MANBILITY | PRIVACY & COOKIE POLICY

Last updated: 22nd June 2026

1. Who we are

This policy explains how Manbility LLP ("Manbility", "we", "us", "our") collects, uses and protects your personal data, and your rights over it. We are the data controller for the information described here.

We handle your personal data in line with UK data protection law — the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

2. The data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact data — name, email address, phone number, and (for trips) billing address.

  • Membership and activity data — attendance, session and fitness-test results, and your progression and patch records.

  • Payment data — handled by our payment provider, Stripe. We receive confirmation of payment and limited card information (such as the last four digits) but we do not see or store your full card number.

  • Special category data — health, medical, or dietary information, which we only collect with your explicit consent to keep you safe during sessions, trips and events.

  • Image data — photographs and video taken at sessions, trips and events.

  • Communications data — messages you send us by email, WhatsApp, direct message, or through our website.

  • Technical and usage data — IP address, device and browser type, and how you use our site, collected via cookies (see Section 9).

3. How and why we use your data, and our lawful basis

We only use your data where the law allows. Our bases are:

What we do Lawful basis Provide and manage your membership, run sessions, trips and events Performance of our contract with you Take and manage recurring and one-off payments Performance of contract / legal obligation Send membership and service messages (receipts, renewals, important updates) Performance of contract / legitimate interests Send marketing emails and community updates Your consent (withdrawable at any time) Keep you safe during physical activity (using health information) Explicit consent; protection of vital interests in an emergency Operate, improve and protect Manbility Our legitimate interests in running the business Meet legal, tax, accounting and regulatory duties Legal obligation

4. Photos and video

We capture images and footage at sessions, trips and events for our content and marketing (social media, website, newsletters), on the basis of our legitimate interest in promoting Manbility. If you'd prefer not to appear, tell a coach or email us — we'll keep you out of published material and remove you on request.

5. Who we share your data with

We share your data only where needed to run Manbility, with:

  • Stripe — to process membership and other payments securely.

  • Our communications platforms — the tools that host our email list and our members-only community group (e.g. email provider, WhatsApp / Meta), to deliver updates and run the community.

  • Trip suppliers and principals — only the data necessary to deliver your trip safely, including relevant health information shared with your consent.

  • Our coaches and staff — to deliver sessions and manage membership.

  • Professional advisers and authorities — where required for legal, tax, accounting, insurance, or emergency-medical reasons.

We never sell your personal data.

6. International transfers

Some of our providers (such as Stripe and Meta) may process data outside the UK. Where they do, we rely on appropriate safeguards — such as UK adequacy decisions or the ICO's International Data Transfer Agreement — so that your data is protected to a standard not materially lower than under UK law.

7. How long we keep your data

We keep your data for as long as you're a member or customer and for a reasonable period afterwards, and longer where we must for legal, tax or accounting reasons (typically up to six years for financial records). We then securely delete or anonymise it.

8. Your rights

Under UK data protection law you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate data

  • Erase your data ("the right to be forgotten")

  • Restrict or object to how we use it

  • Portability — receive a copy in a usable format

  • Withdraw consent at any time, where our use is based on consent (this won't affect anything done before you withdrew it)

To exercise any of these, email contact@manbility.co.uk. We'll respond within one month.

9. Cookies

A cookie is a small file placed on your device. We use:

  • Essential cookies — needed for the site to function (e.g. the shop and checkout). These don't require consent.

  • Analytics cookies — to understand how the site is used. Under current UK rules these low-privacy-risk cookies may be used without prior consent, but you can still control them (see below).

  • Advertising / marketing cookies — e.g. Meta and Google advertising tools. These are only set with your consent, given through our cookie banner.

You can change your choices at any time through our cookie banner or your browser settings. Our banner offers a clear "Accept" and "Reject non-essential" choice.

10. Complaints — how to raise a concern

If you're unhappy with how we've handled your personal data, please tell us first so we can put it right. Email contact@manbility.co.uk with "Data protection complaint" in the subject line, or write to us at the address in Section 1.

We will acknowledge your complaint within 30 days, look into it without undue delay, and keep you informed of the outcome.

You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO) - ico.org.uk, or 0303 123 1113 - though we'd appreciate the chance to resolve it with you first.

11. Changes to this policy

We may update this policy from time to time. The current version, with its "last updated" date, will always be published here, and we'll tell members about any significant change.

12. Contact

Any questions about your data or this policy: contact@manbility.co.uk.

— Manbility LLP