Privacy notice
Last updated October 2026
This notice explains what we collect when you buy a launch offer pass, join the waitlist or contact us, why we collect it, and your rights. We keep it short and plain.
Who we are
The Shred Club is owned and operated by Shred by Sully Ltd, Oldham, United Kingdom . We are the controller of your personal data. Contact us at info@theshredclub.co.uk.
What we collect
- Your name, mobile number and email address
- Your gender (female, male or prefer not to say), so we can offer women's pricing and women-only classes
- If you give it: your date of birth (for a birthday message) and how you heard about us
- The classes you tell us you're interested in
- That you accepted the health waiver, and whether you chose to receive news and offers (a separate, optional choice)
- Your pass and payment status. Stripe handles your card or wallet details; we never see or store your full card number
- Basic technical details: the page you came from, campaign tags in the link, and security checks that stop spam
Why we use it
- To provide your pass: taking payment, confirming your pass, booking and contacting you about your classes by email or WhatsApp. Our legal basis is our contract with you.
- Waitlist: if you join the waitlist, we'll contact you about the next release and the opening. Our legal basis is your consent.
- News and offers: only if you ticked the box. Our legal basis is your consent, which you can withdraw at any time by replying "stop" or emailing us.
- To keep the site safe: preventing spam and abuse. Our legal basis is legitimate interests.
We don't sell your data, and we don't use it for anything unrelated to The Shred Club.
Who we share it with
Only the services that help us run the gym, under contracts that protect your data:
- Cloudflare (website hosting, spam protection and the database that stores applications)
- Google Workspace (email)
- WhatsApp, a Meta service (messages you've asked for)
- Stripe (payments, once you pay)
- Hash Intelligence, who build and maintain this website and booking system for us
Some of these providers may process data outside the UK. Where they do, they use approved safeguards such as the UK International Data Transfer Addendum or standard contractual clauses.
How long we keep it
If you become a member, we keep your details for as long as you're a member and up to 6 years afterwards for accounting and legal reasons. If you register but don't join, we delete your details within 12 months of the gym opening, or sooner if you ask.
Your rights
You can ask us to see, correct or delete your data, to stop contacting you, to restrict how we use it, or to send it to you in a portable format. Email info@theshredclub.co.uk and we'll respond within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.
Cookies
This site doesn't use advertising or tracking cookies. Our spam protection may set a strictly necessary cookie to check you're a real person.