GDPR Statement

As a community-focused performance facility, Moray Training Club is committed to protecting the privacy and security of our "Pack" members in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Moray Training Club, located at the new hangar facility in Lossiemouth, acts as the data controller for the personal information you provide.

2. Lawful Basis for Processing

We process your data under the following legal frameworks:

• Contractual Necessity: To manage your membership, class bookings (via TeamUp), and 1:1 PT sessions.
• Legal Obligation: To maintain accurate health and safety records and insurance compliance.
• Legitimate Interests: To foster our community through "Friday Night Lights" socials and event updates.
• Consent: For the use of photography and video for promotional purposes.

3. Your Rights Under GDPR

As a member of the Pack, you have specific rights regarding your personal data:

• Right of Access: Request a copy of the information we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete data.
• Right to Erasure: Request data deletion (subject to insurance/tax requirements).
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a structured, digital format.

4. Special Category Data (Health Information)

Because we provide high-intensity training (CrossFit, Hyrox, and Powerlifting), we collect "special category data" regarding your physical health and injuries. We process this data with your explicit consent to ensure your safety during WODs and to tailor coaching to your needs.

5. Data Retention

We retain your personal data only for as long as you are a member of the Pack. Following cancellation, we archive your data for a period defined by our insurance providers before permanent deletion.

6. Contact and Complaints

If you wish to exercise your rights, please speak to a coach at the reception desk. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you feel your data is being handled incorrectly.