Privacy Policy

Last updated: 14 July 2026

This Privacy Policy explains how Scala Intellis Limited (“we”, “us”), operator of Gym Stack 360 (the “Service”), handles personal data. If you are a member of a gym that uses Gym Stack 360, that gym is the controller of your data — please see “If you are a gym member” below.

1. Who we are and our roles

Gym Stack 360 is a management platform for gyms and fitness businesses. We handle personal data in two capacities:

As a controller — for the account data of the gym operators who subscribe to the Service (our direct customers).
As a processor — for the data that gym operators store about their own members, which we process on their instructions to provide the Service.

2. Information we collect

From gym operators (our customers)

Account details: name, business/gym name, email, phone, country, and login credentials (managed via our authentication provider).
Billing details: subscription tier and status. Card payments are processed by Stripe; we do not store full card numbers.
Usage, device, and log data, and cookies (see “Cookies”).

Gym member data (processed on behalf of gyms)

Member profile and contact details, check-in and access records, membership and plan details, class bookings, and payment records — entered or generated by the gym.
Member payments are processed by Stripe on the gym's connected Stripe account; we do not store full card numbers.

3. How we use personal data

To provide, operate, secure, and improve the Service.
To process subscriptions and payments and send service-related communications.
To provide support and respond to requests.
To detect, prevent, and address fraud, abuse, and security issues.
To comply with legal obligations.

4. Legal bases (EEA/UK)

Where the UK/EU GDPR applies, we rely on: performance of a contract; our legitimate interests in operating and securing the Service; your consent (where required, e.g. certain cookies or marketing); and compliance with legal obligations.

5. How we share data

We share personal data with service providers (“sub-processors”) that help us run the Service, under appropriate contractual protections, including:

Stripe — payment processing (operator subscriptions and member payments).
Twilio — SMS/WhatsApp notifications.
Resend — transactional email.
Auth0 — authentication and login.
Google Cloud — hosting and infrastructure.
Error-monitoring and analytics providers used to keep the Service reliable.

We may also disclose data to comply with law or protect rights and safety, and in connection with a merger, acquisition, or sale of assets. We do not sell personal data.

6. International transfers

We operate in the United States, Canada, the United Kingdom, Australia, and New Zealand, and use providers that may process data in other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data retention

We retain personal data for as long as needed to provide the Service and for legitimate business or legal purposes. Gym operators can export or delete their data from within the Service; on account termination we delete or anonymize data after a reasonable wind-down period, except where retention is legally required.

8. Security

We use technical and organizational measures — including encryption in transit, access controls, and reputable infrastructure providers — to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. To exercise these rights, contact us at support.gymstack360@scalaintellis.com. You also have the right to lodge a complaint with your local data protection authority.

10. If you are a gym member

If a gym uses Gym Stack 360, that gym is the controller of your personal data and decides how it is used. Please direct access or deletion requests to your gym. We will assist the gym in responding to such requests as their processor.

11. Cookies

We use cookies and similar technologies that are strictly necessary to run the Service (e.g. authentication and session management) and, where permitted, to understand usage and improve the Service. You can control non-essential cookies through your browser or any cookie controls we provide.

12. Children

The Service is intended for gym businesses and is not directed to children. Where a gym enrolls members who are minors, the gym is responsible for obtaining any required parental consent and for its lawful basis to process that data.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date; material changes may be communicated to account holders directly.

14. Contact

Scala Intellis Limited
Venture Hub, 136 Capel Street, Dublin 1, D01 T2C9, Ireland
Email: support.gymstack360@scalaintellis.com