Privacy Policy
This Privacy Policy explains how The Fix Collective Ltd, trading as MICRO by The Fix ("MICRO by The Fix", "we", "us", "our"), collects, uses and protects your personal data when you visit microbythefix.com (the "Site"), join our founding waitlist, submit an application, purchase or manage a membership, book or attend a class, treatment, event or service, complete a health declaration or media-consent form, or otherwise interact with us. We handle personal data in accordance with the UK GDPR, the Data Protection Act 2018 and applicable electronic-communications rules.
1. Who we are
The data controller is The Fix Collective Ltd, a company registered in England and Wales (company no. 16829203), registered office 128 Ebury Street, London SW1W 9QQ.
For privacy queries, to exercise your rights or to make a data-protection complaint, contact hello@microbythefix.com.
2. The information we collect
We may collect the following categories of personal data:
- Waitlist and application information: your name, email address, telephone number, preferred state, membership or tier interest, application responses, the source of your application and records of relevant consents or preferences.
- Identity, contact and account information: your name, email address, telephone number, account details and other information required to create or administer your customer or member account.
- Booking and attendance information: classes, appointments, treatments, events, services or memberships you book or purchase, together with booking history, attendance, cancellations, no-shows, guest privileges and refunds.
- Transaction and payment information: products or services purchased, amounts paid, payment status, transaction references, the payment method used and limited payment information made available to us. Where you expressly authorise a payment method to be saved for future membership charges, the payment provider may retain the card details and provide MICRO with a token, reference and limited card information needed to administer that authority. MICRO does not store your complete payment-card details.
- Communications: information contained in enquiries, requests, complaints, feedback and other communications with us.
- Technical and usage information: information such as IP address, browser and device type, pages viewed and interactions with the Site, to the extent collected through essential website technology.
- Marketing preferences: whether you have agreed to receive marketing communications and any changes to that preference.
- Health and participation information: limited information about relevant health conditions, injuries, pregnancy, accessibility requirements, participation restrictions or other matters you choose or are asked to provide so that we can assess safe participation. Health information is special-category personal data.
- Image and media information: photographs, video, audio, testimonials, interview material and the choices recorded in any Media Consent you provide.
Please do not provide health, medical or other sensitive information through general website, waitlist or application free-text fields unless we specifically ask for it through the designated health process.
3. How we use your information and our lawful basis
We use personal data to manage waitlists and applications, create and administer accounts, process and manage purchases, bookings, memberships and refunds, provide the services you request and communicate with you about them. Where you expressly authorise us to save and use a payment method for recurring or renewal membership charges, we also use the relevant payment reference to administer those charges. We rely on performance of our contract with you or steps taken at your request before entering into a contract.
We use personal data to send booking confirmations, receipts, reminders, opening information and other operational communications. We rely on performance of our contract and our legitimate interests in administering our services.
We maintain appropriate booking, attendance, transaction, accounting, complaint, fraud-prevention and customer-service records. We rely on legal obligations and our legitimate interests in managing and protecting our business and legal rights.
We send broader promotional emails about MICRO, events, memberships and other news where you have consented or where another electronic-marketing rule lawfully permits it. You can unsubscribe at any time.
We operate, secure and improve the Site and understand aggregate patterns of use. We rely on our legitimate interests and, for storage or access on a user device, the applicable consent requirement or statutory exception described in section 8.
Where we process health information for safe participation, adjustments, incident response or related safety purposes, we rely on your consent under Article 6(1)(a) and your explicit consent under Article 9(2)(a) of the UK GDPR. You may withdraw that consent at any time, although this may mean we cannot confirm that participation is safe or appropriate.
Where we intentionally use identifiable photographs, video, interviews or testimonials for promotional purposes, we rely on the media consent you have given for the relevant use. You may withdraw that consent as described in the Media Consent form.
We also process personal data where necessary to comply with legal and regulatory obligations.
4. Who we share it with
We do not sell your personal data. We may share it with trusted service providers and other recipients where necessary, including:
- Zera and other website, hosting, maintenance or technical service providers that process limited personal data on our instructions to operate, support, secure and maintain the Site;
- Tally, which hosts our online founding and membership application forms, together with its authorised service providers used to operate, secure and diagnose those forms (including error-monitoring providers);
- Airtable, which we use to store and manage application, member and related operational records. We do not use Airtable to store the health or other special-category data collected through our designated health and participation process. Airtable may use authorised sub-processors to provide its service; its current sub-processor list is published at airtable.com/company/subprocessors;
- Stripe and its relevant group companies and payment partners, which process payments, refunds, saved payment methods and related transaction information. Where you expressly authorise future recurring or renewal charges, Stripe may securely retain the payment method so that MICRO can initiate those charges in accordance with the applicable membership terms and your authorisation. Stripe acts as our processor for certain activities carried out on our instructions and may act as an independent controller for certain payment, fraud-prevention, compliance or platform activities;
- Mindbody and its relevant group companies and service providers, which provide booking, customer-management and payment functionality. Mindbody acts as our processor for certain processing carried out on our instructions and may also act as an independent controller for information associated with a Mindbody account and its own platform services;
- Substack, which we use for newsletter and email sign-ups and communications where you have requested or consented to them. A parallel consent record may also be stored in Airtable;
- Adobe Fonts, only where you choose to enable externally served Adobe web fonts through the Site privacy settings. In that case your browser connects to Adobe to obtain the relevant font resources and technical information such as your IP address may be transmitted to Adobe;
- authorised MICRO personnel, instructors and service providers who reasonably need relevant information for a class, treatment, event, safety adjustment or incident response, including limited health information where necessary;
- our professional advisers, insurers, accountants and auditors; and
- courts, regulators, law-enforcement bodies and public authorities where required by law or reasonably necessary to protect legal rights.
5. International transfers
Some service providers and their sub-processors may process personal data outside the United Kingdom, including in the United States or European Economic Area.
Where a restricted transfer is made to a country not covered by applicable UK adequacy regulations, we require an appropriate transfer mechanism where required, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful safeguard. Where a provider is covered by an applicable UK adequacy arrangement, we may rely on that arrangement.
For Airtable, the contractual transfer framework uses the EU Standard Contractual Clauses and, for restricted transfers from the United Kingdom, the UK International Data Transfer Addendum applies and takes precedence for the UK transfer. Airtable may update its authorised sub-processors subject to the notice and objection process in its data-processing agreement.
You may contact hello@microbythefix.com for further information about the safeguard applicable to a particular transfer.
6. How long we keep it
Pre-opening waitlist and application information is ordinarily retained until 12 months after MICRO opens, unless you ask us to delete it earlier where applicable. If MICRO has not opened within 24 months after registration, we will review whether the information is still required and either refresh the relevant permission or delete it.
After opening, an application from a person who does not become a member will ordinarily be retained for up to 12 months after the last meaningful interaction with that applicant, unless a longer period is reasonably required for a complaint, dispute or legal claim.
Customer-account, booking and attendance information is retained for as long as reasonably necessary to administer the relationship and will generally be retained for up to three years after the last booking or interaction, unless longer retention is reasonably necessary for a complaint, incident, dispute or legal claim.
Transaction, payment, accounting and related records will generally be retained for six years where required or appropriate for tax, accounting, dispute-resolution or legal purposes.
Health declarations and participation information will ordinarily be retained for three years after your last relevant participation. Information relating to an accident, injury, safeguarding concern, complaint or dispute may be retained for up to six years, or longer where reasonably necessary for an actual or anticipated legal claim.
Media-consent records and associated material are retained for as long as reasonably necessary for the authorised use and to evidence the consent given. Where you withdraw consent, we retain a limited record of the withdrawal where necessary to respect it.
We do not retain complete payment-card details. Where a payment method is saved for authorised future membership charges, Stripe or the relevant provider retains the underlying payment details in accordance with its applicable retention requirements; MICRO retains only the limited reference information reasonably needed to administer the membership and payment authority.
If you unsubscribe from marketing, we may retain a limited suppression record so that we can respect your request.
7. Your rights and complaints
Depending on the circumstances and lawful basis, you may have the right to request access to, correction of or deletion of your personal data; to request restriction; to object to certain processing; and to receive certain personal data in a portable format.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. You have an absolute right to object to direct marketing.
To exercise a right or make a data-protection complaint, contact hello@microbythefix.com. We will acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate it and communicate the outcome without undue delay.
You also have the right to complain to the Information Commissioner’s Office.
8. Cookies and Similar Technologies
The Site uses cookies, local storage and similar technologies where necessary to provide, secure and maintain its functionality.
MICRO does not currently use website analytics, advertising pixels or technologies designed to track visitors across visits for analytics or advertising purposes.
Our application forms are provided through Tally and may use storage technologies that are necessary for the forms to function properly and securely, together with Sentry error-monitoring technology used to identify and diagnose technical faults. Partial submission collection is disabled, so information entered into an application is not collected by MICRO unless the form is submitted.
The Tally form pages also load fonts from Google Fonts. When those fonts are loaded, technical information including the visitor's IP address may be transmitted to Google in order to deliver the font files.
We will update this Policy if the technologies used on the Site materially change.
9. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse. No internet transmission or storage system can be guaranteed to be completely secure.
10. Changes to this policy
We may update this policy from time to time. The current version will be available on the Site with its effective date.
11. Contact
Questions about this policy, your data or a data-protection complaint: hello@microbythefix.com.