Last updated: 06.10.2026
Who we are. NOCTIS Health Ltd ("NOCTIS", "we", "us") is the data controller for personal data collected through www.noctisgym.com, through our membership process and through CCTV at our facility. Company number 17240455. Address: Great Todham Stables, Cowdray Estate, Midhurst, West Sussex, GU29 0BU. Contact: hello@noctisgym.com.
What we collect.
Enquiry and registration details: name, email, phone number and any message you send us.
Membership details: contact details, emergency contact, date of birth, and the health information you give us in your health declaration and waiver.
Payment details: payments are handled by Stripe. We do not store your card details.
Newsletter details: your email address and name.
Booking details: class and session bookings and attendance.
CCTV images: video recorded inside and around the facility.
Website data: cookies and similar technologies (see our Cookie Policy), plus basic technical data such as IP address and browser type.
Why we use it and our legal basis.
To respond to enquiries and process membership applications (pre-contract steps and contract).
To provide membership, bookings and 24-hour access (contract).
To keep members safe, including reviewing the health information you provide so we can assess whether training is suitable for you. Health data is special category data, and we process it on the basis of your explicit consent, which you can withdraw at any time. Withdrawing may affect our ability to offer you access.
To send our newsletter (consent). You can unsubscribe at any time.
To take payments and keep financial records (contract and legal obligation).
To operate and secure the facility, protect members and property, prevent and detect crime and deal with incidents, using CCTV (legitimate interests).
To improve our website and understand how it is used (consent for non-essential cookies).
CCTV. CCTV operates inside and around the facility, including during 24-hour access, and signs are displayed to tell you. Recordings are used to protect members, staff and property, to deter and investigate crime, and to deal with incidents and insurance claims. Footage is viewed only by authorised people at NOCTIS and is kept for 30 days before it is automatically deleted, unless it is needed for an incident or investigation. We may share footage with the police, insurers or other authorities where there is a lawful reason to. You can ask for a copy of footage of yourself by emailing hello@noctisgym.com, and we may need to blur other people in it.
Who we share it with. We store the personal information you give us in our customer records, held in Notion. We don't sell your data and we don't share it with anyone else for their own purposes. A small number of providers handle data on our behalf, only to run NOCTIS: Framer (our website host, which processes form submissions) and Stripe (payments), Some of these, including Notion, may process data outside the UK, and where they do we make sure appropriate safeguards are in place. We may also disclose information where the law requires it, for example to the police or our insurers.
How long we keep it.
Enquiries that don't lead to membership: up to 12 months.
Member records and waivers: for the length of your membership and 6 years afterwards.
Financial records: 6 years.
Newsletter data: until you unsubscribe.
CCTV footage: 30 days, unless needed for an incident or investigation.
Your rights. Under UK data protection law you can ask to access, correct, delete or restrict the use of your data, object to processing, request a copy to move elsewhere, and withdraw consent at any time. Email hello@noctisgym.com. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Security. We use reasonable technical and organisational measures to protect your data, including restricting access to our customer records to people who need it. No online system is completely secure.
Changes. We may update this policy and will post the new version here with a new date.