Playbook, gym

Delete everything, says a member who still owes money

A member asking a gym to erase them is picturing an email address on a mailing list. What the club actually holds is a health commitment statement they filled in and forgot, every fob read at the barrier since they joined, whatever a trainer wrote on a programme card, and often a balance. Those are four different answers and none of them can be settled in a chat window.

Why this is not the general answer

The handling pattern for data deletion requests holds across every trade. What follows is the part that does not.

  • A health commitment statement or a pre exercise screening form is health information the member volunteered at the desk, and it sits under a different rule from a marketing preference, which is what they think they are asking about.
  • Entry records are a by-product of the barrier rather than a file somebody chose to keep: every scan is a timestamped read, and nobody picturing deletion has pictured a year of them.
  • Where instalments are outstanding the club has a reason to keep enough to pursue the balance, so the request arrives tangled up with a debt and has to be separated by a person before either half can be answered.
  • Clubs hold things members do not think of as data at all: body composition readings, fitness test results, a programme written by a trainer, and camera footage on its own much shorter cycle.

How it arrives

  • delete everything you have about me
  • how long do you keep my health form
  • do you keep a record of every time i scan in
  • can i be deleted if i still owe you money
  • take me off your marketing list
  • who do i send a data request to

What has to be indexed for this to work

Material behind this answer
The retention schedule, record type by record typeHow long each kind of record is kept and measured from what event. Quoting a period with its starting point is what makes a qualified answer read as a rule rather than as an excuse.
What the record actually consists ofThe membership agreement, the health commitment statement, entry scans, class bookings, programme cards, body composition readings, correspondence and camera footage with its own retention. Listing it stops the assistant answering as though a record were one row.
The position where a balance is outstandingThat deletion and a debt are handled separately, and who deals with each. This is the case that arrives most often and the one an unprepared answer gets most wrong.
What can genuinely be changed on requestMarketing preferences, the number used for class reminders, whether the member appears in club photographs. There is nearly always something you can act on, and naming it keeps the reply from being a flat no.

The reply

A reply worth copying
It is more than a mailing list entry, so it is worth knowing what is held: the membership agreement, the health commitment statement you completed, entry records from the barrier and any programme a trainer wrote for you, each kept for the period in our privacy notice [1]. Where a balance is outstanding, that is handled separately from a deletion request. Marketing preferences are the part that can be changed straight away [2]. I cannot change anything from here, so leave me your name and an email and it goes to the person who handles these.

It lists what is held before it discusses deletion, because the member is asking about something much smaller than what exists. The balance is mentioned as a separate matter rather than as a refusal, which keeps it factual. And it offers the part that genuinely moves, so the message is not simply a no with a citation attached.

Where it stops

The trigger. Any request phrased as deletion or erasure, any request for a copy of what is held, and any request made on somebody else's behalf.

The handover, worded
This is a request rather than a question, so I am passing it on. Leave me your name, an email and a short note of what you are asking for, and you will get a reply within the period in our privacy notice.

It stops answering before it guesses, says who will pick it up, and asks for the one thing that makes a reply possible. Nothing about it reads as a dead end.

Never say this here

Out of bounds

  • Never confirm that anything has been deleted, because nothing here changes a record.
  • Never state a retention period that is not in your own published notice.
  • Never confirm whether a named person is or was a member, including to somebody who says they are a relative.
  • Never say a balance will be written off, or that a deletion request cancels a debt.

Questions

Can it remove somebody from the marketing list at least?
No, not even that. Every request ends as a message to the address you nominate, and the enquiry is stored as well as emailed, which matters most when a deadline is attached to it.
How should it handle deletion asked alongside a cancellation?
As two requests, said plainly in one reply. They arrive together constantly, they go to different people, and a member who thinks the deletion request also served notice will stop paying and end up in arrears.
Do members really ask about entry scans?
Rarely at first, and often once the list is in front of them. Publishing it beats the alternative, which is a member discovering the scan history during a dispute and treating it as surveillance nobody mentioned.

Keep reading

Try it on your own material

Upload a document or point it at your site, paste one line of HTML, then ask it something only your business could answer.