Your data, your rights

Privacy policy.

M2 Training Club Limited ("M2", "we", "us"), 8 Nugent Street, Grafton, Auckland 1023. Email reception@m2club.co.nz.

We follow the New Zealand Privacy Act 2020 when we collect, use and look after your personal information.

What we collect

When you enquire, register for an event, start a trial or join M2, we may collect your name, email, phone number, date of birth, emergency contact and payment details, plus anything you tell us in a form or questionnaire (for example your training goals when you book a free PT session). If you train with us through Fitness Passport, Fitness Passport confirms your membership status with us.

How we use it

We use your information to manage your membership, take payments, run class and recovery bookings, reply to your enquiries, match you with a coach, and send you service updates. If you've agreed to it, we also send you news and offers by email or text. You can opt out at any time.

Website analytics, cookies and advertising

Our website uses a few tools that set cookies or similar technology in your browser:

  • Google Analytics. Helps us understand how people use the site, such as which pages are visited and which buttons are clicked (for example "start your trial" or "join"). This information is about how the site is used and isn't used to identify you personally.
  • Meta Pixel (Facebook and Instagram). Lets us measure how our ads perform and show relevant M2 ads to people who have visited our site. Meta may combine this with information it already holds about you, under Meta's own privacy policy.

You can block or delete cookies in your browser settings, and manage ad preferences in your Facebook and Instagram settings. You can also opt out of Google Analytics with Google's browser add-on.

When you join online, we also tell Meta that a sign-up happened, so we can see which of our ads work. Your email, phone, name, city and postcode are scrambled (hashed) before they leave our server, and sign-ups made at reception aren't sent.

The M2 app

When you sign in to the M2 app with your email and password, the app shows your membership, visits and class bookings from GymMaster. Anything you log yourself in the app, such as workouts, recovery sessions and food, stays on your phone and isn't sent to us. If you set your app password from the link we email you, we keep only a scrambled (hashed) copy of it, never the password itself. If you ask for a free PT session in the app, your answers go to our coaching team so we can match you with a trainer.

Location. When you tap Open door, the app checks your phone's location once to confirm you're at the club. It's only used for that check. We don't track your location and we don't keep it.

Notifications. If you allow notifications, the app sets class reminders and the odd nudge on your phone. You can turn these off in the app or in your phone's settings.

Apple Health and Health Connect. If you connect Apple Health (iPhone) or Health Connect (Android), the app reads your steps, active energy, resting heart rate, heart rate variability, sleep and workouts so it can show them to you. You choose what to share on your phone's permission screen. This data is read on your phone only and isn't sent to us or anyone else, with one exception: if you have an M2 coach and send them a weekly check-in, your average steps and sleep for that week go with it. It isn't used for advertising, and the app never writes to Apple Health or Health Connect. You can disconnect in the app, or remove access in your phone's Health or Health Connect settings.

Strava. If you connect Strava, you sign in on Strava's own page and choose to let M2 see your activities. We keep the link Strava gives us so the app can show your recent runs, rides and workouts (type, date, time, distance and heart rate). We only read your own activities, we don't post anything to Strava and other members never see them. Tap Disconnect Strava in the app and we delete that link straight away. You can also remove M2 in your Strava settings.

WHOOP. If you connect WHOOP, you sign in on WHOOP's own page and choose to let M2 see your data. We keep the link WHOOP gives us, locked with encryption, so the app can show your recovery score, heart rate variability, resting heart rate, sleep, strain and recent workouts. We only read your own data, we don't post anything to WHOOP and other members never see it. Tap Disconnect WHOOP in the app, or delete your app account, and we delete that link straight away and ask WHOOP to remove M2's access. You can also remove M2 in your WHOOP settings.

Garmin. If you connect Garmin, you sign in on Garmin's own page and choose what to share with M2. Garmin then sends us your daily summary (steps, resting heart rate, stress and Body Battery), sleep and workouts, and we keep them with your app account so the app can show them to you next to your visits, classes and recovery. We only use your Garmin data to show it to you. Other members and our staff screens never see it, we never sell or share it, we don't use it for advertising, and it is never put through AI tools or used to train AI models. Tap Disconnect Garmin in the app, or delete your app account, and we delete your Garmin data and the link straight away and stop receiving data from Garmin. You can also remove M2 in your Garmin Connect settings.

Coaching. If an M2 trainer coaches you in the app, your coach sees your program, the sessions you tick and the notes you write, your messages, your weekly check-ins and your recent visits. When you send a check-in, your answers, comment, that week's training and your session notes go to Anthropic's Claude (an AI) with your first name only, so it can draft a reply for your coach. Your coach reads and edits every reply before you get it. Anthropic doesn't use this to train its models. Your messages and check-ins are deleted when you delete your app account.

Deleting your account. You can ask us to delete your app account and data from the Me tab in the app (Delete my account), or by emailing reception@m2club.co.nz.

Who we share it with

We only share information with the services that help us run M2: GymMaster (memberships, billing, member emails, the M2 app, class bookings and door access), Technogym Mywellness (class timetable and bookings), Google (website analytics, and storing enquiries from some website forms), Web3Forms (delivering website form messages to us), Stripe (online merchandise payments), Meta (advertising) and Fitness Passport (for Passport members) Strava, WHOOP and Garmin (only if you connect them in the app), Anthropic (drafting your coach's reply to a weekly check-in, only if you have a coach), and Cloudflare, which hosts our website and the servers behind the M2 app. We don't sell your information.

Keeping it safe

We take reasonable steps to keep your information secure and only keep it for as long as we need it. Some of the services above store information overseas, and we choose providers that protect it to a comparable standard.

Your rights

You can ask to see, correct, export or delete the personal information we hold about you at any time by emailing reception@m2club.co.nz. You can unsubscribe from marketing emails using the link in any email we send, or by replying to let us know.

Changes

We may update this policy from time to time. Any changes will be posted on this page.

Last updated: November 2026

Try 10 days for $10