Get Started
Home About Classes Blog Contact Get Started

Privacy Policy

How we collect, use and protect your personal information.

Last updated: 22 March 2026

CrossFit Bodmin ("we", "us", "our") is committed to protecting your privacy and handling your personal data responsibly. This privacy policy explains what data we collect, how we use it and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who We Are

CrossFit Bodmin is a fitness facility based at Unit 2 Callywith Court, Callywith Industrial Estate, Bodmin, Cornwall, PL31 2RQ. We are the data controller for the personal information described in this policy.

For any data protection queries, please contact us at: info@crossfitbodmin.com

What Data We Collect

We may collect the following personal information:

  • Contact details: name, email address, phone number
  • Enquiry information: messages you send via our contact form or application form
  • Application form responses: fitness goals, experience level and readiness information submitted through our online application
  • Communication records: messages exchanged via WhatsApp, SMS, email, Instagram or Facebook Messenger when you contact us through these channels

How We Collect Your Data

We collect personal data when you:

  • Fill out our online application form at join.crossfitbodmin.com
  • Send us a message via our contact form
  • Contact us via WhatsApp, SMS, email, Instagram or Facebook Messenger
  • Speak with us by phone or in person and provide your details

How We Use Your Data

We use your personal data for the following purposes:

  • To respond to your enquiry about membership or our services
  • To contact you about booking a consultation, class or appointment
  • To send follow-up messages if you have expressed interest in joining
  • To manage your membership and provide our services
  • To improve our services and communication

Our legal basis for processing your data is legitimate interest (responding to enquiries and managing our business) and, where applicable, consent (when you voluntarily submit your information through our forms).

AI-Assisted Communication

We use AI-assisted tools to help manage conversations and respond to enquiries. This means some of our initial responses may be generated or suggested by AI technology. A human team member oversees all communications and can take over any conversation at any time. Your data is processed securely and is not used to train third-party AI models.

Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with the following service providers who help us run our business:

  • Twilio: for WhatsApp and SMS messaging
  • Google: for calendar and email services
  • Meta: for Instagram and Facebook Messenger communication
  • Anthropic: for AI-assisted messaging (data processed securely, not used for model training)

All service providers are bound by their own privacy policies and data processing agreements.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described above. Specifically:

  • Enquiry data: retained for up to 24 months after your last interaction, then deleted
  • Member data: retained for the duration of your membership and up to 24 months after it ends
  • Communication records: retained for up to 24 months after your last message

You can request deletion of your data at any time (see Your Rights below).

Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure server hosting with access controls
  • Regular review of our data handling practices

Cookies

Our website does not use tracking cookies, advertising cookies or analytics cookies. We only use cookies that are strictly necessary for the website to function (such as remembering your preferences). No third-party tracking is present on our website.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: request correction of inaccurate or incomplete data
  • Right to erasure: request deletion of your personal data
  • Right to restrict processing: request that we limit how we use your data
  • Right to data portability: request your data in a portable format
  • Right to object: object to our processing of your data
  • Right to withdraw consent: where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please email us at info@crossfitbodmin.com. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this page periodically.