Version January 2026

This Privacy Policy governs the use of the websites of Bodacious Club Ltd, such as bodacious.club, including any related services offered on such websites (collectively, “Websites”). This Privacy Policy gives details of which information is collected by and provided to Bodacious Club Ltd, how Bodacious Club Ltd may use such information and whether such information constitutes personally identifiable information (“Personal Data”).

When visiting our home page, we consider it as very important to protect your personal data when collecting, processing and using it. Your data is protected according to the requirements of the legal provisions. Please find below some information indicating which data is recorded during your visit on our home page and how it is used.

This privacy information applies for data processing services carried out by:  Bodacious Club Ltd (hereinafter: Bodacious)
71-75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
fithappens@bodacious.club

You have the right:

• pursuant to Art. 16 GDPR, to obtain the immediate rectification of incorrect or incomplete of your personal data stored with us;
• pursuant to Art. 17 GDPR, to obtain the erasure of the personal data stored with us, unless the processing is required to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• pursuant to Art. 18 GDPR, to obtain the restriction of processing of your personal data, if the correctness of data is disputable, the processing is unlawful, but you refuse its erasure and we do not need the data anymore. On the other hand, you might need it to assert, exercise or defend legal claims or you have lodged an objection against the processing pursuant to art. 21 GDPR and it is not yet clear whether our legitimate reasons prevail your interests.  
• pursuant to Art. 20 GDPR, to obtain your personal data which you provided us, in a structured, common and machine-readable format or to demand the transfer to any other responsible person, insofar as the processing is based on your consent or a contract and the processing is made by means of automated procedures;  
• pursuant to Art. 7 seq. 3 GDPR, to withdraw your uniquely given consent at any time. This entails that a continued processing of your personal data is prohibited and    
• pursuant to Art. 77 GDPR, to lodge a complaint with the supervisory authority. As a rule, you can address to the supervisory authority at your usual place of residence or workplace or at our company headquarter.  
• pursuant to Art. 15 GDPR, to obtain information about your personal data processed by us. Insofar as we process your data you may request information especially about the processing purpose, the categories of personal data, the recipients of your disclosed personal data, especially recipients in third countries, the planned storage period or the criteria of determination, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data, if it was not collected by us as well as the existence of an automated decision-making including profiling and, if applicable, meaningful detailed information.

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 seq. 1 sent. 1 lit. e or f GDPR, you have the right, pursuant to Art. 21 GDPR, to appeal against processing your personal data insofar as there are reasons resulting from your particular situation or which are directed against direct advertising.

In the first case, we will no longer process your data unless we can prove compelling reasons that prevail your interests, liberties, and rights or our processing serves to assert, exercise or defend legal claims.

In the latter case, you have a general right of objection which is realized by us without indicating a particular situation. If you want to make use of your right of revocation or objection, an email to fithappens@bodacious.club will be sufficient.

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

• you have expressly given your consent pursuant to Art. 6 seq. 1 sent. 1 lit. a GDPR  
• the transfer pursuant to Art. 6 seq. 1 sent. 1 lit. f GDPR is required for the assertion, exercise or defence of legal claims and there is no reason to assume that you have a prevailing legitimate interest in not transferring your data,
• in the event that there is a legal obligation to transfer data pursuant to Art. 6 seq. 1 sent. 1 lit. c GDPR, and  
• this is required by law and pursuant to Art. 6 seq. 1 sent. 1 lit. b GDPR for the execution of contractual relationships with you.
• In addition, your personal data are processed by our order processors in compliance with instructions, insofar as this is necessary for the fulfilment of the order. Our contract processors do not have an own right to use your data.  

We use the common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual page of our website is transmitted in encrypted form by the representation of the closed bowl or lock symbol or by the use of “https” in front of the address of our (sub)website. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in accordance with technological development.

Data will be transmitted by us to third countries exclusively in accordance with statutory regulations.

Insofar as we fulfill our contract with you, data are made available to third parties. Appropriate safeguards pursuant to Art. 46 GDPR or an adequacy decision pursuant to Art. 45 GDPR is not necessary.

If you have not consented to the data transfer, if the data transfer does not serve the fulfillment of the contract or if the transfer is necessary for the assertion, exercise or defense of legal claims, the data are only transferred by us if there are suitable safeguards or an adequacy decision.

A suitable safeguard exists, for example, if the EU standard contractual clauses issued by the EU Commission have been concluded.

The legal basis is Art. 45 and 46 GDPR.

Specific privacy information for data processing operations on the website.

When visiting our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the retrieved file
• website allowing the access (referrer-URL),
• used browser and the operating system of the computer as well as the name of your access provider.  

The mentioned data are processed by us for the following purposes:

• to ensure a smooth connection to our website,  
• to ensure a comfortable use of our website,
• assessment of the system security and stability as well as  
• for further administrative purposes.

The legal basis for data processing is laid down in Art. 6 seq. 1 sent. 1 lit. f GDPR. Our legitimate interest lies in the operation of our website and the related presentation of our company.

Your data will be deleted as soon as they are no longer required for the stated purposes, after 6 months at the latest.

You can pose questions of any kind through our contact form which is available on our website. The indication of your valid email address and your name is required enabling us to trace the sender of the enquiry and to respond to it. Further information can be provided voluntarily.

Data processing for the purpose of entering into contact with us is made pursuant to Art. 6 seq. 1 sent. 1 lit. a GDPR and is based on your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically erased after you have completed your request.

If your request is directed to the conclusion of a contract, Art. 6 seq. 1 sent. 1 lit. b) GDPR serves as the legal basis. In this case, we store your data for the duration of the statutory retention periods.

We use cookies on our site. These are small files that your browser automatically creates, and which are stored on your terminal device (laptop, tablet, smartphone, etc.). Cookies do not harm your terminal device and do not contain viruses, trojans or other malware. The cookie is used to store information that arises in connection with the specific terminal device used. However, this does not mean that we will immediately become aware of your identity.

Analysis tools are used to evaluate the behavior of the website visitors and enable the provider to optimize the website and adapt marketing measures.

Plugins and other elements from third parties are used to integrate the content of these providers into the website.

The use of our necessary first-party cookies serves on the one hand to make the use of our range more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically erased after leaving our site.

In addition, we also use temporary cookies to optimize user-friendliness, which is stored on your terminal device for a certain period of time. If you visit our site again in order to use our services, it automatically recognizes that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

These data will be erased after 6 months at the latest.

We process your data on the basis of our legitimate interest in the external presentation of our company via the website you have called up and to promote user-friendliness. The legal basis for the processing is Art. 6 seq. 1 sent. 1 lit. f GDPR.

Most browsers automatically accept these cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before such a cookie is generated. However, if cookies are completely deactivated, the website may not be displayed correctly, or you may not be able to use all the functions of our website.

The following indicated and used third-party cookies, analysis tools, plugins, and elements of third parties are used only after receipt of your expressly given consent based on Art. 6 seq. 1 sent. 1 lit. a) GDPR. You can withdraw your given consents here at any time in the future. The withdraw of your consent or not giving your consent may lead to an incorrect display of the website or the website does not allow to use of all functions.

With the Third-Party-Cookies analysis tools, plugins, and other elements of third parties we want to ensure a need-based design, marketing measures, and the continuous optimization of our website. In addition, we use the tracking measures in order to statistically record the use of our website and evaluate it for the purpose of optimizing our services for you.

The respective functional descriptions, possible recipients of the data, information on possible transfers to a third country, and the storage duration can be found in the following notes on the individual processing steps with third-party cookies, analysis tools, plug-ins, and other third-party elements.

We use Google Analytics, a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; referred to in the following as “Google”), to design our website in line with needs and to optimize our sites on an ongoing basis. In this connection, pseudonymized usage profiles are produced and cookies are used. Information on your use of this website generated by the cookie such as

• the browser type/version,
• the operating system used,
• the referrer URL (the previous site visited),
• the hostname of the accessing computer (IP address),
• the time of day when the server enquiry is made,
• high-level location (city-level) and device details,

is transferred to a Google server and stored there. Google maintains servers around the world, which means your data could be stored and processed on a server outside of the country where you live (e. g. the USA). The information is used to evaluate the use of the website, compile reports on website activities, and provide further services associated with the use of the website and Internet for the purposes of market research and demand-oriented design of these Internet sites. This information may also be transferred to third parties if this is required by law or if third parties process are commissioned to do process this data. Under no circumstances will your IP address be combined with other data of Google. IP addresses are anonymized so that it is not possible to associate them with certain parties (IP masking).

Google uses the collected data for its own purposes as well. For instance, if you have an account for Google services (such as gmail, YouTube etc.), Google can match your visit on our site to your account-profile to provide you with personalised ads – if you activated this service and are logged into your Google account while visiting this website. If you do not wish your data to be used by Google in such way, we suggest, you log out of your Google account and delete Google Analytics cookies stored on your device by this website (if you had accepted them previously) before revisiting this website.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de). You can find Google’s privacy statement and terms of use under https://policies.google.com/privacy?hl=en-US. Where Google transfers data to the USA as a third country, Google pledges to rely on the Standard Contractual Clauses (SCCs) adopted by the European Commission (https://policies.google.com/privacy/frameworks?hl=en-US).

We use AppsFlyer, a mobile measurement and attribution service, to help us understand how users discover our app, measure the effectiveness of our marketing campaigns, and detect fraudulent activity.

AppsFlyer may collect and process information such as device identifiers, IP address, operating system, app usage events, and attribution data for analytics, attribution, and performance measurement purposes. This information is processed in accordance with applicable data protection laws and AppsFlyer’s privacy policy.