This Privacy Policy explains how UN1T and its franchisees (collectively referred to as “UN1T” collect, use, store and protect your personal information when you visit our website, use our services, attend our studios or interact with us on social media or through digital advertising.

We are committed to protecting your privacy and handling your personal information in accordance with applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018 where applicable.

‍

1. Who We Are

UN1T is a premium group training and fitness brand operating studios globally. Each studio may be operated by a franchisee under licence from UN1T HQ. The relevant data controller for your personal information is the UN1T entity operating the studio or service you interact with. If you use the UN1T member app, section 16 also applies.

For questions about this policy or how we handle your data, please contact us at: hq@un1t.com

‍

2. What Information We Collect

We may collect the following categories of personal information:

‍

a) Information you provide directly to us:

• Full name, email address, phone number and home address
• Date of birth and gender
• Health and fitness information, including medical conditions or injuries you disclose to us
• Payment information (processed securely through our payment providers; we do not store card details)
• Membership and booking history
• Communications you send us, including enquiries, complaints and feedback
• Emergency contact details

‍

b) Information we collect automatically:

• Website usage data including pages visited, time spent and links clicked
• Device information including browser type, operating system and IP address
• Cookie and tracking data (see our Cookie Policy below)
• Social media interactions where you engage with our pages or advertising

‍

c) Information from third parties:

• Information from third-party membership platforms such as Wellhub, GymPass or similar services
• Information from social media platforms including Meta (Facebook and Instagram) when you interact with our advertisements or pages

‍

3. How We Use Your Information

We use your personal information for the following purposes:

• To manage your membership, bookings and payments
• To provide you with coaching, fitness services and studio access
• To communicate with you about your membership, classes and studio updates
• To send you marketing communications where you have consented or where we have a legitimate interest in doing so
• To run targeted advertising campaigns on platforms including Meta (Facebook and Instagram)
• To improve our services, website and member experience
• To comply with our legal and regulatory obligations
• To protect the safety and security of our members, staff and premises

‍

4. Our Legal Basis for Processing (UK and EU)

Where the UK GDPR applies, we process your personal information on the following legal bases:

• Contract: to fulfil our membership and service obligations to you
• Legitimate interests: to improve our services, market our services to existing and prospective members, and protect the security of our business
• Consent: for marketing communications and non-essential cookies where your consent is required
• Legal obligation: where we are required to process your data to comply with applicable law

‍

5. Meta Advertising and Pixel Data

We use the Meta Pixel and similar tracking technologies on our website and digital platforms to measure the effectiveness of our advertising and to show you relevant UN1T advertisements on Facebook and Instagram.

This means that Meta may collect information about your visits to our website and your interactions with our content. This data is used to:

• Measure and optimise our advertising campaigns
• Create custom and lookalike audiences for advertising purposes
• Retarget visitors who have shown interest in our services

You can manage your advertising preferences through your Facebook and Instagram account settings. You may also opt out of interest-based advertising through the Digital Advertising Alliance or equivalent opt-out tools in your region.

For more information on how Meta uses your data, please refer to Meta’s Privacy Policy at facebook.com/privacy/policy.

‍

6. Sharing Your Information

We do not sell your personal information to third parties. We may share your information with:

• Our franchisees and studio operators where necessary to provide your membership services
• Service providers and technology partners who assist us in operating our business, including payment processors, booking systems (such as GloFox), email marketing platforms (such as Mailchimp) and IT service providers
• Advertising platforms including Meta, Google and similar platforms for the purposes described in Section 5
• Third-party membership aggregators such as Wellhub and GymPass where you access our services through those platforms
• Regulatory authorities or law enforcement where required by law
• Professional advisers including lawyers and accountants where necessary

‍

7. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse website traffic and support our advertising activities. Cookies we use include:

• Essential cookies: necessary for the website to function correctly
• Analytics cookies: to understand how visitors use our website (e.g. Google Analytics)
• Marketing cookies: to track visits and support targeted advertising (e.g. Meta Pixel)

You can manage your cookie preferences through the cookie banner on our website or through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

‍

8. How Long We Keep Your Information

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting and reporting requirements. In general:

• Active membership data is retained for the duration of your membership plus 6 years
• Marketing data is retained until you withdraw consent or opt out
• CCTV footage is retained for a maximum of 30 days unless required for an investigation
• Financial records are retained for a minimum of 6 years in accordance with legal requirements

‍

9. Your Rights

Depending on where you are located, you may have the following rights in relation to your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate or incomplete information
• The right to request deletion of your personal information in certain circumstances
• The right to restrict or object to processing of your personal information
• The right to data portability
• The right to withdraw consent at any time where processing is based on consent
• The right to lodge a complaint with the relevant supervisory authority (ICO in the UK, OAIC in Australia)

To exercise any of these rights, please contact us at privacy@un1t.com. We will respond to your request within 30 days.

‍

10. Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it from unauthorised access, loss, destruction or disclosure. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

‍

11. International Transfers

UN1T operates globally and your personal information may be transferred to and processed in countries outside your country of residence. Where we transfer personal information internationally, we ensure appropriate safeguards are in place in accordance with applicable privacy laws.

‍

12. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party websites you visit.

‍

13. Children

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at hq@un1t.com.

‍

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on our website. The date at the top of this policy indicates when it was last updated. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

‍

15. The UN1T member app

This section applies only if you use the UN1T member app provided by Pico Fitness Holdings Limited. UN1T studios are moving onto the app gradually. If your studio has not yet moved, you book through its existing system (currently GloFox or Mindbody), which is covered by section 6 of this policy and by GloFox or Mindbody's own privacy policy, and this section does not apply to you.

Where this section and the sections above cover the same ground, the sections above apply, and this section adds the detail specific to the app.

15.1 Who is responsible for your information in the app

The UN1T member app is provided by Pico Fitness Holdings Limited, a company registered in England and Wales under company number 10570877, whose registered office is at 251 Southwark Bridge Road, London SE1 6FJ. Pico Fitness Holdings Limited is registered with the UK Information Commissioner's Office under reference ZB128418. It decides what the app collects, why, and for how long, and is the data controller for information processed through the app.

As explained in section 1, the UN1T entity operating your home studio is the data controller for your membership, including your contract, payments and attendance. Pico Fitness Holdings Limited and your studio operator are joint controllers for the information the app holds about you. You can exercise any of your rights against either of them, and whichever you contact will coordinate the response.

For questions about your data in the app, contact privacy@un1t.com.

15.2 Which laws apply

Where you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply. Where you are in the European Union, the EU General Data Protection Regulation applies, and your studio operator is established in the EU. Where you are in Australia, the Privacy Act 1988 (Cth) applies. The supervisory authorities are listed in section 16.10.

15.3 Information collected through the app

In addition to the categories described in section 2, the app collects:

• Account and profile information — name, email address, telephone number, date of birth, gender, and your city, postcode and country. The app does not collect your street address.
• Emergency contact details — the name and contact details of the person you nominate, so that your studio can reach them in an emergency.
• Membership and transaction information — the membership or class pack you hold, your credit balance, your payment and invoice history, and the classes you book, attend, cancel or join a waitlist for.
• Training and performance information — the working weights you record against benchmark lifts, your conditioning results, and the strength tier the app calculates from them.
• Body composition information — body weight, body fat percentage and waist measurement, only where you choose to record them. See section 16.5.
• Technical information — device type and operating system version, app version, crash and error reports, and app performance measurements (such as launch and screen-load times, battery level and network type) tied to a random per-installation identifier that is not linked to your account. The app does not register for push notifications.

The app does not collect your precise location, does not upload your contacts, and does not use advertising or tracking software. Where you use "Add from contacts" to fill in your emergency contact, the app reads your address book on your device and only the entry you choose is sent to us.

Card details are not stored by UN1T. Payments made in the app are processed by Stripe, who handle your card information under their own security standards.

‍

15.4 How we use app information, and our lawful bases

‍

The app does not send marketing communications unless you have opted in to them under section 3, and you can change that at any time in the app or by contacting us. The app does not make automated decisions that have a legal or similarly significant effect on you; strength tiers are calculated automatically from the weights you enter, for display to you only.

‍

15.5 Health information

Body composition information — body weight, body fat percentage and waist measurement — is health information and is treated as special category data. The screen where you enter these measurements explains that they are optional and that by entering them you consent to us storing them; you give that consent each time you choose to record a measurement. You can withdraw it at any time by deleting your measurements in the app or by contacting privacy@un1t.com, and we will delete the body composition records we hold. Withdrawing consent does not affect your membership or anything else in the app.

Health screening (including any medical conditions you tell your coach about) is carried out by your studio, not through the app, and is covered by section 2 and by your studio operator's own processes.

15.6 Who receives app information

Information collected through the app is shared with:

Your home studio operator, as joint controller, to manage your membership and coach you.

The processors that operate the app on our behalf: Cloudflare (network traffic); Railway (application server, Amsterdam); Supabase (database, EU); Stripe (payments); Resend (transactional email — sent from Ireland, with email addresses and delivery logs stored in the United States); Sentry (crash reporting, EU, not linked to your identity); Expo (app performance measurements, United States, not linked to your identity); and Gimmir LLC, the app developer, for maintenance and support. Each acts under written instruction and may not use your information for its own purposes.

Authorities and professional advisers, where the law requires it, as described in section 6.

App information is not shared with advertising platforms, and is not used for the advertising described in section 5. We do not sell it.

GloFox, named in section 6, is used by studios that have not yet moved to the app. It is not used by the app itself and does not receive app information. When a studio moves to the app, its members' booking and membership records are transferred from GloFox to the platform behind the app; members are told before this happens.

15.7 Where app information is held

Information collected through the app is stored in the European Economic Area: the application server is in Amsterdam and the database is hosted in the EU. Transfers between the United Kingdom and the European Economic Area take place under the adequacy decisions in force between them. Two processors handle limited data in the United States: Resend, which stores email addresses and delivery logs, and Expo, which receives app performance measurements not linked to your identity. Those transfers rely on the EU–US Data Privacy Framework and standard contractual clauses.

16.8 How long app information is kept

‍

15.9 Deleting your account

You can delete your account at any time in the app, under Account details. Deleting your account removes your profile, bookings, training and performance history, and any body composition records. This is an immediate, permanent deletion from our database. Deleted information can remain in database backups for up to 90 days until those expire, and is not restored from them. Payment and invoice history, which we are legally required to keep, is retained by our payment processor for the statutory period and cannot be deleted on request.

If you cannot access the app, you can ask us to delete your account by emailing privacy@un1t.com from the email address registered to the account. We will respond within 30 days.

Deleting your app account does not by itself cancel a membership; that is done in the app under Manage membership, or with your studio.

15.10 Your rights, and how to use them in the app

The rights set out in section 9 apply to information in the app. Within the app you can view and correct most of your information under Account details, and delete your account there. For access, export, restriction or objection requests, or to withdraw consent, contact privacy@un1t.com or your home studio.

You can complain to the supervisory authority where you live:

Ireland — the Data Protection Commission, dataprotection.ie

United Kingdom — the Information Commissioner's Office, ico.org.uk

Australia — the Office of the Australian Information Commissioner, oaic.gov.au

Elsewhere in the EU — the data protection authority of your member state

15.11 Age

As set out in section 13, the app is for members aged 16 and over. Your date of birth is collected at registration, and the app does not allow anyone under 16 to create an account.

15.12 Changes

Changes to this section are made in the same way as changes to the rest of this policy (section 14). Where a change materially affects how the app uses your information, we will also tell you in the app.

Section 15 last updated: [30/09/2026 — date published]

‍

16. Contact Us

If you have any questions, concerns or complaints about this Privacy Policy or how we handle your personal information, please contact us:

‍

UN1T Privacy Team

Email: hq@un1t.com

Website: www.un1t.com

‍

If you are located in the UK, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

If you are located in Australia, you have the right to complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

‍