What we collect, and why.

StudioIndex is a UK fitness-market intelligence service. You can reach us at hello@studioindex.uk for anything in this notice, including data protection requests.

StudioIndex is a trading name of Fitness Industry Sales Ltd, registered in England and Wales. Registered office: 71–75 Shelton Street, London, Greater London, WC2H 9JQ. Data protection enquiries: support@fitphone.ai.

When you sign up for or use the studio portal, we collect:

• Your account email — used for magic-link sign-in and service emails (receipts, alerts, notices about your subscription).
• Your studio or organisation name.
• Postcodes you supply to set up catchment features — your home, work or studio location, used to calculate the radius of studios we track for you.
• Subscription and payment status, via Stripe. We never see or store your card number — Stripe handles that directly.
• An essential session cookie (si_session) that keeps you signed in. It is strictly necessary for the service to work — it is not a tracking or advertising cookie, and we don't set any of those.
• Standard server logs (IP address, request timestamps, error traces) kept briefly for security and reliability.

Separately from account data, StudioIndex maintains a dataset of UK fitness studios and gyms — business information gathered from public sources such as studio websites and public business listings, plus advertising insights derived from Meta's public Ad Library.

This is business metadata — names, locations, pricing, opening status, whether a business is currently running ads — not consumer personal data. We do not store ad creative (images or copy), only descriptive metadata about whether and how a business is advertising.

Where this dataset includes information that could identify an individual (for example, a sole-trader studio owner's name), our lawful basis for processing it is legitimate interests — specifically, providing B2B market intelligence to studio owners and agencies about a market they already operate in. If you run a studio and want to query, correct or object to what we hold about your business, email us and we'll act on it.

• Contract — account data and catchment postcodes, to provide the service you've subscribed to.
• Legitimate interests — the studio dataset and ad insights, and basic server logs for security.
• Consent — any optional marketing emails outside core service notices; you can withdraw this at any time.

Account data is kept for as long as your subscription is active, plus a reasonable period afterwards for accounting, dispute and legal-obligation purposes. Dataset records are refreshed monthly and superseded records are retained as historical diff data — that history is the product. Server logs are kept briefly and rotated out.

We use a small number of subprocessors to run the service. None of them may use your data for their own purposes.

Some of our subprocessors (including Stripe and Vercel) may process data outside the UK, including in the United States. Where this happens, we rely on their standard contractual clauses or equivalent recognised safeguards to keep your data protected to UK standards.

Under UK GDPR you have the right to access, correct, delete or port your personal data, and to object to or restrict certain processing — including the legitimate-interests processing described above. To exercise any of these, email hello@studioindex.uk and we'll respond within a month.

If you're unhappy with how we've handled your data, you can complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk. We'd appreciate the chance to put it right first.

We'll update this page if what we collect or how we use it changes, and update the date below. Material changes affecting account holders will be flagged by email.