Privacy policy

Who controls your information

CHALLENGE LIFE CLUB LTD (company number 12564037) is the data controller for the Challenge Life website and customer enquiries. Its registered office is 123 Bronte Avenue, Fairfield, Hitchin, England, SG5 4FT. The public trading address is Unit 14–15 Business Centre, West Avenue 1, Letchworth Garden City, SG6 2HB.

Information we collect

When you submit an enquiry we may collect your name, contact details, goals, training experience, preferred times, company information and the message you provide. We also record limited source, referral and campaign information where available. Please do not include medical or other sensitive information in a website enquiry; the team will discuss any relevant health information through an appropriate process before you train.

Why we use information

We use enquiry information to respond to you and take steps towards providing a requested service. We rely on those pre-contract steps where you ask about training or membership. We rely on our legitimate interests to administer enquiries, keep the website and forms secure, understand which journeys are useful and improve our service. Where you choose to receive occasional news, or accept optional website analytics, we rely on your consent. You can withdraw that consent at any time.

Website analytics

If you accept analytics cookies, Google Analytics 4 processes limited website usage information such as pages viewed, traffic source, device category, approximate geography and non-personal interactions. Challenge Life uses this information to understand and improve the website and its commercial journeys. Analytics remains off when you reject it. We do not intentionally send names, email addresses, telephone numbers, health information or membership details to Google Analytics.

Service providers

We use Vercel to host and operate the website, Supabase to store enquiries and provide administrator authentication, Brevo to send enquiry acknowledgements and notifications, Cloudflare Turnstile to protect forms from automated abuse, and Google Analytics for consented website measurement. These organisations process information for their stated role and under their own security and data-protection arrangements. We may also share information where required by law, to protect legal rights or with professional advisers who owe duties of confidentiality.

International processing

Some service providers or their subprocessors may process information outside the United Kingdom. Where required, we use providers that put recognised transfer safeguards in place, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses. You can ask us for more information about the safeguards relevant to your information.

Retention and security

Non-member website enquiries will normally be retained for up to 24 months after the last meaningful interaction, unless a live customer relationship, legal obligation or active dispute requires longer retention. We use access controls and appropriately configured service providers to reduce the risk of unauthorised access, loss or misuse.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase your information; restrict or object to its use; and receive or transfer certain information. Some rights are qualified and may not apply to every use. You can withdraw marketing or analytics consent at any time without affecting earlier lawful processing.

To exercise a right or raise a data-protection concern, email hello@challenge-life.co.uk. If you are not satisfied with our response, you may complain to the Information Commissioner’s Office.

Updates

We will update this notice when our website services or data practices materially change. Last updated: 24 August 2026.