Privacy Policy

Who we are

GymSafe provides health and safety services to gyms and fitness facilities in Ireland. For the purposes of data protection law, GymSafe is the data controller for the personal data described below. You can contact us at info@worksafe.ie.

What we collect

• Enquiry details — your name, gym or business name, email address, phone number and the content of your message when you use our contact form.
• Client portal accounts — the email address used to sign in, sign-in timestamps, and a record of which documents an account has downloaded.
• Technical data — standard server logs generated when pages are requested, used to keep the service secure and available.

We do not use advertising or tracking cookies. Sign-in uses a strictly necessary session token stored in your browser so that you stay signed in.

Why we use it

• To respond to your enquiry and provide the services you ask for (legitimate interests, and steps prior to entering a contract).
• To operate the client document portal and control who can access your documents (contract).
• To keep an audit record of document access for compliance purposes (legal obligation and legitimate interests).

Who we share it with

We do not sell personal data. We share data only with service providers who host this website, our database and our document storage, and who process data strictly on our instructions. Where a provider processes data outside the European Economic Area, that transfer is covered by Standard Contractual Clauses.

How long we keep it

• Enquiries: up to 24 months from the last contact, unless a client relationship begins.
• Client portal accounts and documents: for the duration of the engagement and up to 7 years afterwards where records must be retained.
• Download and audit logs: 24 months.

Security

Client documents are held in private storage that is not publicly reachable. Downloads are served through short-lived links that expire after 60 seconds, and every download is logged against the account that requested it. Access to the team dashboard is restricted to named GymSafe staff accounts.

Your rights

You have the right to request access to your personal data, to have inaccurate data corrected, to request erasure or restriction of processing, to object to processing based on legitimate interests, and to data portability. To exercise any of these rights, email info@worksafe.ie. If you are not satisfied with our response, you may lodge a complaint with the Irish Data Protection Commission at dataprotection.ie.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.