Spin Studios LTD (One City) are committed to protecting and respecting your privacy. This policy (together with the Terms and Conditions and any other documents we refer to in this policy or the Terms and Conditions) set out how we will use your personal information and who it will be shared with. Please read the following carefully.
“Spin Studios Ltd (“us”, “we”, or “our”) operates the One City Fit website and the One City Fit mobile application (the “Service”).”
Personal Data & how we collect it
We collect Personal Data about you when you visit our Sites or use our Services, including the following:
Registration and use information – When you register to use our Services by establishing an Account, we will collect Personal Data as necessary to offer and fulfil the Services you request. We may require you to provide us with your
- Primary phone number
- Postal code to open an account.
Any correspondence you send to us, give to us over the phone, or when email us.
Details of your visits to our site and the resources that you access which may include; website traffic data and communication data
Details of purchases on our website; and bookings you make for One City classes, previously and upcoming
We may require you to provide us with additional Personal Data as you use our Services, to the extent that it is necessary for the provision of those services. Where we believe that we need more data we will set out the reasons why we need that information, and describe how we intend to use it.
Personal Data Retention
We will retain your Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you and provide the One City Services to you (for example, for as long as you have an account with us or keep using the One City Services);
- Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
- Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
How we use Personal Data
We will process your Personal Data for a variety of reasons that are justified under data protection laws in the European Economic Area (EEA) and Switzerland.
To operate the Sites and provide the Services, including to:
- Create an account
- Class bookings
- Class cancellations
- Waitlist bookings
- Purchasing credit packages or individual classes
- Initiate a payment
To send administrative information to you, for example, information regarding our services and changes to our terms, conditions, and policies.
For reporting and trending.
To better understand you and our other users, so that we can tune and personalize our offering.
For trending and statistics, and to improve our products and services
- For fraud and security monitoring purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft.
- For responding to legal duties, such as requests from public and government authorities.
To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England
With your consent, including to:
To market to you by delivering marketing materials about Spin Studios Ltd products and Services. We may also process your personal data to tailor certain services or experiences to better match our understanding of your interests.
To respond to your requests, for example to contact you about a question you submitted to our customer service team.
You can withdraw your consent at any time please email us at firstname.lastname@example.org
Your health data is regarded as a special category of data under data protection laws. We process health data so as to be aware of any particular concerns or issues that may affect your ability to undertake exercise with us, or to assist us if there is a medical emergency. Because we cannot allow you to participate in a class unless we have this information we regard the information as being necessary for the performance of your contract with us. In addition, we must have additional authority to process this personal data, because of its status. We will only process this data with your explicit consent, which we will ask for separately. Given the significant harm that could result if we are not aware of a medical condition, we will not be able to allow you to take our classes without your consent.
Disclosing Personal Data
With other companies that provide services to us: We share Personal Data with third-party service providers that perform services and functions at our direction and on our behalf. Our providers include companies who will process our credit and debit card payments; companies who maintain our website, and companies that maintain our mailing lists and other contact details.
With other third parties for our business purposes or as permitted or required by law. We may share information about you with other parties for One City’s business purposes or as permitted or required by law, including:
if we need to do so to comply with a law, legal process or regulations;
to law enforcement authorities or other government officials, or other third parties pursuant to a subpoena, a court order or other legal process or requirement applicable to Spin Studios Limited;
if we believe, in our sole discretion, that the disclosure of Personal Data is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity;
to protect the vital interests of a person; to investigate violations of or enforce a user agreement or other legal terms applicable to any Service;
to protect our property, Services and legal rights;
to facilitate a purchase or sale of all or part of Spin Studios LTD
To help assess and manage risk and prevent fraud against us, our Users and fraud involving our Sites or use of our Services, including fraud that occurs at or involves our business partners, strategic ventures, or other individuals, and institutions;
To support our audit, compliance, and corporate governance functions.
to support NHS Test and Trace (which is part of the Department for Health and Social Care) in England
In addition, Spin Studios LTD may provide aggregated statistical data to third-parties, including other businesses and members of the public, about how, when, and why Users visit our Sites and use our Services. This data will not personally identify you or provide information about your use of the Sites or Services. We do not share your Personal Data with third parties for their marketing purposes without your consent.
Sometimes it may be necessary to share your data with parties who are based or who operate outside of the European Economic Area. Currently this happens where we share it with contact management companies such as Mailchimp. We also use Google Analytics services (for more information see our Cookies policy), and our website services are provided by Zingfit LLC
When you access or use One City’s Services, we (or a third-party provider) may use “cookies” and other technologies such as pixel tags, locally shared objects, clear GIFs and web beacons, to track what you view and interact with on the Service. We treat information collected by cookies and similar technologies as non-personal information.
A “cookie” is a small bit of record-keeping information that is sent to your computer. The cookies that we use do not include personal information and may be used to: (1) help you navigate around One City’s Services, (2) monitor how many people are using One City’s Services, and (3) track trends. The cookie does not track your activity outside of One City’s Services.
Most browsers are initially set up to accept cookies, but you can disable cookies or set your browser to indicate when a cookie is being sent. However, disabling cookies may affect your ability to access the Service.
Subject to limitations set out in EEA data protection laws, you have certain rights in respect of your Personal Data. In particular, you have a right of access, rectification, restriction, opposition, erasure and data portability. Please contact email@example.com if you wish to exercise these rights.
If you wish to access all personal data that One City holds on you, we would ask that you provide us with your name, date of birth and address to confirm your identity
If you have an Account with any of our Services, you can review and edit Personal Data in the Account by logging in and updating the information directly via the account section on our website
One City via Zingfit has defined and will continue to refine notification procedures in case of breach of personnel for our users. The GDPR requires timely reporting of certain personal data breaches to the relevant authority, and informs individuals as necessary.
Right to be Forgotten
Users can request to be deleted from the One City system.
There is an option to opt out of any marketing emails you receive from One City.
Credit Card Data
One City via Zingfit passes credit card information from the web payment form onto a payment gateway (e.g. Stripe an Authorize.net) without that information passing through zingfit servers. Credit card information is stored here and a “token” is returned to zingfit to store in its system for further use in recurring and other card-on-file transactions. You can refer to this document for more information: https://stripe.
If the revised version includes a substantial change, we will provide you with prior notice. We also may notify users of the change using email or other means.