Privacy Policy

1. Scope and necessary processing

This policy applies to membership applications, member accounts, payments, facility access, attendance, fitness and wellness services, website enquiries, and related interactions with Onyx.

Some processing is necessary to assess an application, administer membership, collect payment, provide facility access, maintain safety, and meet legal obligations. If necessary information is not provided, Onyx may be unable to provide the requested membership or service.

2. Data we may collect

• Name, identification, age or date-of-birth details where required.
• Contact details and emergency-contact information.
• Membership applications, plans, status, attendance, and facility-access records.
• Payment and transaction information. Payment providers may process additional financial details directly.
• Body-composition results, training data, fitness goals, and wellness information where applicable.
• Health-related information you voluntarily provide and, where requested, bloodwork or diagnostic results processed through approved medical partners.
• Communications, enquiries, consent choices, and records needed to manage your relationship with Onyx.

3. How we use personal data

• Review applications and administer memberships.
• Communicate about payments, renewals, access, safety, service changes, and member support.
• Process payments and maintain financial and transaction records.
• Manage facility access, security, attendance, and operations.
• Provide personalised fitness and wellness services where applicable and consented to.
• Process body-composition, training, bloodwork, or related health data for requested services.
• Improve services and produce anonymised analytics.
• Comply with legal, accounting, audit, regulatory, safety, and dispute-resolution obligations.

4. Data sharing

Onyx does not sell or rent personal information, or share it with third parties for their independent marketing.

Limited sharing may occur where reasonably necessary with:

• Payment processors for transaction processing.
• Approved medical or diagnostic partners for requested or applicable services.
• Service providers processing information on behalf of Onyx.
• Coaches or trainers where you have provided the relevant consent.
• Government authorities, regulators, law-enforcement bodies, courts, or others where required or authorised by law or lawful process.

5. Data retention

We retain personal data only as long as reasonably necessary for the purpose collected or as required or permitted by law. Legal, accounting, audit, regulatory, and dispute obligations may require longer retention.

As a general operational policy, certain membership, financial, and transaction records may be retained for up to seven years after membership ends where reasonably necessary for lawful purposes. When data is no longer required, Onyx will take reasonable steps to delete, anonymise, or securely dispose of it.

6. Your data-protection rights

Subject to applicable legal limitations, you may have the right to:

• Be informed about how your personal data is used.
• Access your personal data.
• Request correction of inaccurate or misleading data.
• Object to or request restriction of certain processing.
• Request erasure where legally applicable.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.

Withdrawing optional consent does not affect processing already carried out lawfully or processing that remains necessary under another lawful basis.

7. Necessary and optional choices

Data needed to provide and administer membership is required. The following choices are separate and optional, and may be changed or withdrawn by contacting Onyx:

• Marketing communications: newsletters, events, promotions, and member updates.
• Personalised coaching: sharing applicable body-composition or bloodwork results with your assigned coach or trainer for personalised programming.
• Anonymised analytics: using training and fitness data for analytics, research, and service improvement after anonymisation so you cannot reasonably be identified.
• Photography and media: full, background-only, or no consent for promotional imagery. This does not affect membership eligibility, access, pricing, or service quality.