We use cookies to give you the best possible online experience. If you continue, we'll assume you are happy for your web browser to receive all cookies from our website. See our cookies policy for more information on cookies and how to manage them.

Privacy Policy

We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal information for Aviva Get Active. It also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint.

We collect, use and are responsible for certain personal information about you. When we do so we are subject to the General Data Protection Regulation, which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controller’ of that personal information.

Key terms

It would be helpful to start by explaining some key terms used in this policy:

we, us, our Aviva Health UK Limited
8 Surrey Street, Norwich, NR1 3NG
Company Number: 02464270
Personal information Any information relating to an identified or identifiable individual
Services Providing access to discounted gym membership at eligible establishments.

Personal information we collect about you

The personal data you input when buying a membership on is retained on a customer management system (CMS) operated by Health Force Limited which is password protected and held on secure servers. Access to the CMS is limited to a small number of senior staff members at Aviva Health UK Limited and Health Force Ltd (CRN 6021011).

What information is being collected?

We may collect and use the following personal information about you:

  • your name and contact information, including email address and telephone number;
  • information to enable us to check and verify your identity, eg your date of birth;
  • location data when you select a club near you;
  • your club membership type.

This personal information is required for us to provide the Services to you. If you do not provide personal information we ask for, it may delay or prevent us from providing the Services to you.

How your personal information is collected

We collect this personal information directly from you via our website (

If you purchase a health club membership on, the information you provide, as set out above, is retained on Health Force Limited’s content management system, hosted by Woven Agency Ltd, which is held on a secure server. We are the Data Controller and Health Force Limited are the Data Processor.

For further details about Aviva’s roles and responsibilities, please see Aviva’s privacy policy (

Any payments made through are processed by PayPal. No credit card or debit card details are held or can be viewed by us or Health Force Limited. When you pay via PayPal, this transaction is governed by PayPal’s terms and conditions and privacy policy (

How and why we use your personal information

Under data protection law, we can only use your personal information if we have a legitimate reason for doing so. In this instance, we need to process the personal information for the performance of our contract with you, namely providing you with access to this benefit.

Who we share your personal information with

When you purchase a health club membership, an email containing your personal data and details of the club you are joining is automatically sent to your health club or the health club’s head office and used by the health club operator to set up your membership.

Your data is held on a content management system and used by senior officers of Health Force Limited to aid with customer or health club enquiries.

In addition to the above, we may share personal information with:

  • Woven Agency Ltd who host the website (,);
  • GFM Holding Ltd who operate the call centre responsible for resolving queries about Aviva Get Active

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

Where will my data be held

Your data will be held by Health Force Limited within the European Economic Area (EEA). Your data will not be transferred outside of the EEA except if you are located outside the EEA and are accessing the data from your own location.

How long will we keep your personal data

We will hold your personal data on Health Force Limited’s system for a period of 30 days after you purchase your gym membership.

Your rights

Under certain circumstances, you have rights under the data protection laws in relation to your personal data. For further information on your rights, please see our privacy policy and the section titled ‘your rights’ for more detail.

Keeping your personal information secure

We have appropriate security measures to prevent personal information from being accidentally lost, or used or accessed unlawfully. We limit access to your personal information to those who have a genuine business need to access it in an authorised manner and subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

How to complain

If you’re not happy with the way we’re handling your information, you have a right to make a complaint to your local data protection supervisory authority at any time. In the UK this is the Information Commissioners Office (ICO).

We ask that you please attempt to resolve any issues with us before contacting the ICO.

Changes to this privacy policy

We may change this privacy notice from time to time - when we do we will inform you via our website.

How to contact us

If you have any questions about this privacy policy or how to exercise your rights please contact our Data Protection Officer.

Write to: The Data Protection Officer, Level 5, Aviva, Pitheavlis, Perth, PH2 0NH or email us:

WC02774 10/2019