1. Scope
This Privacy Policy explains how Figure8Gym collects, uses, stores, and shares personal data when you use Figure8Gym’s website, mobile application, and related services, including account management, class browsing, class bookings, waitlists, membership display features, QR-code features, and service notifications.
Public app-store listings identify the mobile application as the official application for new and existing Figure8Gym customers and describe QR-code access and subscription-tracking functionality.
This Privacy Policy applies to personal data processed by or on behalf of Figure8Gym in connection with those services. It does not govern third-party websites, app stores, or services that may have their own terms or privacy notices.
2. Controller and Contact Details
For purposes of this Privacy Policy, the data controller is:
Figure8Gym Legal entity: KOZ BROS TRADING LTD Registered/business address: 9 Nemeseos, Pallouriotissa, Nicosia, Cyprus, 1035 Privacy email: figurattefitness@gmail.com Telephone: +357 22 780181
Public app-store information separately identifies G. M. POWERSOFT COMPUTER SOLUTIONS LIMITED as the mobile app developer and lists app support contact details. That appears to relate to technical app support rather than confirming the tenant controller details above, which should be verified before publication.
3. Categories of Personal Data
Depending on how you use the services, Figure8Gym may process the following categories of personal data:
3.1 Account and profile data
- Your name
- Your customer profile image or customer photo, where used
- Your account status and account-related identifiers (expiry date, renew date)
- Staff account information and user role information, where applicable
3.2 Membership and access data
- Membership or package type
- Membership expiry date
- Remaining days until membership expiry
- QR-code related account access/display data
3.3 Class and booking data
- Classes viewed or booked
- Class level or difficulty
- Class duration
- Class location
- Instructor information shown with classes
- Booking status
- Cancellation status
- Waitlist status
- Automatic waitlist promotion records
3.4 Notification data
- Records required to send service notifications relating to:
- membership expiry
- booking confirmations
- booking reminders
- booking cancellations
- waitlist promotions
3.5 Administrative and operational data
- Records needed to manage users, staff accounts, permissions, and internal roles
- Logs and records reasonably required to operate, secure, troubleshoot, and administer the services
Figure8Gym states in this Privacy Policy that it does not collect health data, payment card data, precise geolocation data, microphone data, contact-list data, advertising identifiers, or cookie/tracking data.
3.6 Sources of personal data
Figure8Gym generally collects personal data directly from you when you register, use the services, make or manage bookings, upload or use account features, or communicate with Figure8Gym.
In some cases, Figure8Gym may also receive personal data from authorized Figure8Gym staff, administrators, instructors, or technical service providers where reasonably necessary to create or manage your account, memberships, bookings, class participation, profile features, or support requests.
4. How We Use Personal Data
Figure8Gym may use personal data to:
- create, maintain, and administer customer, staff, and administrator accounts;
- display class information, including instructor, level, duration, and location;
- enable class bookings, same-day multiple bookings where permitted, cancellations, waitlists, and automatic waitlist promotion;
- display membership and account details within the QR-code area of the mobile application;
- manage customer profile images and related account displays;
- send service notifications about memberships and bookings;
- administer user roles and staff permissions;
- operate, maintain, secure, support, and improve the services;
- keep internal records, prevent misuse, and investigate incidents; and
- comply with applicable law, legal process, and record-keeping obligations.
5. Legal Bases
Where applicable law requires a legal basis for processing, Figure8Gym relies on one or more of the following:
- Performance of a contract or taking steps at your request before entering into a contract, including providing your account, class booking functions, waitlists, QR-code features, and membership-related services.
- Legitimate interests, including operating the business, administering classes and memberships, managing staff permissions, maintaining service security, preventing misuse, and communicating essential service updates.
- Consent, where consent is required under applicable law for a specific activity.
- Compliance with legal obligations, where processing is required by law, regulation, court order, or lawful request.
Where Figure8Gym relies on legitimate interests, it will do so only where those interests are not overridden by your rights and interests under applicable law.
5.1 When personal data is required
Some personal data is required for Figure8Gym to provide the services. For example, Figure8Gym may require certain account, membership, booking, and related operational data in order to create and manage your account, confirm your membership status, process class bookings and waitlists, display relevant account or QR-code features, and provide related customer support and service communications.
If you do not provide personal data that is required for these purposes, Figure8Gym may be unable to create or maintain your account, provide the relevant service feature, process a booking, or respond effectively to your request.
Where personal data is optional, Figure8Gym will indicate this where reasonably practicable.
5.2 Automated processing and waitlist management
Figure8Gym may use rules-based automation to administer operational service features, such as automatic waitlist promotion when a class space becomes available.
Figure8Gym does not carry out solely automated decision-making or profiling that produces legal effects or similarly significant effects on you through these services. If that position changes, Figure8Gym will update this Privacy Policy and provide any additional information required by applicable law.
6. Recipients and Sharing
Figure8Gym may share personal data with the following categories of recipients, only where reasonably necessary:
- authorized Figure8Gym personnel, including staff and administrators;
- instructors and operational personnel to the extent needed for class delivery and booking management;
- the platform provider and technical service providers that support the website, mobile application, hosting, maintenance, security, communications, and technical support;
- professional advisers, auditors, insurers, or legal representatives where needed for legitimate business or legal purposes; and
- courts, regulators, law enforcement, or other authorities where required by law or lawful process.
Within the services, some data is intentionally displayed as part of the service design. For example:
- instructor information may be displayed on class cards and class details; and
- customer-facing QR-code screens may display the customer name, membership/package type, membership expiry information, remaining days, and customer picture where those features are enabled.
Figure8Gym does not describe sale of personal data or disclosure to advertising networks in this Privacy Policy.
7. International Transfers
Figure8Gym may use service providers or technical infrastructure that store or access personal data in countries other than the country in which the data was originally collected, including countries outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, Figure8Gym will take steps intended to ensure that an appropriate level of protection applies under applicable law. Depending on the circumstances, this may include reliance on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.
You may contact Figure8Gym using the details in this Privacy Policy to request further information about applicable international-transfer safeguards, where required by law.
8. Retention
Figure8Gym retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the services, maintain memberships and bookings, manage staff access, resolve disputes, enforce applicable terms, and comply with legal obligations.
In general:
- account and membership data are retained while the account or membership remains active and for a reasonable period afterward;
- booking, cancellation, and waitlist records are retained for as long as needed to administer classes, resolve service issues, and maintain operational records;
- customer images are retained until removed, replaced, or no longer needed for the relevant account feature;
- staff account and role-management records are retained while the relevant role remains active and for a reasonable administrative period afterward; and
- records required for legal, regulatory, security, or audit purposes may be retained longer as required or permitted by law.
9. Your Rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- request portability of personal data you provided, where applicable;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a competent supervisory authority.
Figure8Gym may need to verify your identity before responding to a rights request. Some rights are subject to legal exceptions and limitations.
10. Account Deletion and Data Deletion Requests
You may request deletion of your account or personal data by contacting Figure8Gym using the contact details in this Privacy Policy.
Deletion route: dedicated privacy-request email/process
Please note that Figure8Gym may retain certain information after an account deletion request where necessary to:
- comply with legal obligations;
- maintain security, fraud-prevention, or audit records;
- resolve disputes or enforce applicable terms; or
- preserve records necessary for legitimate business administration.
Where self-service cancellation of class bookings is available, that booking-cancellation functionality is separate from account deletion and does not by itself delete your account or personal data.
11. Children’s Privacy
Figure8Gym’s services are not intended to collect personal data from children without appropriate authorization where required. If a child uses the services, Figure8Gym expects that use to occur in accordance with applicable membership rules and any required parent or guardian involvement.
If you believe personal data relating to a child has been provided without appropriate authorization, please contact Figure8Gym so the matter can be reviewed.
12. Security
Figure8Gym uses reasonable technical and organizational measures intended to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures may include access controls, role-based permissions, and administrative controls appropriate to the nature of the service.
No method of transmission over the internet or electronic storage is completely secure. Figure8Gym therefore cannot guarantee absolute security.
13. Changes to This Privacy Policy
Figure8Gym may update this Privacy Policy from time to time to reflect changes to the services, operations, legal requirements, or data-processing practices. The updated version will be posted on the relevant website legal page and will take effect from the stated last updated date unless otherwise specified.
Where required by applicable law, Figure8Gym will provide additional notice of material changes.
Any updated version of this Privacy Policy will display a revised “Last updated” date and, where appropriate, a new effective date.
14. Contact
For privacy questions, requests, or complaints, please contact:
Figure8Gym
Legal entity: KOZ BROS TRADING LTD Address: 9 Nemeseos, Pallouriotissa, Nicosia, Cyprus, 1035 Email: figurattefitness@gmail.com Telephone: +357 22 780181 Privacy contact: Figure8Gym administration
For technical mobile-app support only, public app-store information currently lists support through the app developer’s published channels.