Privacy Policy
Last updated: 12 November 2026
Brand Inc Fitness respects your privacy. This policy explains how we collect, use, store and share personal information when you visit our website, contact us or use our services.
It covers 99p Fitness, online programmes, fitness classes, personal training, yoga, Shiatsu and services provided to charities, communities and workplaces.
1. Who we are
Brand Inc Fitness Ltd is the data controller for the personal information described in this policy. This means we are responsible for deciding how and why it is used.
Postal address:
Brand Inc Fitness Ltd
15 Station Road
St Ives
Cambridgeshire
PE27 5BH
Email: info@brandincfitness.com
Website: www.brandincfitness.com
We are registered with the Information Commissioner’s Office (ICO).
Please contact us with any privacy questions or if you would like this policy in another accessible format.
2. Information we collect
Depending on the services you use, we may collect:
Contact details: your name, email address, telephone number and organisation.
Service information: enquiries, correspondence, bookings, membership details, attendance and programme access.
Payment information: transaction records, subscription status and billing details.
Health information: relevant questionnaire answers, medical conditions, medication, injuries, accessibility requirements and information needed to assess participation or adapt sessions.
Preferences: fitness goals, communication preferences and consent records.
Technical information: IP address, browser, device information and essential website activity collected by our website and video providers.
We collect information directly from you, including through forms, questionnaires, emails, telephone conversations and in-person discussions.
An organisation arranging services on your behalf may also provide relevant information. Where appropriate, we will tell you its source and explain how it is used.
3. Why we use your information
We use personal information to:
Respond to enquiries and arrange demonstrations, trials or consultations.
Administer memberships, subscriptions and programme access.
Arrange and deliver sessions.
Assess participation and make appropriate adaptations.
Process payments and maintain financial records.
Provide support and essential service communications.
Send relevant marketing where permitted.
Maintain security, prevent misuse and resolve complaints.
We only request information relevant to these purposes.
4. Our lawful bases
Under UK data protection law, we rely on the following bases where applicable:
Contract
To provide a service you request or take steps before entering into an agreement.
Legitimate interests
To manage business relationships, respond to organisational enquiries, maintain security and establish or defend legal claims, where these interests do not override your rights.
Legal obligation
To comply with applicable legal requirements, including financial record keeping.
Consent
For uses that require your permission, including certain marketing activities and optional cookies.
You may withdraw consent at any time by contacting us. This does not affect processing carried out lawfully before withdrawal.
If particular information is needed to provide a service safely or administer your membership, we will explain this. Without it, we may be unable to provide the relevant service.
5. Health questionnaires and sensitive information
Health and disability information is special category personal data and receives additional protection.
We use relevant health information to assess participation, identify appropriate adaptations and support the delivery of your chosen service.
For this use, we rely on your explicit consent alongside the relevant lawful basis described above. Consent to processing health information is requested separately from the exercise waiver.
You may withdraw this consent by emailing info@brandincfitness.com. We will explain whether we can continue providing the relevant service without that information.
Where information must be retained to establish, exercise or defend legal claims, we may retain the necessary records under the applicable legal-claims condition.
Health information is only shared with people who need it for the relevant purpose. We will seek separate permission before contacting a healthcare professional about you, unless another lawful exception applies.
Please do not submit someone else’s health information unless you have appropriate authority to do so.
6. Payments
Payments are processed through Stripe.
Stripe handles payment information for payment processing, security and fraud prevention. We receive information needed to administer your payment or subscription, such as payment status and transaction references.
For details of Stripe’s processing, visit:
7. Website and video providers
Our website is hosted by Squarespace, which supports website operation, forms and relevant membership or email functions.
We use Vimeo to host and display video content. When you access embedded videos, Vimeo may receive technical information about your device and interaction with its player.
Their privacy notices are available at:
Squarespace: https://www.squarespace.com/privacy
Vimeo: https://vimeo.com/privacy
8. Who we share information with
Where necessary, we may share relevant information with:
Squarespace, Stripe and Vimeo for the purposes described above.
Providers supporting our email, business administration and secure record storage.
Authorised trainers or practitioners involved in delivering your service.
Accountants, insurers and professional advisers.
Authorities where disclosure is legally required.
Where an organisation funds your programme, we will explain any identifiable attendance or engagement reporting before sharing it.
We do not sell your personal information.
9. International processing
Our service providers may process personal information outside the UK, including in the United States.
Where international transfer rules apply, transfers must be covered by an appropriate legal mechanism. Depending on the provider and transfer, this may include UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or approved contractual safeguards.
You can contact us for further information about safeguards relevant to your information.
10. How long we keep information
We keep personal information only for as long as necessary for its purpose.
Our standard approach is:
Enquiries that do not lead to a service: up to 12 months after the last meaningful contact, unless a longer follow-up period has been agreed.
Adult client service records and relevant health questionnaires: normally up to seven years after the last service, where needed for insurance purposes or potential legal claims. We review these records and delete unnecessary information sooner where appropriate.
Financial records: normally seven years from the end of the relevant accounting period, subject to applicable accounting and tax requirements.
Marketing records: until you unsubscribe or a review determines that continued retention is no longer appropriate.
Opt-out records: the minimum information needed to respect your request not to receive marketing.
Different periods may apply to children’s records, safeguarding matters, incidents, disputes or ongoing legal claims. Where relevant, we will explain the applicable arrangements separately.
Information is securely deleted or anonymised when no longer required.
11. Marketing communications
Where permitted, we may send information about workouts, programmes, events and services.
You can unsubscribe using the link in our marketing emails or email info@brandincfitness.com.
Unsubscribing from marketing does not stop essential messages about an active membership, payment or booking.
Health questionnaire answers are not used to target marketing.
12. Cookies and similar technologies
Our website and embedded services may use cookies or similar technologies for functions such as account access, security, payments and video playback.
We do not use Meta Pixel or separate website analytics tools.
Squarespace, Stripe and Vimeo may collect technical information when providing their services. Where consent is required for optional technologies, we will request it before they are used.
You can also manage cookies through your browser settings. Blocking essential cookies may affect website functionality.
13. Security
We use appropriate technical and organisational measures to protect personal information and restrict access to people who need it.
No website, email service or online storage system can be guaranteed completely secure.
14. Your rights
Depending on the circumstances, you may have the right to:
Request access to your personal information.
Correct inaccurate or incomplete information.
Request deletion.
Restrict how information is used.
Object to processing, including direct marketing.
Receive or transfer certain information.
Withdraw consent where we rely on it.
These rights are subject to applicable conditions and exemptions.
To exercise a right, email info@brandincfitness.com. We may need to verify your identity. We normally respond within one month, subject to permitted extensions.
15. Complaints
If you are concerned about how we handle your information, please contact:
You may also complain directly to the Information Commissioner’s Office:
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
You do not need to contact us before approaching the ICO.
16. Updates
We may update this policy when our services or data practices change. The date at the top shows when it was last updated.