1. Who we are (data controller)
Core Strength Equipment is a UK-based premium gym equipment supplier and community hub serving East Yorkshire, Yorkshire, North East England, and customers across the UK via delivery and installation support. When we refer to “we”, “us”, or “our” in this policy, we mean Core Strength Equipment as the organisation responsible for deciding how and why your personal data is processed.
Controller identity: Core Strength Equipment
Registered / trading address: 8 Brough Road, South Cave, Brough, East Yorkshire, England, HU15 2BX
General contact email: [email protected]
Privacy contact email: [email protected]
Telephone: +44 1430 898240
We built this policy to be practical for real customers: gym owners requesting commercial fit-outs, PTs and studio operators comparing flooring, and serious home gym buyers in East Yorkshire and beyond. If anything is unclear, contact us and we will explain what we do with data in plain terms.
2. Personal data we collect
The data we collect depends on how you interact with us. We only collect what we need to respond to your enquiry, deliver services, and improve the website experience. Categories may include:
2.1 Data you provide directly
- Identity and contact data: full name, email address, and (optionally) phone number.
- Enquiry and project details: message content, project type (for example commercial gym fit-out, gym flooring, home gym setup), location details you choose to share (for example East Yorkshire, Hull area, or UK site location), and timescales.
- Marketing preferences: whether you opt in to receive occasional emails about stock updates, new equipment, or community events.
2.2 Data collected automatically when you use the site
- Technical data: IP address, device type, browser type and version, operating system, language settings, and referral source.
- Usage data: pages visited, approximate time on page, clicks, scroll behaviour, and navigation paths.
- Cookie data: your cookie consent choice and, depending on consent, analytics identifiers.
2.3 Data from communications
- Email correspondence: messages you send to [email protected] or [email protected] and our replies.
- Telephone call records: we may keep brief notes to ensure we accurately follow up on quotes, deliveries, and installation coordination.
We do not intentionally collect special category data (for example medical information) through our website forms. Please do not include sensitive personal information in enquiry messages. If you choose to share it, we will treat it carefully and limit internal access.
3. How we collect personal data
We collect personal data through several channels. The main ways are:
- Web forms: when you submit an enquiry, request a quote, or request a consultation through forms on our website (for example from the homepage or contact page).
- Cookies and similar technologies: when you browse the site, we use cookies to remember your cookie consent choice and, if permitted, to understand how visitors use pages such as gym equipment UK categories and commercial fit-out content.
- Analytics tools: we may use Google Analytics 4 to understand traffic patterns and page performance. We only run analytics in a way that respects your cookie choices.
- Marketing pixels: if we use the Meta Pixel for advertising measurement, it will only operate where permitted by your cookie settings and applicable law.
- Server logs: our hosting and security systems create logs (for example IP address, timestamps, requested pages) to keep the site reliable and to mitigate abuse.
- Direct contact: when you contact us by email, phone, or in person (including showroom appointments in the North Newbald area), we collect the information you provide so we can respond.
Our site does not use content that changes depending on whether you accept cookies. Cookie preferences affect analytics and marketing technologies, not the information you can read on our pages.
4. Legal bases for processing (UK GDPR Article 6)
We process personal data only when we have a lawful basis under the UK GDPR. The lawful basis depends on what you are doing on the site and what you request from us.
4.1 Consent (Article 6(1)(a))
We rely on consent where you have a genuine choice and can withdraw it at any time. Examples include:
- Opting in to receive marketing emails about new product arrivals, premium strength machines, restocks, and community events.
- Allowing marketing cookies and pixels (where used) to measure and improve advertising campaigns.
- Allowing analytics cookies (where used) to help us understand how visitors use the site.
4.2 Contract (Article 6(1)(b))
We process data when it is necessary to take steps at your request prior to entering into a contract, or to perform a contract. Examples include:
- Responding to quote requests for gym equipment, gym flooring, or commercial fit-out services.
- Arranging delivery and installation support across the UK.
- Managing customer support for order issues or product queries.
4.3 Legitimate interests (Article 6(1)(f))
We may process certain data when it is in our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include:
- Keeping the website secure, preventing abuse, and maintaining service reliability.
- Understanding which content is useful, such as which pages about commercial gym flooring in Yorkshire are most visited, so we can improve clarity and navigation.
- Responding to general enquiries and keeping internal records that help us deliver consistent service.
4.4 Legal obligation (Article 6(1)(c))
We may process and retain certain information where required to comply with legal or regulatory obligations, such as responding to lawful requests from authorities or maintaining records required for tax and accounting purposes where relevant.
5. How we use your data (purposes of processing)
We use personal data to deliver a high-quality customer experience and to support our core services as a premium fitness equipment supplier. Typical uses include:
- Responding to enquiries: replying when you request a quote for gym equipment UK supply, ask for advice on home gym setup in East Yorkshire, or need guidance for commercial gym fit-outs nationwide.
- Providing recommendations: using your room measurements, budget, and training priorities to suggest appropriate equipment, flooring thicknesses, and layout ideas.
- Customer support: handling questions about delivery, installation coordination, aftercare, and product compatibility.
- Marketing (consent-based only): sending occasional updates if you opt in, for example new stock, accessories, or supplier announcements relevant to gyms and home setups.
- Website improvement: analysing aggregate usage to improve page structure, navigation, and clarity of information. For example, improving how we explain flooring options for high-impact areas.
- Fraud prevention and security: protecting our site and systems against suspicious activity, abuse, or attempts to disrupt service.
- Legal compliance: responding to lawful requests and maintaining appropriate records.
We do not sell personal data. We do not use personal data to make automated decisions that produce legal or similarly significant effects on you.
6. Retention periods
We keep personal data only for as long as needed for the purposes described in this policy, unless a longer period is required by law. Typical retention periods are:
- Form submissions and quote enquiries: up to 2 years from the date of last contact, so we can follow up on projects, provide continuity, and handle related customer service queries.
- Customer service communications (email and notes): up to 3 years from the date of last contact, depending on the nature of the request and any ongoing service needs.
- Marketing email list (opt-in): until you unsubscribe, then we will suppress your details to respect your choice; suppression records are kept for 30 days after unsubscribe to ensure changes take effect across systems, and a minimal record may be retained to prevent re-adding you by mistake.
- Analytics data: 14 months (where analytics is enabled and configured) to support trend analysis and reporting.
- Cookie consent records: up to 12 months via local storage or equivalent browser storage, unless you clear browser data sooner.
- Security logs: typically 90 days, unless we need longer to investigate an incident.
When retention periods expire, we either delete data or anonymise it so it can no longer be linked to an identifiable person.
8. International data transfers
Some of our service providers may process data outside the UK or European Economic Area (EEA), for example where cloud infrastructure is located in the United States. When personal data is transferred internationally, we ensure appropriate safeguards are in place.
These safeguards may include:
- UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, depending on the transfer route.
- Adequacy regulations where the UK government has recognised that a destination country provides an adequate level of protection.
- Supplementary measures where required, such as access controls and encryption in transit.
If you want more detail about international transfers relevant to your data, contact our privacy inbox and we will provide additional information where legally permitted.
9. Your rights under the UK GDPR
You have rights regarding your personal data. These rights are not absolute, but they are important safeguards. You can exercise your rights by emailing [email protected].
9.1 Your rights
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: ask us to correct inaccurate or incomplete information.
- Right to erasure: ask us to delete your data where conditions are met (for example, where we no longer need it or where processing is based on consent and you withdraw it).
- Right to restrict processing: ask us to limit how we use your data in certain circumstances.
- Right to data portability: where applicable, receive data you provided to us in a structured, commonly used format and have it transmitted to another controller.
- Right to object: object to processing based on legitimate interests. If you object, we will stop unless we have compelling legitimate grounds.
- Right to withdraw consent: where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
9.2 Identity verification and response time
To protect customers, we may ask for information to verify identity before completing a request. We aim to respond within one month. If a request is complex, we may extend the deadline as permitted by law and will explain why.
9.3 Complaints
If you are unhappy with how we handle personal data, you have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
Telephone: 0303 123 1113
We appreciate the chance to resolve concerns directly first. Please contact us and we will work to address the issue promptly.
11. Children’s privacy
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children under 16 through our forms or marketing sign-ups. If you believe a child has provided personal data, contact us at [email protected] and we will take appropriate steps to delete the information.
12. Policy updates
We may update this Privacy Policy to reflect changes in how we operate, changes in the tools we use, or changes in legal requirements. If the updates are significant, we will provide a clear notice on the website. Where appropriate and where we have your email address and permission, we may notify you by email.
Last Updated: January 15, 2026
13. Contact details and Data Protection contact
If you have a privacy question, want to exercise your rights, or want to request deletion of enquiry data, contact us using the details below.
- Privacy contact (Data Protection lead): [email protected]
- General contact: [email protected]
- Telephone: +44 1430 898240
- Postal address: Core Strength Equipment, 8 Brough Road, South Cave, Brough, East Yorkshire, England, HU15 2BX
We do not currently appoint a formal Data Protection Officer (DPO) because our processing activities do not require one. However, we maintain a dedicated privacy inbox and handle requests in line with UK GDPR requirements.
Questions about cookies or your data?
If you want to understand what we store, how long we keep it, or how to withdraw consent, email our privacy team. For equipment and fit-out enquiries, use our contact page.
Privacy FAQs
Schema-ready answers to common questions about data use, cookies, and marketing preferences.
Do you sell my personal data?
No. We do not sell personal data and we do not share it with third parties for their own marketing purposes without explicit consent.
What data do you collect when I submit a quote request?
Typically your name, email, optional phone number, the project type, and the message you provide. We use it to respond and prepare recommendations.
How do I withdraw marketing consent?
You can unsubscribe using the link in any marketing email or email [email protected]. We will stop marketing communications promptly.
How long do you keep enquiry data?
We typically keep quote and form enquiries for up to 2 years from last contact, unless a longer period is needed for ongoing service or legal obligations.
What cookies are essential on your site?
Essential cookies and storage are used to remember preferences such as your cookie consent choice and to maintain basic site reliability and security.
How do I request deletion of my data?
Email [email protected] with your request. We may ask for identity verification and will confirm what can be deleted under UK GDPR.
Do you use Google Analytics 4 and Meta Pixel?
We may use Google Analytics 4 and may use Meta Pixel for measurement. Where used, they operate in line with cookie choices and applicable law.
Who do I complain to if I have a concern?
You can contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO).