Privacy Policy

Effective Date: June 1, 2025.

BST Fitness Ltd., doing business as Blood, Sweat & Tears (“we”, “our”, “us”), is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website, services, studio, or contact us.

We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

1. Who We Are

BST Fitness Ltd.
9 White Lion Street, 4th Floor
London, N1 9PD
United Kingdom

Company registration number: 15857687
Email: info@bstlagree.com

We are the data controller of your personal data.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Name, date of birth, gender
Contact Data: Email address, telephone number, home address
Account Data: Login details, password (encrypted), preferences
Payment Data: Billing address, payment card details (processed securely via third-party payment processor)
Health Data: Medical conditions, pregnancy status, injuries (provided voluntarily by you when required for participation)
Class Attendance Data: Class bookings, attendance history, cancellations, no-shows
Marketing Preferences: Your consent to receive marketing emails or SMS
Technical Data: IP address, browser type, device information, cookies

We collect this data directly from you when you:

Register for an account
Sign our Client Waiver
Book classes or purchase
packages
Contact us
Subscribe to marketing communications
Visit our website or use our mobile application

3. How We Use Your Personal Data

We process your personal data for the following purposes:

To provide you with our services (class bookings, studio access, account management)
To manage payments and process transactions
To communicate important studio information (class changes, cancellations, studio updates)
To manage your health and safety in class (where you have provided relevant medical information)
To comply with legal obligations (such as tax and accounting requirements)
To respond to your enquiries and provide customer support
To send you marketing communications (with your consent)
To improve our services and website through analytics and feedback

We rely on the following legal bases under UK GDPR to process your personal data:

Performance of a contract (to deliver our services)
Consent (for marketing communications and sensitive health data)
Legal obligation (to comply with laws and regulations)
Legitimate interests (to manage and improve our services)

4. How We Share Your Personal Data

We do not sell your personal data.

We may share your data with trusted third parties who provide services to us, including:
Payment processors
Class booking and management software providers (including Mariana Tek)
Email and SMS marketing providers
IT and website service providers
Legal and accounting advisors

International Transfers:
Because we use Mariana Tek, which stores data in the United States, your personal data may be transferred to and stored outside the United Kingdom and the European Economic Area (EEA).

Where data is transferred outside the UK or EEA, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner’s Office (ICO), to protect your personal data.

We may also share your data if required by law, regulation, or court order.

5. How We Store and Protect Your Personal Data

We store your personal data on secure servers in the UK, EEA, or the United States, depending on the third-party service providers we use (such as Mariana Tek).

We implement appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, alteration, or disclosure.

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal and accounting requirements.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to access — request a copy of your data
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your data
Right to restrict processing — request limited processing of your data
Right to data portability — request transfer of your data to another service
Right to object — object to our processing of your data
Right to withdraw consent — withdraw marketing consent at any time
Right to lodge a complaint — with the UK Information Commissioner’s Office (ICO): www.ico.org.uk

To exercise any of these rights, please contact us at: info@bstlagree.com

7. Marketing Communications

If you have given your consent, we may send you marketing emails or SMS about our services, offers, or studio events.

You can withdraw your consent at any time by:

Clicking the “unsubscribe” link in our emails
Replying “STOP” to SMS messages
Contacting us directly at info@bstlagree.com

8. Cookies and Website Analytics

We may use cookies and similar technologies to collect information about your use of our website.

For more details, please see our Cookie Policy [Insert link if you have one, or add one if needed].

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

BST Fitness Ltd.
9 White Lion Street, 4th Floor
London, N1 9PD
United Kingdom
Company registration number: 15857687
Email: info@bstlagree.com