Privacy Policy

 

(last updated 21/01/2019)

Who We Are

The Thames Club and Hot Yoga Club are the trading names of The Thames Club Ltd (registered in England and Wales under company number  06574957 with registered office at 6th Floor, Magnus House, 3 Lower Thames Street, London EC3R 6HD).

We take your privacy and the security of your personal data very seriously and have such laid out the following privacy notice. We will only gather and process your personal information in accordance with this privacy notice and in compliance with the General Data Protection Regulation 2018. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data.

Any questions about this privacy notice should be addressed in writing to: Administration Manager, The Thames Club, Wheatsheaf Lane, Staines, Surrey TW18 2PD.

Information That We Collect

The Thames Club Ltd and Hot Yoga Club processes your personal information to meet our legal, statutory and contractual obligations and to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.

The personal data that we collect is: –

  • Name
  • Date of Birth
  • Home Address
  • Personal Email
  • Business Email
  • Company name (optional)
  • Home Telephone Number
  • Mobile Telephone Number
  • Bank account details
  • Special Category Data (i.e. health/medical information, interests)

We collect information in the below ways: –

Membership forms, Information forms, Online forms, website forms and orders, employment CV’s.

How We Use Your Personal Data (Legal Basis for Processing)

The Thames Club Ltd and Hot Yoga Club take your privacy very seriously and will never disclose, share or sell your data without your consent; unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this notice. Where you have consented to us providing you with promotional offers and marketing, you are free to withdraw this consent at any time.

The purposes and reasons for processing your personal data are detailed below: –

  • We collect your personal data in the performance of a contract or to provide a service
  • We collect and store your personal data as part of our legal obligation for business accounting
  • We will occasionally send you marketing information where we have assessed that it is beneficial to you as a customer and in our interests. Such information will be non-intrusive and is processed on the grounds of legitimate interest.

 

Your Rights

You have the right to access any personal information that The Thames Club Ltd and Hot Yoga Club process about you and to request information about: –

  • What personal data we hold about you
  • The purposes of the processing
  • The categories of personal data concerned
  • The recipients to whom the personal data has/will be disclosed
  • How long we intend to store your personal data for
  • If we did not collect the data directly from you, information about the source

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

You can opt out from any promotional, non-essential or marketing content at any time by clicking the unsubscribe link in an email or by contacting us directly.

You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us. Where applicable, you have the right to data portability of your information and the right to be informed about any automated decision-making we may use.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.

Safeguarding Measures

The Thames Club Ltd and Hot Yoga Club take your privacy seriously and take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of physical and managerial security measures in place, as well as electronic security measures including: – SSL, restricted access, IT authentication, firewalls, anti-virus/malware protection.

Our Processing Partners and Transfers Outside the EU

The Thames Club Ltd and Hot Yoga Club utilise some softwares, companies or services as processors in the running of our business. We agree terms with all of our processors to ensure that they all comply with high levels of confidentiality and best practice in privacy and security standards in line with the General Data Protection Regulation 2018.

Some products or services (or parts of them) may be hosted/stored in non-EU countries, which means that we may transfer any information which is submitted by you through the website outside the European Economic Area (“EEA”)

Therefore, when you use our website, send us an email, sign up to our newsletter, sign up for a trial or membership the personal information you submit may be stored on servers which are hosted in non-EU countriesWhere this is the case, we will take steps to ensure that those providers use the necessary level of protection for your information and abide by strict agreements and measures set out by The Thames Club Ltd and Hot Yoga Club to protect your data.

Legitimate Interests

As noted in the ‘How We Use Your Personal Data’ section of this notice, we occasionally process your personal information under the legitimate interests’ legal basis. Where this is the case, we have carried out a thorough Legitimate Interests’ Assessment (LIA) to ensure that we have weighed your interests and any risk posed to you against our own interests; ensuring that they are proportionate and appropriate.

We use the legitimate interests’ legal basis for processing data for anyone that has given their details to us within a reasonably recent time, who have shown interest in a trial, short term membership, membership, or have been referred to the Club or have been a recent ex member. In addition we must have identified that our interests are aligned and that you could reasonably be considered to be interested in further information relating to promotions, offers and benefits and expect to hear from us on this basis.

How Long We Keep Your Data

The Thames Club Ltd and Hot Yoga Club only ever retain personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. We are required under UK tax law to keep your basic personal data (name, address, contact details and account details) for a minimum of 6 years after which time it will be destroyed.

Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent.

Special Categories Data

Owing to the products, services or treatments that we offer, The Thames Club Ltd and Hot Yoga Club sometimes needs to process sensitive personal information (known as special category data) about you, like a pre-exercise questionnaire, lifestyle questionnaire, medical information, doctor notices. Where we collect such information, we will only request and process the minimum necessary for the specified purpose and identify a compliant legal basis for doing so.

Third party Sites, Apps and Services

We cannot be responsible for the privacy policies and practices of other websites, apps or services even if you access them using links from our sites, or during the delivery of our services. We recommend that you check the policy of each site you visit, any apps you use or any third party services that you may register with.

Social Media

We advise Members and visitors to ensure that if they are to take photos or record video on the premises, that no other individual appears in the footage. We do occasionally arrange filming or photographs for use on our Social Media or other communications. All due care will be taken to ensure that no one appears in filming or content created by us without expressing active consent to be included. If you find you do appear in error, and would like an image or video of you to be removed from our Social Media channels or communication please contact us immediately.

Cookie Notice

‘cookie’ is a small piece of data sent from a website and stored on the user’s computer by the user’s web browser while the user is browsing. When you visit a site that uses cookies for the first time, a cookie is downloaded onto your computer/mobile device so that the next time you visit that site, your device will remember useful information such as items added in the shopping cart, visited pages or logging in options.

Cookies are widely used in order to make websites work, or to work more efficiently, and our site relies on cookies to optimise user experience and for features and services to function properly.

Most web browsers allow some control to restrict or block cookies through the browser settings, however if you disable cookies you may find this affects your ability to use certain parts of our website or services. For more information about cookies visit https://www.aboutcookies.org.

Lodging A Complaint

The Thames Club Ltd and Hot Yoga Club only processes your personal information in compliance with this privacy notice and in accordance with the General Data Protection Regulation 2018. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the supervisory authority.

The Thames Club Ltd, Wheatsheaf Lane, Staines, Surrey TW18 2PD