Privacy Policy

Roll Call ("Roll Call", "we", "us") provides software that gyms use to run their membership, access and communications. This policy explains what we collect, how we use it, and your choices. For most data, the gym you train with is the controller and Roll Call is its service provider (processor); we handle data on the gym's behalf.

What we collect

• Account & membership details (name, email, phone, membership status).
• Attendance and access events at a gym that uses Roll Call.
• Face-recognition data, only where a gym enables it and a member consents — used solely to grant that member door access.
• Enquiries and leads you submit to a gym (including via the gym's Facebook or Instagram lead ads — see below).
• Basic technical/usage data needed to operate and secure the service.

How we use it

To provide the gym's services: managing membership and access, recording attendance, and sending the gym's communications (such as a welcome or follow-up message). We do not sell personal data, and we do not use it for advertising.

Facebook & Instagram Lead Ads

When a gym connects its Facebook or Instagram Page to Roll Call, and a person submits that gym's lead-ad form, Facebook shares the details the person entered (such as name, email address and phone number) with Roll Call. We use this information solely to (a) create a prospect record in that gym's Roll Call account and (b) send the person the gym's welcome and follow-up messages about training. We process this data as a service provider to the gym; the gym is the controller of its own leads. We do not sell lead data or use it for advertising. Lead data is retained until the gym deletes the prospect or the person requests deletion, whichever is first. To request deletion, contact privacy@rollcallaccess.com or see our data deletion page.

Sharing

We share data with the gym you interact with, and with the infrastructure and communications providers that run the service on our behalf (for example our hosting, database, email and SMS providers), under contracts that require them to protect it. We disclose data if required by law.

Retention & security

We keep personal data only as long as needed to provide the service or as the gym instructs, then delete or anonymise it. Secrets and sensitive fields are encrypted, and access is restricted to the gym and to the systems that need it.

Your choices

You can ask to access, correct or delete your data. Because the gym is usually the controller, we may direct your request to that gym, or action it on their behalf. Contact privacy@rollcallaccess.com.

Contact

Roll Call — privacy@rollcallaccess.com.