Empire Gym · Matthew Hill, Cork

Your data, handled honestly.

Last updated: 18 June 2026

This Privacy Policy explains how Empire Gym collects, uses and protects the personal data you share with us when you visit our website, buy a membership, sign up for coaching, or get in touch. It follows the EU General Data Protection Regulation (GDPR) and Ireland's Data Protection Act 2018.

Data controller

Empire Gym, Unit 3, Matthew Hill, Cork, T12 CR22, Ireland.
Email: empiregymcork@outlook.com

What we collect

We collect only what we need to deliver the service you've asked for.

When you buy a membership or coaching (via Stripe)

Name, email address, and billing address you enter at checkout.
Payment-card details, these are processed by Stripe, not stored on our servers. We see only the masked last four digits and the receipt metadata.
Membership tier or coaching product, start date and renewal status.

When you complete the SS Coaching onboarding form

Identity: full name, age, height, weight.
Health information you choose to share: body composition, weak body parts, metabolism, illnesses, injuries or exercises you can't perform, and, where applicable, cycle status.
Training, nutrition, and goal information you provide.
Your consent (yes/no) to your transformation being shared on social media.
Your first name only is stored in your own browser's localStorage under the key ss_onboard_name so the welcome page can greet you. It never leaves your device.

When you contact us

Email content you send to empiregymcork@outlook.com, plus any messages you send us on Instagram (@empiregym.cork) or WhatsApp.

When you visit the site

Standard server logs (IP address, user-agent, timestamp) kept briefly for security and abuse prevention.
We don't use advertising or analytics cookies on this site today. If that changes, we'll publish a cookie banner and update this policy first.

Why we use it, and our lawful basis

To provide your membership or coaching, GDPR Article 6(1)(b), performance of a contract.
To build your tailored SS Coaching plan, Article 6(1)(b). Special-category health data is processed only with your explicit consent, Article 9(2)(a).
To use your transformation on social media, only with your explicit consent, Article 6(1)(a). You can withdraw consent at any time by emailing us; it won't affect any processing we did before you withdrew.
To meet our tax, accounting and Stripe-related obligations, Article 6(1)(c), legal obligation.
To keep the site and our members safe, Article 6(1)(f), legitimate interests in security and fraud prevention.

Who we share it with

We only share your data with the processors we need to run the gym and the coaching service. Each one is bound by data-processing terms.

Stripe Payments Europe Ltd, checkout, payment processing, subscription billing.
WhatsApp / Meta Ireland Ltd, if you choose to send your onboarding answers via WhatsApp using the in-form button.
Microsoft Ireland (Outlook), our email provider for empiregymcork@outlook.com.
Vercel Inc., site hosting (EU edge).
Supabase / AWS Ireland, backend database where the marketing site reads business data (no personal data from the onboarding form is stored there today).

We do not sell your data or share it for advertising.

How long we keep it

Membership and Stripe billing records, for the duration of your membership plus 7 years to meet Irish tax-record retention.
SS Coaching onboarding answers and check-in data, for the duration of your coaching, then up to 24 months after, unless you ask us to delete sooner.
Email correspondence, up to 24 months from the last reply.
Server logs, up to 30 days.

Your rights

Under GDPR you have the right to:

Ask for a copy of the personal data we hold about you (access).
Have inaccurate data corrected (rectification).
Ask us to delete your data (erasure) where the lawful basis allows.
Restrict or object to processing.
Receive your data in a portable format.
Withdraw any consent you previously gave (without affecting earlier processing).

To exercise any of these rights, email empiregymcork@outlook.com, we'll respond within 30 days.

If you're unhappy with how we've handled your data, you can lodge a complaint with the Irish supervisory authority, the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

Children

Membership is open to ages 14 and up; under-16s must have a parent or guardian present at sign-up. We don't knowingly collect personal data from children under 14.

International transfers

Our processors are based in the EU/EEA where possible. Where data is transferred outside the EEA (for example, some Meta/WhatsApp infrastructure), it relies on Standard Contractual Clauses approved by the European Commission.

Changes to this policy

We'll update this page when our practices change and note the new "Last updated" date at the top. Material changes will be flagged at checkout or on the home page.

Questions about this policy? Email empiregymcork@outlook.com.

← Back to Empire Gym