Devonshire Club are committed to protecting your personal information and we take our responsibilities under the EU General Data Protection Regulation (GDPR) and other relevant laws very seriously.
As a registered data controller, we have a responsibility to make sure you know why and how your personal information is being collected in accordance with relevant data protection law.
We collect, hold and process information, including personal information which we need to help us deliver services.
We will make sure that any personal information collected and used is done so in line with data protection principles. Your personal information will be:
• Processed fairly and lawfully
• Only used for specific purposes
• Adequate, relevant and not excessive
• Accurate and up to date
• Kept for an appropriate amount of time
• Protected using appropriate security safeguards.
What types of personal information do we collect and why?
• Name, address, phone number, email addresses, city of residence and other personal contact information for the purposes of delivering our services.
• IP Addresses and Page Visits for the purpose of administering and maintaining our website.
• Transactional data (including credit or debit card information) (where applicable) for the purpose of taking payments for services.
What is our legal basis for processing information about you?
• Explicit Consent – Members provide explicit consent to be contacted by our services and receive further information.
• Performance of a contract – Member may sign a membership contract for us in order to be party to a membership.
• Legitimate Interests – Members may be contacted about relevant offers and services that they have expressed interest in or relating to services they have received.
Who is my personal information shared with?
At Devonshire Club, we want to make sure you know where your information is going and who it is going to. We do not share or sell your information to any third parties that are outside our partner network and even if we did want to recommend you to one of our partner’s services, then we would obtain your explicit consent to do so.
Our partners include:
• Truth Gym for bespoke fitness regimes and exclusive rejuvenation programmes.
• Reciprocal clubs, a full list of all clubs is available here on our website.
Do you share my personal information with anyone outside of the EU?
We do not transfer any personal information outside of the European Economic Area (EEA). If we do need to transfer personal information outside of the EEA we will do this based on your explicit consent and ensure the compliance with the relevant countries data protection law.
Third Party Mailing List
We use a third-party provider, MailChimp, to deliver our newsletter. For more information, please see MailChimp’s privacy notice here.
What safeguards do you have in place to protect my personal information?
Devonshire Club will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. We will store all the personal information you provide on its secure servers.
How long is my personal information being kept for?
We will only hold your personal information for a permitted amount of time either instructed by yourself, by law or best practice.
• We will hold potential client information. If clients do not take up a membership or services with us, we delete their information after 6 months.
• We will hold client’s information of those who are using our services for 6 years.
• We will hold members information for the duration of their membership, once a member resigns or cancels their membership their information is deleted.
What rights do I have around my personal information?
We have a duty to inform you of not only why your personal information is being processed but what rights you have around your personal information too.
You have the right to:
• Be informed of how your personal information is being used
• Have access to information held about you, this is commonly known as a Subject Access Request (SAR)
• Have your personal information deleted in certain circumstances
• Have inaccuracies within your personal information corrected
• Restrict processing of your personal information until inaccuracies are corrected or if there is a dispute around the processing the personal information
• Object to the processing of your personal information in certain circumstances
• Have your personal data transferred to another provider
• Be informed of where automated decision making (ADM) takes place and be given an option to opt out of ADM
• Lodge a complaint with the Information Commissioner’s Office if you are concerned about how your personal information is being used or managed. You can call them on 0303 12 1113 or use their online contact form here.
What do I do if I have further questions?
Email firstname.lastname@example.org or
Post 4-5 Devonshire Square, London, EC2M 4YD.