Privacy policy

Rally is operated by Rally Now Ltd (Rally, we, us or our), a company registered in England and Wales under company number 17422978, with its registered office at 135 Torridon Road, London, SE6 1RG. We are the data controller for the personal information described in this policy.

Rally Now Ltd runs the Rally website at rallynow.co.uk and, when live bookings are enabled, the booking service connecting personal trainers, gyms and clients across London. We are registered with the Information Commissioner's Office (ICO) under reference ZC233616.

You can contact us about anything in this policy at hello@rallynow.co.uk.

What we collect depends on how you use Rally. We only collect information we need to run the service.

• Identity and contact data — your name, email address and, if you choose to give it, your telephone number.
• Trainer profile data — session types, areas and postcodes covered, outdoor or gym locations, pricing, group sizes, experience, profile photograph, availability, classes, and insurance or qualification details and evidence you choose to provide.
• Gym account and profile data — the gym's name, contact email, address, postcode, description, profile photograph, opening hours, day-pass price, facilities, accessibility and check-in information, social links, insurance details, classes and assigned trainers.
• Booking data — session requests and bookings, including dates, times, activity, location, attendees and any note you send.
• Payment data — records of payments, refunds and payouts. Stripe collects and holds card and identity-verification details; we do not hold card numbers.
• Communications data — contact-form enquiries, emails, support messages and messages sent through Rally between clients, trainers and gyms.
• Technical and usage data — IP address, device and browser type, pages viewed, how you arrived at Rally, and error or diagnostic information.
• Cookies and browser-storage data — including your Meta tracking choice and the interface read/seen state described below.

We do not request live GPS location from your device, contact lists, or photographs and videos beyond profile images and supporting documents you choose to provide. We do not request, collect or hold DBS certificates or other criminal-offence data.

• When you join the client waitlist, we collect your email address.
• When you create or edit a trainer or gym account, we collect the identity, contact and profile information you enter or upload.
• If you use Google sign-in, Google provides the name and email address associated with your Google account. We do not receive your Google password.
• When you make, receive or manage a booking, class or trainer assignment, we collect the information needed to run it.
• When you contact us or message through Rally, we collect your contact details and what you tell us.
• When you enter an address, postcode or place, Google Maps helps us convert it into map coordinates. Rally does not request your device's live location.
• Automatically as you use Rally, we receive technical and usage data. Non-essential Meta tracking only runs after you accept it.

We rely on one or more of the following, depending on the situation:

• Contract — to provide the service you ask for, such as hosting an account or processing a booking.
• Consent — for non-essential Meta tracking and optional information you choose to provide or display. You can withdraw consent at any time.
• Legitimate interests — for fraud prevention, site security, service communications, diagnostics and improving Rally, balanced against your privacy rights.
• Legal obligation — where we must keep or disclose information, including accounting and tax records.

We do not sell personal information. We share it only where needed to run Rally:

• Clients, trainers and gyms — the details needed to arrange and manage a booking or class. Trainers and gyms act as independent data controllers for personal information they receive and are responsible for their own use of it.
• Stripe — to process payments, refunds, identity checks and payouts.
• Supabase — the database and account infrastructure that stores account, profile, booking and message data.
• Lovable — website hosting and managed email infrastructure.
• Google — Google sign-in, Google Maps place and postcode geocoding, and Google Workspace business email.
• Meta Platforms — after consent, visit and action data used to measure and target advertising on Facebook and Instagram.
• Google Ads — visit and completed-booking data used to measure whether Google advertising works and to improve ad delivery. Before you choose, Google's tag runs in a restricted mode that sets no advertising cookies; full measurement starts only after you accept.
• Professional advisers — lawyers, accountants, auditors and insurers where needed.
• Authorities — where disclosure is legally required.

Rally may link to third-party websites controlled by others. Their own privacy notices apply.

Rally does not carry out background checks on trainers and does not verify qualifications on their behalf. Trainers and gyms may provide insurance or qualification details and supporting evidence. We may review evidence to mark a listing accordingly, but this is not a guarantee and clients should use their own judgement, as set out in our terms.

Rally does not request, collect or hold DBS certificates or any other criminal-offence data.

Some retention periods depend on the context. Rally reviews data when an account closes or a request is completed and keeps only what remains necessary.

Cookies are small files stored on your device. Rally also uses browser local and session storage, which work in a similar way. Necessary account and interface storage is used automatically. Meta advertising technology runs only after you accept it in Rally's cookie banner. Google's advertising tag loads on every page but, until you accept, runs in a consent-denied mode that stores no advertising cookies.

We use the Meta Pixel to measure how our advertising performs. It only runs if you accept it in Rally's cookie banner, and you can change your choice at any time using Cookie settings in the site footer. If you decline, Rally does not load the Meta Pixel or deliberately share visit information with Meta. Withdrawing consent stops future Meta events and Rally will attempt to remove Meta cookies on this site; it does not undo earlier processing.

You can also clear cookies and site data in your browser. Email hello@rallynow.co.uk if you need help. If we add tracking tools, we will update this policy and ask for consent where required.

Rally is for adults only. We do not knowingly collect personal data from anyone under 18, and trainers must confirm they coach adults only through Rally. If you believe a child has provided personal data, contact us and we will remove it.

We use reasonable technical and organisational measures, including encrypted HTTPS connections and restricted access. No system is completely secure. We will notify affected people and, where required, the ICO if a personal-data breach occurs. Keep your password confidential and do not share it.

Some providers, including Stripe, Meta, Google, Lovable and Supabase, may process personal data outside the United Kingdom, including in the United States.

Where data is transferred outside the UK, we rely on an applicable UK adequacy decision, the UK Extension to the EU–US Data Privacy Framework where the recipient participates, or approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum to the European Commission's standard contractual clauses.

You can ask which safeguard applies to a provider by emailing hello@rallynow.co.uk.

Under UK GDPR, you may have the right to:

• Ask what personal data we hold about you and receive a copy.
• Ask us to correct inaccurate data.
• Ask us to delete data where there is no legal reason to keep it.
• Object to or restrict certain uses.
• Ask for data in a portable format where technically feasible.
• Withdraw consent at any time where we rely on consent.

Email hello@rallynow.co.uk to exercise these rights. We will respond within one month.

We may update this policy as Rally develops, particularly when live bookings are enabled. We will update the date above and make material changes clear on the site.

Questions or concerns: hello@rallynow.co.uk, or write to Rally Now Ltd, 135 Torridon Road, London, SE6 1RG.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or call 0303 123 1113.

Rally Now Ltd · Registered in England and Wales, company no. 17422978 · ICO registration ZC233616 · 135 Torridon Road, London, SE6 1RG