Privacy Policy

1.1 Information You Provide

• Account Information: Name, email address, phone number, job title, organization name, and billing address
• Account Credentials: Username, password, and security questions
• Organization Data: Gym location details, staff rosters, member records, and operational data you enter into the platform
• Payment Information: Billing details processed through our payment processors (we do not store full card numbers)
• Communications: Messages, inquiries, and feedback you send to us

1.2 Information Collected Automatically

• Platform Usage: Feature usage, login times, IP address, device information, and interaction data
• Cookies and Tracking: Browser type, operating system, referring URLs, and page views
• Security Logs: Authentication events and access patterns to protect accounts

1.3 Information from Third Parties

• Payment Processors: Transaction and payment verification data
• Integration Partners: Data from connected services you authorize (e.g., access control, billing)
• Marketing Partners: Lead generation and promotional campaign information

2.1 Platform Services

• Provide, operate, and maintain the Bexley gym management platform
• Process payments and maintain billing records
• Authenticate users and manage access permissions
• Provide customer support and respond to inquiries

2.2 Communications

• Send account confirmations and service updates
• Provide product announcements and schedule changes
• Share promotional offers and events (with consent)
• Send important notices about policy changes

2.3 Safety and Security

• Monitor platform access and prevent unauthorized use
• Investigate incidents and resolve disputes
• Comply with legal obligations and law enforcement requests

2.4 Business Operations

• Analyze usage patterns to improve services
• Conduct market research and customer surveys
• Support multi-location and franchise operations
• Develop new features and enhance user experience

3.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Payment processors (e.g., Stripe)
• Email and SMS communication platforms
• Cloud storage and hosting providers
• Analytics and marketing services
• Customer support and CRM systems

3.2 Gym Operators and Authorized Users

If you are a staff member or member of a gym using Bexley, your information may be accessible to authorized users at that organization according to their role and permissions.

3.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our agreements and policies
• Protect the rights, property, or safety of Bexley, our customers, or others
• Prevent fraud or investigate suspected illegal activities

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

3.5 Mobile Messaging

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5.1 Access and Correction

You have the right to access and update your personal information through your account settings or by contacting us.

5.2 Marketing Communications

You can opt out of promotional emails by clicking "unsubscribe" in any marketing message or by adjusting your communication preferences in your account settings.

5.3 Data Deletion

You may request deletion of your personal information, subject to certain legal exceptions (e.g., billing records, legal compliance).

5.4 State-Specific Rights

California Residents (CCPA/CPRA): You have additional rights including the right to know what personal information is collected, the right to know if personal information is sold or shared, the right to delete personal information, the right to correct inaccurate information, the right to opt-out of the sale of personal information, and the right to non-discrimination for exercising privacy rights.

Virginia, Colorado, Connecticut, and Other States: If applicable state privacy laws apply to you, you may have similar rights to access, correct, delete, and opt-out of certain data processing activities.

European Economic Area, UK, and Switzerland (GDPR): Where GDPR applies, you may have rights to access, rectify, erase, restrict processing, data portability, and object to processing. You may also lodge a complaint with your local supervisory authority.

To exercise any of these rights, please contact us at privacy@bexley.ai.