top of page

Privacy Policy

Effective Date: 05/10/2026

MovX Group Ltd, trading as Rebound LAB and Fit ESCAPE (“we”, “us”, “our”), is committed to protecting, respecting, and safeguarding your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you interact with our websites, book our training courses, attend our retreats, or use our services. This policy is drafted in strict accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

MovX Group Ltd is a private limited company registered in England and Wales.

Company Registration Number: 16885534

Registered Office Address: Unit A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE

Data Controller Status: For the purposes of UK data protection legislation, MovX Group Ltd is the data controller responsible for your personal data.

ICO Registration: We are registered with the Information Commissioner’s Office (ICO) under registration number C2051229.

We provide health, fitness, and wellbeing services including:

  • Instructor training and certification programs (Rebound LAB)

  • Group fitness classes, workshops, and private coaching

  • Fitness holidays, travel experiences, and wellness retreats (Fit ESCAPE)

  • Public events, festivals, and brand promotional activities

  • Online digital services, electronic booking systems, and corporate communications

2. Personal Data We Collect

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer the following categories of personal data:

Identity Data: First name, maiden name, last name, username or similar identifier, marital status, title, date of birth, and gender.

Contact Data: Billing address, residential address, delivery address, email address, telephone numbers, and emergency contact details.

Booking & Participation Data: Details about payments to and from you, details of products and services you have purchased from us, event or training selections, professional fitness background, travel information, flight details, accommodation preferences, and professional insurance policy information.

Health & Accessibility Data (Special Category Data): Physical activity readiness questionnaires (PAR-Q), medical disclosures, pre-existing injuries, allergies, medical conditions, dietary requirements, and physical accessibility needs. We collect this data strictly where necessary to ensure your physical safety during high-intensity training or retreats.

Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.

Marketing & Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.

3. How We Collect Your Data

We use different methods to collect data from and about you, including through:

Direct Interactions: You may give us your Identity, Contact, and Health data by filling in online forms, executing contracts, or by corresponding with us by post, phone, email, or messaging platforms (including WhatsApp, Instagram, and Facebook).

Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns via cookies and server logs.

Third Parties: We may receive personal data about you from various third-party booking, payment processing, or ticketing platforms (such as Stripe or Eventbrite but not limited to).

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

  • To process, manage, and administer your bookings, course entries, and retreat itineraries.

  • To manage our relationship with you, including notifying you about changes to our terms or privacy policy.

  • To ensure your health, physical safety, and specific accessibility requirements are met during high-intensity physical activity.

  • To issue official certifications, process invoices, manage financial transactions, and maintain corporate accounting records.

  • To deliver relevant website content, analyze usage trends, and improve our fitness programs, retreats, and customer service.

  • To administer and protect our business and website (including troubleshooting, data analysis, system maintenance, and hosting).

  • To send you promotional newsletters and marketing communications where you have provided explicit, active consent.

5. Legal Basis for Processing

Under the UK GDPR, the lawful bases we rely on for processing your general personal data are:

Contractual Necessity: Processing is required to perform the contract we are about to enter into or have entered into with you (e.g., delivering the training course you purchased).

Consent: You have given us clear, explicit consent to process your personal data for a specific purpose (e.g., direct email marketing).

Legal Obligation: Processing is necessary for compliance with a legal or regulatory obligation to which we are subject (e.g., financial accounting, tax compliance, or health and safety reporting).

Legitimate Interests: Processing is necessary for our legitimate business interests in running, managing, protecting, and growing our brand, provided your fundamental rights do not override those interests.

Processing Special Category (Health) Data: When we process your sensitive health data (such as PAR-Q forms or injury disclosures), we rely on Article 9(2)(a) of the UK GDPR (Explicit Consent). You have the right to withdraw this consent at any time, though doing so may prevent you from participating in physical training activities due to safety regulations.

6. Data Storage & Security

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed.

We limit access to your personal data to those employees, agents, contractors, and other third parties who have a legitimate business need to know. They will only process your personal data on our strict instructions and they are subject to a formal duty of confidentiality.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use, and applicable statutory limitation periods under English law (typically 6 years for contractual records). When personal data is no longer required, it will be securely deleted or anonymized.

8. Sharing Your Data

We do not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties for the purposes set out in Section 4:

  • Authorized internal instructors, independent contractors, and core team members directly responsible for delivering training and retreat services.

  • Third-party service providers acting as processors who provide IT, system administration, secure cloud storage, and database management services.

  • Authorized accommodation providers, transport companies, and local event partners (Fit ESCAPE retreats only, strictly on a need-to-know basis).

  • Professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

  • HM Revenue & Customs (HMRC), regulators, and other public authorities based in the United Kingdom who require reporting of processing activities in certain circumstances.

9. International Data Transfers

Where our external third-party service providers or retreat venues are based outside the United Kingdom, their processing of your personal data will involve a transfer of data outside the UK.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data under UK adequacy regulations.

  • Where we use certain service providers, we may use specific standard contractual clauses approved for use in the UK - specifically the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses - which give personal data the same protection it has in the UK.

10. Your Legal Rights

Under UK data protection laws, you have rights in relation to your personal data. These include the right to:

  • Request access to your personal data (commonly known as a "data subject access request").

  • Request correction of the personal data that we hold about you.

  • Request erasure of your personal data (the "right to be forgotten").

  • Object to processing of your personal data where we are relying on a legitimate interest.

  • Request restriction of processing of your personal data.

  • Request the transfer of your personal data to you or to a third party.

  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us directly via email at: reboundlab.uk@gmail.com.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

11. Marketing Communications & Opting Out

You will only receive marketing and promotional communications from us if you have explicitly opted in to receive them. You can ask us to stop sending you marketing messages at any time by:

  • Clicking the "Unsubscribe" or "Opt-out" link at the bottom of any promotional email sent to you.

  • Contacting us directly at any time via a written request to reboundlab.uk@gmail.com.

12. Cookies & Website Tracking

Our website uses cookies and similar tracking technologies to distinguish you from other users, optimize web performance, and monitor website traffic. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. For detailed information on the cookies we use and the purposes for which we use them, please refer to our dedicated Cookie Policy.

13. Changes to This Privacy Policy

We keep our Privacy Policy under regular review. Any updates or modifications will be published directly on this webpage with an updated Effective Date. Your continued interaction with our services following the publication of changes signifies your acknowledgment of the updated terms.

14. Contact Details

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the details set out below:

bottom of page