Privacy & Cookies Policy
Last updated: 17 September 2026
This policy explains what information Grit 'N' Glory Gym collects when you visit our website or get in touch, how we use it, and the choices you have. We keep it plain and we only collect what we need.
1. Who we are
Grit 'N' Glory Gym ([registered name]) is a private personal training studio based at Travessia d'En Ballester 4, 07002 Palma de Mallorca, Illes Balears, Spain. We are the data controller responsible for your personal information on this site.
You can reach us about privacy at [privacy@gritnglorygym.com] or on WhatsApp at +34 651 195 256.
2. What we collect
Information you give us
When you book a consultation, message us on WhatsApp, or otherwise get in touch, you may share your name, contact details, and anything you choose to tell us about your goals, training history or health as it relates to training. Bookings are handled by our scheduling provider (see section 5).
Information collected automatically
Like most websites, our host records basic technical information such as your IP address, browser type and the pages you visit, in server logs used to keep the site running and secure. Some content on the site is loaded from third parties, which may set their own cookies (see section 4).
3. How we use your information and our legal basis
- To respond to you and provide training that you ask for. Legal basis: taking steps at your request and performing our agreement with you, or our legitimate interest in answering enquiries.
- To run, secure and improve the website. Legal basis: our legitimate interest in a working, safe site.
- To load embedded content such as the map and Instagram feed. Legal basis: your consent, which you can give or decline through the cookie banner.
We do not sell your information, and we do not use it for automated decision making or profiling.
4. Cookies and similar technologies
Cookies are small files stored on your device. We use very few. We store your cookie choice on your own device so we can remember it, and some third party content sets its own cookies when it loads.
| Type | What it does | Consent |
|---|---|---|
| Strictly necessary | Remembers your cookie choice and keeps the site working. Stored locally on your device. | Not required |
| Embedded content (Google Maps, Instagram) | Loads the map and Instagram feed. These are provided by Google and by Instagram through Elfsight, which may set their own cookies. | Your choice |
| Booking | If you go to book, our scheduling provider may set cookies needed for the booking to work. | Your choice |
We do not currently use analytics or advertising cookies. If that changes, we will update this policy and the cookie banner first.
You can accept or reject non essential cookies using the banner on the site, and you can clear or block cookies at any time through your browser settings. Blocking some cookies may stop the map or Instagram feed from displaying.
5. Third parties who process data for us
We use a small number of trusted providers to run the site and our booking. Each has its own privacy policy.
- Google (Firebase Hosting, Google Maps, Google Fonts) for hosting the site, the map and the fonts.
- Squarespace (Acuity Scheduling) for consultation and session bookings.
- Elfsight and Instagram / Meta for the Instagram feed, and WhatsApp / Meta if you choose to message us.
Some of these providers are based outside the European Economic Area. Where that is the case, they rely on safeguards such as the European Commission's standard contractual clauses or an adequacy decision to protect your information.
6. How long we keep it
We keep enquiry and booking information for as long as we need it to provide training and to meet our legal and accounting obligations, and then delete or anonymise it. Server logs are kept for a short period for security.
7. Your rights
Under the GDPR you have the right to access your information, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To exercise any of these, contact us at [privacy@gritnglorygym.com].
If you are not happy with how we handle your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
8. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
9. Contact us
Grit 'N' Glory Gym, Travessia d'En Ballester 4, 07002 Palma de Mallorca, Spain. Email [privacy@gritnglorygym.com] or WhatsApp +34 651 195 256.