Important notice: From 1 August 2024, City, University of London and St George’s, University of London merged to become City St George’s, University of London. City St George’s is the Data Controller for personal data processed on its behalf. Our details have been updated with the Information Commissioner’s Office (ICO).
Who we are
City St George's, University of London ("City St George's", "we", "our", or "us") is committed to protecting the personal information provided to us and complying with the Data Protection Act 2018, the UK General Data Protection Regulation (GDPR), and other applicable data protection laws.
City St George's is registered with the ICO under registration number Z8947127.
What Information We Collect
We may collect and process the following personal information from you:
- Name, address, telephone number, email address
- Date of birth, gender
- Payment details (for membership processing)
- Emergency contact details · Health and medical information (if required to ensure safe participation)
- Membership and usage records
City St George's also processes and stores CCTV footage for security and safety. For further information, please read our CCTV policy.
Special categories of data: With your explicit consent, we may collect limited health information necessary to ensure your safe participation in gym activities and classes.
How We use Your Information
Your information will be used for the following purposes:
- Administration of your CitySport membership
- Health and safety management
- Delivering services such as class bookings and access control
- Processing payments and managing your account
- Ensuring the safety and security of our facilities
- Sending operational communications about your membership
- Where you have consented, sending marketing information about our services, offers, and events
City St George's is the data controller for the personal data collected.
Our legal Basis for Processing Your Data
Depending on the situation, we will process your personal data based on:
- Performance of a contract (e.g., providing you with gym services)
- Compliance with legal obligations (e.g., health and safety requirements)
- Our legitimate interests (e.g., maintaining the security of our facilities)
- Your consent (e.g., for collecting special category data like health information, or for marketing purposes)
You can withdraw your consent at any time by contacting CitySport@city.ac.uk.
Who We Share Your Data With
We may share your data with:
- Payment service providers (to process your membership payments)
- IT service providers (supporting our membership systems)
- Professional advisors (auditors, legal advisors)
- Health professionals (if required in case of an emergency)
- Law enforcement or regulatory bodies when required to comply with the law
- Sport England (4Global – Moving communities)
We will not sell your data to third parties.
Transfers outside the UK/EEA:
If data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place.
How Long We keep Your Information
We will retain your personal data for as long as necessary to manage your membership and comply with legal obligations. Typically, we will retain membership records for 5 years after membership expiry.
Your Rights
You have the following rights in relation to your personal data:
- To access your data
- To rectify inaccurate data
- To request erasure of your data
- To restrict or object to the processing of your data
- To request data portability
- To withdraw consent where processing is based on consent
- To lodge a complaint with the Information Commissioner’s Office (ICO)
Further details about your rights are available on the ICO website.
Marketing Communications
If you opt-in to marketing communications, CitySport may contact you about offers, events, and services. You can unsubscribe at any time by following the instructions in the communication or contacting us directly.
Contact Details
Should you have any concerns about your personal data at City St George's please contact the Data Protection Officer at dataprotection@citystgeorges.ac.uk. You can also seek advice from the Information Commissioner's Office.