Privacy Policy

Last updated: 18th November 2025

This Privacy Policy explains how TDM Gym (“TDM Gym”, “we”, “us”, “our”) collects, uses and protects your personal data when you visit our website, join our email list, or contact us about our products and services.

We are committed to protecting your privacy and handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

TDM Gym is a UK-based business specialising in used, rare and ex-commercial gym equipment.

Data controller: TDM Gym

Registered business name: TDM Enterprises LTD

Registered company number: 14674676

Registered address: 8a Bore Street, Lichfield, England, WS13 6LL

Email: info@tdmgym.co.uk

Telephone: +443301339438

If you have any questions about this policy or how we handle your personal data, you can contact us at info@tdmgym.co.uk.

2. What data we collect

The personal data we collect depends on how you interact with us. It may include:

a) Identity and contact data

Name

Email address

Phone number

Postal address (for orders or delivery enquiries)

b) Lead and enquiry data

Details you provide via contact forms (e.g. what equipment you’re interested in, budget, gym type)

Messages sent by email, social media or website forms

c) Order and account data (if/when you buy)

Billing details

Delivery address

Order history and transaction details (but not full card numbers – these are handled by our payment provider)

d) Marketing preferences

Your consent to receive marketing emails

Your unsubscribe / opt-out choices

e) Technical and usage data

IP address

Device and browser information

Pages visited, time on page, clicks and interactions

Referring site or campaign (where you came from)

This is typically collected via cookies, pixels and similar technologies (for example, analytics tools). We describe this further in the Cookies & tracking section.

We do not intentionally collect special category data (such as health data, political opinions, etc.). Please don’t include this kind of information in forms or free-text fields.

3. How we collect your data

We collect data in three main ways:

Directly from you

When you enter your email to join our list or request updates

When you contact us via forms, email, phone or social media

When you place an order or request a quote

Automatically, when you use our website

Through cookies and similar technologies that track website usage and performance

From third parties

Analytics and advertising partners (e.g. website analytics)

Payment providers (confirmation of payment status)

4. How we use your personal data

We use your personal data for the following purposes:

To respond to enquiries and provide customer support

Answering your questions, providing quotes, and helping you choose equipment.

To send marketing emails and updates (with your consent)

Sending newsletters, launch updates, promotions and content about TDM Gym, where you’ve opted in or where we have a lawful basis to do so.

To process orders and deliver equipment

Handling payment, fulfilment, delivery arrangements and related communication if you buy from us.

To manage our relationship with you

Sending important service messages (e.g. policy changes, key updates about orders), asking for feedback, and maintaining accurate records.

To improve our website, products and marketing

Analysing how visitors use the site, understanding which pages perform best, and improving our content and offers.

To comply with legal and regulatory obligations

Keeping records for tax, accounting and compliance purposes.

We will only use your personal data for the purposes it was collected for, unless we reasonably consider that we need to use it for another compatible reason. If we need to use your data for a new, unrelated purpose, we’ll normally notify you and explain the legal basis.

5. Lawful bases for processing (GDPR)

Under data protection law, we must have a lawful basis to use your personal data. Depending on the situation, we rely on the following:

Consent – for example, when you actively tick a box to receive marketing emails or sign up to our newsletter or launch updates. You can withdraw consent at any time by clicking “unsubscribe” in our emails or contacting us.

Contract – where processing is necessary to enter into or perform a contract with you, such as when we respond to a purchase enquiry, process your order or deliver equipment.

Legitimate interests – where processing is needed for our legitimate business interests and these are not overridden by your rights. For example:

Responding to incoming enquiries

Keeping basic records of conversations

Using analytics to understand how our website is used and improve it

Legal obligation – where we must process data to comply with law, such as retaining invoices and transaction records for tax purposes.

6. Marketing communications

If you join our email list, request updates or tick a box to receive marketing from us, we will send you emails about:

New equipment arrivals and rare pieces

TDM Gym updates, including the physical gym

Promotions, bundles and offers

Content related to gym equipment and gym builds

You can unsubscribe at any time by:

Clicking the “unsubscribe” link in any marketing email; or

Contacting us at info@tdmgym.co.uk.

If you unsubscribe, we will stop sending marketing emails. We may still send service emails where necessary (for example, important information about an order or changes to our terms).

7. Cookies and tracking technologies

We use cookies and similar technologies to:

Make the website work properly

Remember certain choices

Analyse how visitors use the site (for example, which pages get the most traffic)

Improve our marketing and measure campaign performance

Where legally required, we will ask for your consent before placing non-essential cookies (such as analytics or advertising cookies) on your device.

You can manage your cookie preferences via:

Our on-site cookie banner / settings; 

Your browser settings (e.g. blocking or deleting cookies).

We recommend you also check your browser’s help pages for more detail on controlling cookies.

If you’d like to, you can also create a separate Cookie Policy page that this Privacy Policy can link to.

8. Sharing your data

We do not sell your personal data.

We may share your data with trusted third parties, such as:

Email marketing platforms – to send newsletters and email campaigns

Website hosting and IT providers – to operate our website and systems

Analytics providers – to understand how people use our site

Payment processors – to take secure payments (for example, card providers)

Delivery and logistics partners – to deliver equipment

Professional advisers – such as accountants or legal advisers where necessary

Regulators and authorities – where we are legally required to do so

Whenever we use third-party service providers, we:

Only give them the data they genuinely need

Require them to keep it secure

Require them to use it only according to our instructions and relevant law

9. International data transfers

Some of our service providers may be based outside the UK/European Economic Area (EEA), or may store data on servers outside these regions. Where this happens, and your personal data is transferred internationally, we will ensure appropriate safeguards are in place, such as:

Standard contractual clauses or equivalent safeguards approved under UK GDPR; or

Transfers to countries recognised as providing an adequate level of data protection.

You can contact us if you’d like more information about these safeguards.

10. Data retention – how long we keep your data

We keep your personal data only for as long as needed for the purposes described in this policy, including:

For email leads / marketing: until you unsubscribe or we consider the list inactive, plus a short period to ensure we respect your opt-out.

For enquiries: for a reasonable period after we’ve resolved your question, in case we need to refer back to it.

For orders and financial records: typically for 6 years after the end of the relevant tax year, to comply with legal and tax obligations in the UK.

When personal data is no longer needed, we will delete it or anonymise it so that it can no longer be linked back to you.

11. How we protect your data

We use a combination of technical and organisational measures to keep your personal data secure, including:

Secure hosting and access controls

Strong passwords and limited access to systems

Encryption in transit where appropriate (for example, HTTPS)

Reasonable procedures for backups and incident response

However, no method of transmission or storage is completely risk-free. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will follow our legal obligations to notify you and, where required, the Information Commissioner’s Office (ICO).

12. Your data protection rights

Under UK data protection law, you have various rights in relation to your personal data, including:

Right to access – you can request a copy of the personal data we hold about you.

Right to rectification – you can ask us to correct inaccurate or incomplete data.

Right to erasure – you can ask us to delete your data in certain circumstances.

Right to restrict processing – you can ask us to pause certain uses of your data.

Right to object – you can object to processing based on legitimate interests, and to direct marketing at any time.

Right to data portability – in some cases, you can request your data in a machine-readable format for transfer to another service.

Right to withdraw consent – where we rely on consent (for example, for marketing), you can withdraw it at any time.

To exercise any of these rights, please contact us at info@tdmgym.co.uk. We may need to verify your identity before acting on your request.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you’re unhappy with how we handle your data:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Tel: 0303 123 1113

Website: ico.org.uk

We would appreciate the chance to deal with your concerns first, so please consider contacting us before contacting the ICO.

13. Third-party links

Our website may contain links to third-party websites, social media platforms or tools. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every site you visit.

14. Children

TDM Gym is not aimed at children and we do not knowingly collect personal data relating to anyone under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date at the top. If the changes are significant, we may also notify you by email or via a notice on the website.

We encourage you to review this page periodically to stay informed about how we are protecting your information.