Privacy notice
Your personal information and what we do with it
1. Why do you collect my information?
Gloji Gym is an online physical activity platform, aimed to help you become more active, and is provided by Thrive Tribe. We collect your information for you to have an individual account on the Gloji Gym platform. Your data will be processed for anonymised reporting purposes only.
2. Who do you get my data from?
We get your data when you complete the sign-up form on gym.gloji.co.uk
3. How does data protection law allow you to use my data?
The Data Protection legislation has two levels of data:
Personal data (including name, identification numbers, location data, online identifiers, and any physical, physiological, genetic, mental, economic, cultural or social identity of an individual). When using this information, the legal basis we use is consent.
Special category data (including race/ethnicity, political opinions, religious/philosophical beliefs, trade union membership, genetics/biometrics, health records, sex life, sexual orientation and criminal activity/convictions). When using this information, the legal basis we use is explicit consent.
4. What information of mine do you use?
The personal data we use for you includes your name and location data. This is used to ensure that only eligible users from commissioned service areas are accessing Gloji Gym, and that users can have an individual account that only they can access.
We also use more sensitive special category data including health records. We use this to ensure that Gloji Gym users are not contraindicated to increase their physical activity levels.
5. Do you share my information with anyone?
We share you information with no external organisations, only internal Thrive Tribe services. This data will be anonymised and used for reporting back to relevant referring services.
6. Does any of my information get sent outside of the UK?
Yes, to enable us to process your sign-up we use a U.S. based platform named, Memberstack. To view their privacy notice visit www.memberstack.com/legal/privacy-policy
7. How long do you keep my information?
We keep your information in line with Thrive Tribe policies the NHS Records Management Code of Practice 2021. We store all client data for eight years.
8. What about my rights under Data Protection law, how can I activate them?
Under Data Protection law you have the right to:
Be informed how your data is used (which is what this leaflet is doing)
Access to your information
Rectification of errors
Erasure (in certain circumstances)
Restriction of processing (in certain circumstances)
Objection to processing
Data Portability
Understand whether profiling or automated decision-making is being used (see Section 9
If you would like to request or discuss any of these, please contact our Data Protection Officer using the details at the end of this leaflet.
9. Do you use any automated decision-making or profiling on my information?
We DO NOT use your information to make automated decisions about your or profile you.
10. What do I do if I am concerned about how you are using my information?
In the first instance we would be grateful for the opportunity to respond to your concerns ourselves and hopefully sort out any issues for you. To help with this, please write to our Data Protection Officer at the following address:
poonam.ahuja@thrivetribe.org.uk
If you are not satisfied with the outcome of our support, you may take your complaint to the Information Commissioner’s Office, which regulates Data Protection. Its address is Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. It can be contacted by telephone on 0303 123 1113 or by email on icocasework@ico.org.uk