Privacy Policy

1) Who we are

2) Data we collect

We keep data collection minimal and purposeful.

• Contact details: name, email, phone — when you message us via the contact form or WhatsApp.
• Message content: what you write in forms or chats (e.g., goals, dates).
• Technical data: basic device and log information needed to run the site securely (e.g., IP in server logs).
• Membership information (TBC): if you sign up in person, we may collect plan choice and payment confirmations.
• Cookies & analytics (consent-based): see Cookies & analytics.

We do not collect sensitive health data via the website. Any fitness screening is handled in person and kept private.

3) How we use data

• Respond to enquiries and provide customer support.
• Provide services such as bookings, memberships, and classes (TBC details).
• Operate and secure the website (fraud prevention, abuse monitoring).
• Improve our services (aggregate insights from consented analytics).
• Legal compliance and enforcing house rules if needed.

4) Legal basis

Depending on the context, we process data under:

• Contract: to provide services you request (e.g., membership, booking).
• Legitimate interests: site security, preventing abuse, replying to messages.
• Consent: analytics/marketing cookies, optional newsletters or offers.
• Legal obligations: where applicable (e.g., receipts, accounting).

If local laws require additional bases or notices, we follow them.

5) Sharing & processors

We do not sell your personal data. We may share limited data with trusted processors to deliver our services:

• Hosting & infrastructure: to run the website and email.
• Email delivery: to send contact-form messages to our inbox.
• Analytics (consent-based): to understand how the site is used.
• Messaging platforms: if you contact us via third-party services (e.g., WhatsApp), your data is processed by those platforms under their terms.

Processors act on our instructions and must keep data secure.

6) International transfers

Our gym is in Thailand. Depending on your location and the services used (e.g., hosting, email, analytics), your data may be processed outside your country. We select reputable providers and aim for appropriate safeguards.

7) Retention

• Enquiries: usually up to 12 months after last contact.
• Membership-related records (TBC): for as long as necessary to provide the service and meet legal/accounting duties.
• Server logs: typically up to 3 months unless needed for security.
• Analytics cookies: per your consent and browser settings.

8) Your rights

You may have rights to access, correct, delete, or restrict your personal data; to object to certain uses; and to data portability. You can also withdraw consent where processing is based on consent.

To exercise these rights, contact us at hello@thegymsamui.com. We will respond within a reasonable timeframe.

9) Cookies & analytics

If you contact us through third-party platforms (e.g., WhatsApp, Instagram), those services may set their own cookies under their policies.

10) Security

We use reasonable technical and organisational measures to protect personal data. No online system can be 100% secure, but we work to prevent unauthorised access, misuse, and loss.

11) Contact

12) Changes

We may update this Privacy Policy from time to time. We post the new version here and adjust the date at the top. Material changes may be highlighted on the site.