in a general member list, a data export, a support screen or any marketing audience.
- The optional notes box is optional. Please don't put more medical detail in it than we need for a safety decision — we'd rather know less.
- If you answer yes to something, we'll ask you to confirm a doctor is happy for you to exercise unsupervised before gym access is issued. Bay access isn't affected.
- We don't share it with anyone, including instructors, unless you ask us to.
CCTV
The club is monitored by CCTV. Because there's nobody on duty, the cameras are the main way we'd know if someone was in difficulty, who was in the building, or what happened if there's an incident or a disagreement.
| Where | The entrance, the gym floor, the simulator bays and the hallway. There are no cameras in the changing rooms, showers or toilets, and there never will be. |
|---|---|
| Audio | Conversations are not recorded. Some cameras have a microphone, and continuous audio recording is switched off. Audio is only ever available through the emergency call function — if you press an emergency call point, or we respond to an alarm, so we can speak to you and understand what's happening. |
| Why | Your safety on an unstaffed floor; preventing and investigating crime and damage; access control; and working out what happened if there's an incident. |
| Lawful basis | Legitimate interests — the safety and security of an unstaffed venue. We've written down the assessment behind that and you're welcome to ask for it. |
| How long | 30 days, then deleted automatically. The exception is footage kept for a specific incident, insurance claim or police request, which is held separately and only for as long as that matters. |
| Who can see it | Named directors and approved managers only, and every viewing is logged with who, when and why. It never goes on social media and is never shown to other members. |
| Who we share it with | The police or another authority where we're legally required to, and our insurers for a claim. Never sold, never used for marketing. |
We do not use facial recognition, and we don't use the cameras to analyse your training, your performance or how often you turn up.
You can ask for a copy of footage of yourself. Please ask within 30 days, because after that it's gone. We'll respond within one month and we'll blur or remove other people who appear in it.
Anyone working at the club is told about the cameras separately, in writing, before they start. We don't use the footage to monitor their productivity or timekeeping.
Guests, and people who aren't members
If you bring a guest, we ask for their name and mobile number before they come in. That's because we need to know who's in the building — it's an access control and insurance requirement, not a way of getting their details.
You can't give marketing consent on your friend's behalf, and we won't pretend otherwise. A guest's details are excluded from every marketing list by default. We won't email or text them an invitation to join unless they've asked us to themselves. If we want to reach them, we'll ask you to pass something on instead.
Day-pass visitors and people booking a bay without joining are treated the same way: we hold what we need for that visit, and we keep it for 12 months.
Children and under-18s
- Junior add-on: we hold the child's first name and date of birth, and nothing else. The date of birth is there to check they're under 18, that they're a different person from you, and to end the add-on automatically when they turn 18.
- Student Gym members (16 and 17 year olds who train on their own): see the next section.
- Other 16 and 17 year olds with gym access, such as a guest training with an adult member: we hold the same information as for an adult, plus a record of the parent or guardian's consent.
- Children appear on CCTV like everyone else, under the same rules above.
- We don't market to anyone under 18.
Student Gym members and their parents or guardians
A 16 or 17 year old can only join the Student Gym membership with a parent or guardian's consent, and they train on their own. So, as well as the student's own membership record, we also collect:
| Information | Why |
|---|---|
| The parent or guardian's name, email address and mobile number | To ask for their consent, to confirm it at the first visit, to email them before the membership moves to an adult plan at 18, and because they are the student's emergency contact |
| A record of their consent: the exact wording they agreed to, the date and time, their IP address and the browser they used | So we can show that a parent or guardian agreed, to what and when |
| The health answers they give on the student's behalf, and whether a doctor has cleared the student to exercise unsupervised | The student's safety on an unstaffed gym floor, exactly as for an adult's health declaration |
| A record that staff checked ID at the first visit, who checked it and when. We don't keep a copy of anyone's ID | So we can show the student is 16 or 17 and that the consent was confirmed before they trained alone |
How long we keep it: all four for as long as the membership runs, and six years afterwards. That's the same as every membership record: six years is the period in which a claim could still be brought. When the student turns 18 and the membership moves to an adult plan, the membership is still running, so these records are kept until six years after it ends.
- The health answers get the same protection as every health declaration: only named directors and approved managers can see them, and every view is logged.
- We use a parent or guardian's details only for the student's membership. We never use them for marketing.
- If a parent or guardian doesn't give consent, the student doesn't join. We delete the application, including the parent or guardian's details, within 30 days.
- A parent or guardian has the same rights over their own information as anyone else. See Your rights.
Personal training clients
If you train with one of our coaches, your coach keeps a training record so each session can build on the last one. It holds:
| Information | Why |
|---|---|
| Your name and the goal you've agreed with your coach | So your coach knows whose record it is and what you're working towards |
| Your workouts: the exercises, the weights, reps, times and distances you did, and the date | To set the next session from the last one and show your progress |
| Your coach's notes, such as a seat setting, how a session went, or a plan for next time | So nothing is forgotten between sessions |
- Lawful basis: performance of our contract. It's how we deliver the personal training you've asked for.
- A note may mention an injury or a movement to avoid, but only when it changes how you train. Your coach asks you first, and keeps it to what they need. That's the only health information in the record, and the lawful basis for it is your explicit consent. Your health declaration stays where it is, under the rules above.
- Only the club's coaches and directors can see it, and signing in needs the coaches' password. It isn't part of the till or the membership system, and it's never used for marketing.
- Your coach may print a training plan for a session. It shows your name, your goal and that day's exercises.
- How long we keep it: while you train with us, and six years after your last session, the same period as a membership record. Ask us and we'll delete it sooner.
Who else touches it
Each of these acts on our instructions under a contract, and none of them may use your information for their own purposes:
- Cheeky Payments — provides the till and membership system where your record lives.
- Stripe — takes Direct Debit and card payments and holds your bank and card details. We never see your full bank account or card number.
- Supabase — hosts the database. Stored in the United Kingdom (London region).
- Brevo — sends our emails and texts. Based in France, data hosted in the European Union.
- Cloudflare — hosts this website, and stores the coaches' personal training records.
- Hikvision — the door hardware and the CCTV recorder. The footage stays on a recorder in the building.
We don't sell your information, rent it, or share it with other businesses for their marketing. Where data reaches a supplier outside the UK, it's protected by the UK's approved international transfer safeguards.
How long we keep it
- Your membership record: six years after your membership ends. That's how long a claim could still be brought, and it's the period our insurers expect us to be able to answer questions about.
- Your health declaration: as long as you're a member, and six years afterwards. Used for nothing else in that time.
- Access and door logs: 12 months.
- CCTV: 30 days, unless it relates to a specific incident.
- Emergency contact: deleted when your membership record is.
- Guest records: 12 months from the visit.
- Student Gym records (the parent or guardian's details, their consent, the health answers they gave and the ID check): as long as the membership runs, and six years afterwards. An application a parent or guardian doesn't consent to is deleted within 30 days.
- Personal training records: while you train with us, and six years after your last session.
- If you unsubscribe from marketing: we keep a minimal record of your email address and the fact you opted out, so we don't accidentally email you again.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the information we hold about you, including CCTV footage of yourself;
- correct anything that's wrong;
- delete it;
- restrict or stop how we use it;
- hand it over in a portable format;
- stop using it for marketing — always, immediately, no reason needed.
You can also withdraw your consent to us holding your health declaration at any time. We'll delete it — but we'd then have to withdraw gym access, because that declaration is the only basis on which we can let you train unsupervised. Bay access would be unaffected.
Email info@bunkrclub.co.uk and we'll deal with it within one month. It's free. Every marketing email carries a one-click unsubscribe link, and withdrawing consent is as easy as giving it.
Some of it we can't delete while you're still a member — we can't run your membership without your name, or let you in without an access record. If you ask us to delete something we need, we'll tell you which bits and why, rather than just refusing.
Automated decisions
We don't make any decision about you by automation alone that has a legal or similarly significant effect. The system does apply rules automatically — a failed payment starts a retry, a yes on the health form holds gym access until a doctor has cleared you, a guest's third visit is their last — but these are published rules you can read on this page and in the membership terms, not a judgement about you, and you can always ask a person to look at it.
Keeping it safe
Your record is held in systems protected by access controls, with health information restricted further to named people and every view logged. Bank and card details never reach us. CCTV stays on a recorder in the building rather than in the cloud. If something ever did go wrong in a way that put you at risk, we'd tell you, and we'd tell the Information Commissioner's Office within 72 hours.
Complaints
If you think we've handled your information badly, please tell us first — we'd rather fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.
Changes
If we change how we use your information in a way that matters, we'll update this page and email every member before it takes effect. This notice sits alongside the Membership Terms and Conditions, and where both describe the same thing — the CCTV, in particular — they say the same thing.
