Privacy policy

Privacy policy

Last updated: 11 October 2026

Who we are

Cook Family Ltd trading as Pegasus Gym operates Pegasus Gym Store and is the controller responsible for the personal information it uses to operate this store. Contact us at info@pegasusgym.co.uk, 01296 256745, or Pegasus Gym, 2 Britannia Walk, Aylesbury, Buckinghamshire, HP20 1QR for privacy questions or to exercise your rights. This notice covers the online store and related order enquiries; it does not describe separate gym membership services.

Information we use

We use information you provide when ordering, creating an account, contacting us, arranging collection, subscribing to messages or requesting a return. This can include your name, contact and delivery details, order and payment-transaction information, preferences and correspondence. Our website and service providers also process device, browser, IP address and information about how the store is used. Payment providers process your payment credentials; please do not email us full card details or unnecessary sensitive information.

Why we use information and our lawful bases

  • Orders and customer service: to take payment, supply products, arrange gym collection or supplier delivery, send order updates and handle returns. We rely on performance of our contract with you or steps requested before entering it.
  • Legal obligations: to keep required accounting and tax records, respond to lawful requests and meet consumer and data-protection duties.
  • Legitimate interests: proportionate fraud prevention, store security, resolving disputes and improving our service, balanced against your rights. You can object to processing based on legitimate interests.
  • Marketing and optional technologies: we rely on consent where required for promotional messages and non-essential cookies or similar technologies. You may withdraw consent at any time. Unsubscribing from marketing does not stop necessary order messages.

Who receives information

Our store is hosted by Shopify. We share relevant information with providers supporting hosting, checkout, payments, communications, security and, where applicable, analytics or advertising. Google and Meta integrations may process activity data when enabled and permitted by your privacy choices. We may share information with professional advisers and public authorities where necessary and lawful.

Direct supplier fulfilment: when a supplier sends an item, including through Shopify Collective, we share the order details and contact/delivery information needed to fulfil, track or resolve that order. Relevant suppliers and carriers receive only the information needed for their role. Some providers also act as independent controllers under their own privacy notices. We remain your contact for the Pegasus order.

For more about Shopify's processing, see Shopify's privacy policy and privacy portal.

Shopify Network Intelligence

Shopify Network Intelligence is enabled for this store. Shopify may combine information from interactions with our store with information from other merchants and Shopify services to improve services, advertising and personalisation, subject to applicable law and privacy choices. Shopify is responsible for its own processing as described in its privacy policy. Other merchants cannot view your customer data through this feature. You can use Shopify’s privacy portal to exercise relevant rights directly with Shopify, and contact us about our own use.

Cookies and privacy choices

Essential technologies support functions such as the basket, checkout and security. Optional analytics and advertising technologies can help measure or personalise marketing. Where required, your consent is requested before optional technologies are used. Use the store's cookie/privacy controls, where displayed, or your browser settings to manage choices; blocking essential cookies can affect shopping. Contact us if you cannot access a privacy control. A privacy notice is not itself consent.

International processing

Shopify and other service providers may process information outside the UK. Where UK law requires safeguards, transfers must use an applicable adequacy decision or approved contractual safeguards with any necessary additional measures. Contact us for information about the safeguards relevant to your data.

How long we keep information

We retain information only as long as needed for the purpose for which it was collected, including fulfilling orders, administering returns, maintaining requested accounts, meeting legal record-keeping duties and resolving claims. Retention depends on the type of record and applicable obligations. Marketing details are retained while needed for permitted communications; a limited suppression record may be kept after you unsubscribe to respect that choice. Contact us for information about a particular record.

Your rights

Depending on the circumstances, UK data-protection law gives you rights to access, correct or erase your information, restrict or object to processing, receive portable information and withdraw consent. Rights are not absolute; for example, we may need to retain legally required records. Contact us using the details above. We may request proportionate information to confirm identity and will normally respond within one month, explaining any lawful extension.

You may complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. You do not have to contact us first, although we welcome the opportunity to resolve concerns.

Children and security

Our children's products are intended to be purchased by parents or other responsible adults. Please do not submit unnecessary personal information about children. Contact us if a child has provided information that should be removed. We use appropriate measures to protect personal information, but no system can guarantee absolute security.

Changes

We may update this notice when our services or practices change. The latest version and update date will appear here.