Privacy Policy
Last updated: 18 August 2026
Hitsona Chepstow is committed to protecting your privacy and handling your personal information fairly, transparently and securely.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with and the rights you have in relation to your information.
1. Who we are
Hitsona Chepstow is operated by RAW Health Limited, trading as Hitsona Chepstow.
RAW Health Limited is the data controller responsible for the personal information described in this policy.
Company: RAW Health Limited
Trading name: Hitsona Chepstow
Company number: 14788437
Registered office: Woodlands Grange, Woodlands Lane, Bradley Stoke, Bristol, BS32 4JY, United Kingdom
Email: [email protected]
References in this policy to "Hitsona Chepstow", "we", "us" or "our" mean RAW Health Limited trading as Hitsona Chepstow.
2. Information we collect
Depending on how you interact with us, we may collect and process information including:
your name;
email address;
telephone number;
postal address;
date of birth;
emergency contact details;
membership and booking information;
attendance and class history;
payment and transaction information;
communications you have with us by email, telephone, SMS, messaging services, social media or in person;
information you provide when completing forms, questionnaires, assessments or surveys;
marketing preferences and records of consent;
information about how you use our website and online services, such as your IP address, device, browser and website activity; and
information provided when you respond to our advertising or interact with our online marketing.
Health information
As a fitness business, we may also need to collect limited information about your health where this is relevant to your participation in our services. This may include information you provide in health screening forms, PAR-Q forms, injury information or information about medical conditions that you choose to tell us about.
Health information is classed as special category personal data and receives additional protection under data protection law.
We will only collect health information where it is reasonably necessary and where we have an appropriate lawful basis and condition for processing it. Where required, we will ask for your explicit consent.
Please only provide health information that is relevant to your participation in our services.
3. How we collect your information
We may collect information directly from you when you:
enquire about Hitsona Chepstow;
complete a form on our website or one of our landing pages;
complete an online questionnaire, scorecard or assessment;
book a consultation, trial, class or other appointment;
become a member;
book or attend a session;
contact us by telephone, email, SMS, social media or another messaging service;
make a payment;
complete a health or fitness questionnaire;
enter a competition, promotion or survey; or
choose to receive marketing communications from us.
We may also receive information through services we use to operate our business, including our booking and membership systems, payment providers, lead management systems and advertising platforms.
4. How and why we use your information
Responding to enquiries
If you contact us, request information, complete an enquiry form or ask us to contact you, we may use the details you provide to respond to your request and discuss our services with you.
Our lawful basis will normally be taking steps at your request before entering into a contract and/or our legitimate interests in responding to people who have expressed an interest in our services.
Providing our services
If you become a member or purchase services from us, we use your information to:
administer your membership;
manage bookings and attendance;
provide fitness sessions and other services;
communicate with you about your membership, bookings and services;
manage payments and accounts; and
provide customer support.
Our lawful basis is normally that the processing is necessary to perform our contract with you.
Safety and health information
We may use relevant health or injury information to help us understand whether any reasonable adjustments may be appropriate when you participate in our services and to help us operate our sessions safely.
Where this involves special category health information, we will only process it where an appropriate condition under data protection law applies, which may include your explicit consent.
Running and improving our business
We may analyse membership, booking, attendance and other business information to understand how our services are being used, improve our services, plan class schedules and operate our business effectively.
Where personal information is involved, we normally rely on our legitimate interests in operating and improving our business.
Where possible, we may use aggregated or anonymised information that does not identify individual people.
Legal and financial obligations
We may process information where necessary to maintain appropriate financial and business records, comply with tax and accounting requirements, respond to legal claims or meet other legal obligations.
Our lawful basis is compliance with a legal obligation and, where appropriate, our legitimate interests in protecting and managing our business.
5. Email, SMS and other marketing
We may send you information about Hitsona Chepstow, including news, fitness content, offers, events and information about our services, where we are permitted to do so.
Where required by law, we will ask for your consent before sending marketing communications by email or SMS.
In some circumstances, we may send marketing about our own similar services to existing customers where the law allows us to do so and where you were given an opportunity to opt out when your details were collected.
You can change your mind at any time. You can unsubscribe using the link provided in our marketing emails, follow the opt-out instructions in our text messages, or contact us directly.
We may retain limited information about your opt-out preference so that we can ensure we respect your wishes in the future.
Service messages relating to your membership, bookings, payments or other services you have requested are not marketing communications and may still be sent where necessary.
6. Online questionnaires, assessments and lead forms
We may use online forms, questionnaires, scorecards or assessments to provide information or personalised results and to help us understand what services may be relevant to you.
The information you provide may be used to:
provide your results;
respond to your enquiry;
personalise our communications with you;
understand your interests and goals; and
discuss relevant Hitsona Chepstow services with you where appropriate.
Completing an assessment or providing your contact details does not automatically mean that you have agreed to receive ongoing marketing communications by every communication method.
Where consent is required for ongoing email or SMS marketing, we will request it separately.
Our lifestyle and fitness questionnaires are intended to provide general information and are not medical assessments, diagnoses or medical advice.
7. Cookies and tracking technologies
Our websites and landing pages may use cookies and similar technologies.
Some cookies are necessary for our websites to function. Others may help us understand how people use our websites or measure the effectiveness of our marketing.
Where required by law, non-essential cookies and tracking technologies will only be used after you have given your consent.
You can manage cookies through your browser settings and, where available, through cookie controls provided on our websites.
8. Analytics
We may use analytics services to understand how visitors use our websites and online services.
These services may collect information such as:
pages visited;
approximate location;
device and browser information;
IP address;
how a visitor arrived at our website; and
interactions with pages and content.
Where analytics technologies require consent under applicable law, they will only be activated after consent has been given.
We use this information to understand website performance and improve our services and marketing.
9. Advertising and conversion measurement
We may use advertising platforms, including Meta, which operates services such as Facebook and Instagram, to advertise Hitsona Chepstow and measure the effectiveness of our advertising.
Where appropriate, we may provide information about enquiries or conversions to advertising platforms to help us understand whether our advertising resulted in an enquiry or other action.
Depending on the service used, this may involve information such as contact details or information about the conversion. Advertising platforms may process this information in accordance with their own privacy policies.
Where we share personal information for advertising or conversion measurement purposes, we will only do so where we have an appropriate lawful basis and will take reasonable steps to protect the information involved.
10. Who we share information with
We do not sell your personal information.
We may share personal information with trusted organisations that provide services necessary for us to operate Hitsona Chepstow. These may include providers of:
membership and class booking systems;
customer relationship management and lead management systems;
website, landing page and online form services;
email and SMS communications;
payment processing;
accounting and bookkeeping;
cloud hosting and data storage;
analytics;
advertising and marketing services; and
IT and professional support.
These organisations may process personal information on our behalf or, in some circumstances, act as independent data controllers.
We may also disclose information where required by law, to establish or defend legal claims, to protect the rights or safety of individuals, or in connection with a sale, restructuring or transfer of our business.
We require organisations processing information on our behalf to handle personal information appropriately and securely.
11. International transfers
Some of the technology providers we use may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal mechanism is in place as required by UK data protection law.
This may include transfers to countries recognised by the UK as providing an adequate level of protection or the use of approved contractual safeguards.
You can contact us if you would like further information about the safeguards relating to international transfers of your personal information.
12. How long we keep your information
We only keep personal information for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting and regulatory requirements.
The period will depend on the type of information and our relationship with you.
For example:
membership, contractual and transaction records may be retained for up to six years after our relationship with you ends where required for legal, tax or accounting purposes;
enquiry information will be retained for a reasonable period while the enquiry remains relevant and may then be deleted or anonymised;
health information will only be retained for as long as reasonably necessary for the purpose for which it was collected;
marketing information may be retained while you remain subscribed or while we have another lawful reason to contact you; and
where you opt out of marketing, we may retain sufficient information on a suppression list to ensure that we continue to respect your preference.
We periodically review the information we hold and delete or anonymise information that is no longer required.
13. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Access to personal information is restricted to people and service providers who reasonably need it for the purposes described in this policy.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
14. Your data protection rights
Depending on the circumstances, UK data protection law gives you rights including:
Access - you can ask us for a copy of the personal information we hold about you.
Rectification - you can ask us to correct inaccurate or incomplete information.
Erasure - you can ask us to delete your personal information in certain circumstances.
Restriction - you can ask us to restrict how we use your information in certain circumstances.
Data portability - in certain circumstances, you can ask us to provide information in a portable format or transfer it to another organisation.
Objection - you can object to certain processing based on legitimate interests.
Withdrawal of consent - where we rely on your consent, you can withdraw it at any time. This will not affect processing that took place before consent was withdrawn.
You have the right to object at any time to the use of your personal information for direct marketing.
There is normally no charge for exercising your data protection rights.
To exercise any of these rights, contact us at [email protected].
15. Automated decision-making and profiling
We may use information such as responses to questionnaires or assessments to group responses, calculate scores or personalise the information we show you.
We may also use advertising platforms to help understand or identify audiences that may be interested in our services.
We do not use solely automated decision-making that produces legal or similarly significant effects on you.
16. Children's information
Our services are primarily intended for adults.
Where we provide services to a child or young person, we will take appropriate steps to ensure that their information is handled in accordance with applicable data protection law and, where appropriate, involve their parent or guardian.
17. Links to other websites
Our websites may contain links to websites or services operated by other organisations.
We are not responsible for the privacy practices of those organisations. You should review their privacy information when using their websites or services.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, the services we use or applicable law.
The latest version will be published on our website and the "Last updated" date at the top of this policy will be changed accordingly.
19. Contact us
If you have any questions about this Privacy Policy or how we use your personal information, or if you wish to exercise your data protection rights, please contact:
RAW Health Limited trading as Hitsona Chepstow
Woodlands Grange
Woodlands Lane
Bradley Stoke
Bristol
BS32 4JY
United Kingdom
Email: [email protected]
20. Complaints
If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to address them.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information about making a complaint is available on the ICO website.