Privacy Policy

Sweat House Ltd (Company Number: 16587977), trading as Flexpass (“we”, “us”, “our”), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you purchase or use our services, including our website flexpass.co.uk, mobile platforms, and digital memberships (“Services”).

1. Information We Collect

We may collect and process the following categories of personal data:

• Identity Data – Name, date of birth, gender, and emergency contact details.

• Contact Data – Email address, telephone number, billing and postal address.

• Payment Data – Payment card details (processed securely by third-party providers, not stored by Flexpass).

• Health Data – Limited self-disclosed information relevant to our Health Agreement (special category data under GDPR, processed only with your consent).

• Usage Data – How you use our website, digital memberships, and Partner Venues.

• Technical Data – IP address, login information, browser type, operating system, device identifiers.

2. How We Use Your Data

We use your personal information to:

• Provide and manage your digital membership and access to Partner Venues.

• Process transactions and payments securely.

• Communicate with you about your membership, updates, and customer support.

• Send service-related communications (legal, security, operational).

• Improve our website, services, and customer experience.

• Comply with legal, regulatory, and tax obligations.

• With your consent, send marketing communications about Flexpass offers and promotions.

3. Legal Basis for Processing

We process your data under the following legal grounds:

• Contractual necessity – to deliver Services you purchase.

• Legal obligation – to comply with UK law.

• Legitimate interests – to improve our Services, prevent fraud, and protect our business.

• Consent – for marketing communications and processing health-related data.

4. Sharing Your Data

We only share your data with trusted third parties necessary to deliver our Services, including:

• Payment processors (e.g., Stripe).

• Digital wallet providers (e.g., PassKit).

• CRM and email providers (e.g., HubSpot, Mailchimp).

• Partner Venues (to validate memberships and grant entry).


We do not share, sell, rent, or disclose mobile opt-in data (including SMS consent information and phone numbers provided for marketing purposes) with any third parties. Your mobile information will only be used by Flexpass in accordance with this Privacy Policy.

We never sell your data.

5. Data Retention

We retain your personal data only as long as necessary to:

• Fulfil our contract with you.

• Comply with legal, accounting, or reporting requirements.

• Resolve disputes and enforce agreements.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Typically, this means up to 7 years after your last transaction, unless a longer retention period is required by law.

6. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.

• Correct inaccuracies.

• Request erasure (“right to be forgotten”).

• Restrict or object to processing.

• Data portability (receive a copy in a structured format).

• Withdraw consent at any time where consent is the legal basis.

In order to exercise your rights, contact us at privacy@flexpass.co.uk.

7. Security

We use appropriate technical and organisational safeguards to protect your data, including encryption, access controls, secure payment processing, and restricted access protocols. While we take all reasonable steps, no transmission or storage system is 100% secure, and you acknowledge use of our Services is at your own risk.

8. International Transfers

Where our third-party providers process data outside the UK or EEA, we ensure adequate safeguards (e.g., UK Standard Contractual Clauses).

9. Changes to This Policy

We may update this Privacy Policy periodically. Updated versions will be published on our website with the “Last Updated” date.

10. Contact Us

If you have any questions or concerns regarding this Privacy Policy, contact us at:


Email: privacy@flexpass.co.uk


Address: Sweat House Ltd, 128 City Road, London, EC1V 2NX