GDPR Compliance

OriGym is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This document explains how we collect, use, store, and protect your personal data in accordance with GDPR. It applies to all data collected through our website, https://www.origym.co.uk/, and other related services provided by OriGym.

Data Controller

The data controller responsible for your personal data is OriGym. If you have any questions or concerns regarding our data processing activities, please contact us at OriGym, Exchange Court, 1 Dale Street, L2 2PP, or via email at dpo@origym.co.uk, or phone at 0800 002 9599.

Data Collection

We collect various types of personal data from our website users and customers. This may include your contact information, such as your name, email address, phone number, and postal address. We may also collect identification data, including your date of birth, gender, and any identification documents required.

Additionally, we may gather transaction data, which includes your payment details, purchase history, and account activities. Furthermore, we collect technical data, such as your IP address, browser type and version, time zone setting, browser plug-in types, and other technology on the devices you use to access our website. Information about how you use our website, products, and services is also collected, as well as your preferences in receiving marketing from us and your communication preferences.

Data Processing Purposes

We process your personal data to fulfil our obligations when you purchase a product or service from us, and to communicate with you regarding your account, our services, and promotions, where you have consented to receive such information.

Your data is also processed to provide customer service and support, including responding to your enquiries. Additionally, we use your data to analyse and improve our website, products, services, marketing, and customer relationships. Finally, we process your data to comply with legal obligations, including accounting and taxation requirements.

Legal Basis for Processing

We rely on several legal bases for processing your personal data. These include your consent, where you have provided it for specific purposes, and the necessity of processing for the performance of a contract with you.

We also process data to comply with legal obligations to which we are subject. Additionally, we may process your data based on our legitimate interests, provided your interests and fundamental rights do not override those interests.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention period will vary depending on the type of data and the purpose for which it was collected.

Data Sharing

We do not share your personal data with third parties, except in specific circumstances. These include when we share data with trusted third-party service providers who perform functions on our behalf, such as payment processing, delivery services, and IT support.
We may also disclose your data if required by law or in response to legal processes, such as a court order or subpoena. In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction.

Data Security

We are committed to ensuring that your information is secure. We have implemented appropriate technical and organisational measures to safeguard your data from unauthorised access, alteration, disclosure, or destruction.

Your Rights

Under GDPR, you have several rights regarding your personal data. You have the right to request access to your personal data held by us and to request that we correct any inaccuracies in your data. You also have the right to request the deletion of your personal data under certain conditions.

Furthermore, you can request that we restrict the processing of your data under specific circumstances. You also have the right to receive your data in a structured, commonly used, and machine-readable format, and to have it transferred to another data controller under certain conditions.

Additionally, you have the right to object to our processing of your personal data under certain conditions. Where we rely on your consent to process your data, you have the right to withdraw that consent at any time.

Cookies

Our website uses cookies to improve your experience. Cookies are small files placed on your device to track usage patterns, preferences, and to deliver personalised content. You can manage your cookie preferences through your browser settings. You can read more about Cookies here

Changes to this Policy

We may update this GDPR Compliance Document from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website and, where appropriate, notified to you by email.

Contact Information

If you have any questions about this GDPR Compliance Document or wish to exercise any of your rights, please contact us at OriGym, Exchange Court, 1 Dale Street, Liverpool, L2 2PP, or via email at dpo@origym.co.uk, or phone at 0800 002 9599.

This document is intended to provide transparency on how OriGym handles your personal data and ensures compliance with the GDPR. We are fully committed to protecting your privacy and safeguarding your personal information.