TrenixaGym Privacy Notice

Effective date: 10 September 2026

1. Who we are

Trenixa Ltd, trading as TrenixaGym, is the controller of personal data processed through the TrenixaGym website and mobile applications. Trenixa Ltd is incorporated in England and Wales under company number 17148702 and has its registered office at 21 David Street, Denton, Manchester, M34 7TA.

For privacy enquiries or to exercise your rights, email info@trenixa.com, use https://trenixagym.com/contact-us, or write to the registered office.

2. Information we collect

Depending on how you use TrenixaGym, we may collect:

Account and identity information, including name, email address, account type, authentication identifiers and profile image.
Contact information, including telephone number where optionally provided.
Gym Owner and listing information, including authority, claim and verification evidence, business details and listing changes.
Reviews and content, including ratings, text, visit date, photographs, replies, reports and moderation records.
Enquiry information, including the selected gym, name, email address, optional telephone number, message and related communications held by us.
Saved gyms, searches, listing views, interactions and other usage events.
Device and technical information, including IP address, browser or device information, session identifiers, security signals and logs.
Approximate or precise location when you choose to provide device permission or enter a postcode or location.
Notification preferences and mobile push-notification tokens.
Support, complaint, appeal, privacy-request and correspondence records.
Subscription and payment administration information if paid services are introduced. Payment-card details are entered with the payment provider and are not stored by Trenixa.

We may receive information from you, your device, authentication providers, Gym Owners, service providers and public or licensed listing sources.

3. How and why we use information

We use personal data to:

Create, authenticate, secure and administer accounts and provide requested Platform functions.
Display and maintain listings, reviews, ratings and permitted content.
Deliver enquiries to the selected claimed Gym Owner.
Verify listing claims and the authority of Gym Owners.
Provide support and respond to complaints, appeals and rights requests.
Detect fraud, fake reviews, abuse, unlawful content and security incidents.
Send account, security, enquiry, moderation and service notifications.
Measure and improve performance, reliability, search and user experience.
Establish, exercise or defend legal claims and comply with legal obligations.
Send marketing only where a valid permission or other lawful basis applies, with a means to opt out.

Our lawful bases may include performing a contract or taking requested pre-contract steps, complying with law, pursuing legitimate interests in operating and protecting the Platform, and consent where required. Where we rely on consent, it can be withdrawn without affecting earlier lawful processing.

We do not use solely automated decision-making that produces legal or similarly significant effects on users.

4. Who receives information

We may share personal data with:

A claimed Gym Owner when you ask that gym to contact you.
Hosting, database, storage and content-delivery providers, including Amazon Web Services.
Authentication, application-security and notification providers, including Google and Firebase.
Email-delivery providers, including Brevo.
Mapping and location providers, including Google Maps and OpenStreetMap.
Bot and abuse-prevention providers, including Google reCAPTCHA.
Payment providers, including Stripe, if paid services are enabled.
Professional advisers, insurers, auditors, authorities or courts where reasonably necessary.
A buyer or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.

Service providers may process information only for defined services and subject to applicable contractual and security requirements. A Gym Owner receiving an enquiry is independently responsible for its subsequent handling of the information.

We do not sell personal data.

5. International processing

Core application infrastructure is hosted in the United Kingdom through AWS London. Some providers may process data in the European Economic Area, United States or other countries. Where UK personal data is transferred outside the United Kingdom, we use an applicable UK adequacy regulation, the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism, together with supplementary measures where appropriate.

6. Cookies and similar technologies

We use cookies, browser storage, device storage, SDKs and similar technologies for authentication, security, preferences, mapping, bot prevention and measurement. Optional technologies are controlled as described in the Cookie and Similar Technologies Notice.

7. Retention

We apply the following standard periods, subject to earlier deletion where information is no longer required and longer retention where reasonably necessary for an active legal claim, complaint, fraud investigation or legal obligation:

Active account data: while the account remains active.
Deleted account data: delete or anonymise within 30 days.
Backups: expire through the backup cycle within 90 days and remain protected and beyond ordinary use meanwhile.
Published reviews and photographs: while published or until removed.
Removed content and moderation evidence: 12 months after removal.
Gym enquiries: 24 months after submission.
Support tickets and issue reports: 24 months after closure.
Privacy requests: three years after completion.
Gym Owner verification evidence: delete within 90 days after final approval or rejection unless needed for an active dispute.
Authentication and security logs: 12 months.
Administrative audit records: six years.
One-time-password records: delete or irreversibly anonymise within 30 days.
Identifiable analytics events: 13 months.
Search history linked to an account or device: 90 days.
Notification history: 12 months.
Inactive device tokens: 90 days.
Billing, invoice and payment administration records: six years.
Fraud, abuse and complaint records: up to six years where necessary.
Legal claims and disputes: six years after closure, or longer while a claim remains active.

At the end of the applicable analytics or search period, identifying fields are removed so that the remaining information cannot reasonably identify or single out a person. Genuinely anonymised statistics and aggregates may be retained indefinitely because they are no longer personal data.

8. Account deletion

Account deletion removes the account’s reviews and associated review photographs. Other account-associated information is deleted or anonymised within 30 days. Enquiry message text may remain after the user’s name, email address and telephone number are removed. Limited information may also remain temporarily in backups or be retained for security, accounting, complaint, dispute or legal purposes. Anonymous statistics already derived from activity may remain.

9. Your rights

Subject to applicable conditions, you may request access to, correction of, deletion of or restriction of your personal data; object to processing; request portable data; or withdraw consent. You may also object to direct marketing at any time.

Email info@trenixa.com or use https://trenixagym.com/contact-us. We may request proportionate information to verify identity. Requests are handled manually and recorded securely.

You may complain to the Information Commissioner’s Office at https://ico.org.uk/. We would welcome the opportunity to address the concern first.

10. Security

We use technical and organisational measures designed to protect information, including access controls, encryption, monitoring and protected infrastructure. No system can be guaranteed completely secure. Please protect your credentials and notify support@trenixa.com of suspected misuse.

11. Children

TrenixaGym is not intended for anyone under 18. We do not knowingly permit an under-18 to create an account. Contact info@trenixa.com if you believe an under-18 has provided personal data.

12. Changes

We may update this Notice to reflect changes in the Platform or our processing. We will update the effective date and provide an appropriate notice of material changes.