Tramp Health

This page explains how Members of Tramp Health (Mayfair) Ltd T/a Tramp Health can delete their account and associated personal data held in connection with the Tramp Health mobile application (the “App”) and Club services.

1. How to delete your account

1.1 In-App self-service (recommended). Tap “Delete App Account” in the Profile tab (bottom of the screen) or in Settings → Delete Account. A confirmation dialog explains exactly what will be removed and what the Club is legally required to retain. Tapping confirm completes the deletion immediately. No email, phone call or visit to the Club is required.

1.2 Membership-record erasure (optional, additional). Some records are kept by the Club after in-app deletion because we are legally required to hold them (see clause 3). If you want those records erased as well, to the extent we are permitted to do so, contact Francesco, our Privacy and Data Protection Officer:

• Email francesco@tramp.co.uk from the address registered on your account, with subject line “Account Deletion Request”; or
• Write to the Privacy and Data Protection Officer, Francesco, at 3 Upper Grosvenor St, London W1K 2NR.

1.3 We may ask you to verify your identity before processing a Membership-record erasure request. This protects you against fraudulent or malicious deletion requests.

2. What the in-App “Delete App Account” button removes

2.1 Tapping “Delete App Account” immediately and irreversibly:

• removes your app login identity (Microsoft Entra ID / CIAM account) so you can no longer sign in;
• removes your profile photo;
• disconnects and deletes data from any linked WHOOP or Oura Ring integration (access tokens revoked, synced HRV / sleep / readiness / strain data deleted);
• deletes your AI Concierge chat history (in-app and WhatsApp);
• clears push-notification subscriptions for this device;
• clears app-side consent stamps (privacy-policy version and date you accepted);
• wipes all locally-cached data from the App on this device (localStorage, IndexedDB, session storage);
• marks your Member record as Deleted so future sign-in attempts are rejected; and
• anonymises directly-identifying fields on the retained Member record: your name is replaced with a placeholder, your email is replaced with a non-deliverable per-account sentinel, and your phone number, date of birth, gender, address, emergency contact and any free-text profile notes are erased.

3. What the Club is required to retain

3.1 Article 17(3) of the UK GDPR permits a data controller to retain personal data after a deletion request to the extent processing is necessary for one of the listed grounds. We rely on grounds (b) compliance with a legal obligation and (e) establishment, exercise or defence of legal claims. On that basis, the following are retained for the periods set out below:

• Financial and tax records — invoices, receipts, Direct Debit instructions, refunds, Stripe and GoCardless payment records — retained for at least 6 years from the end of the relevant accounting period (Companies Act 2006 s.388; HMRC requirements).
• Clinical and treatment records, where any regulated practitioner has provided you with a service through the Club — retained in line with the relevant professional body’s guidance, typically 8 years from the date of the last treatment for adults.
• Attendance and access records (Check-Ins, Appointments, Orders, Guest Passes, Member Packages) — retained for 6 years for accounting reconciliation and to defend or bring claims under the Membership Terms and Conditions.
• Audit and security logs — retained as required to evidence access, fraud prevention or incident response.
• Records necessary to establish, exercise or defend legal claims, until the relevant limitation period has elapsed.
• Anonymised, aggregated analytics that do not identify you.

3.2 Retained records are held under strict access controls and are deleted at the end of the applicable retention period.

3.3 Once the in-App deletion has completed, the records listed above are no longer linked to your name, email, phone, date of birth or address — they are linked only to billing identifiers (Stripe customer ID, GoCardless mandate ID) and the anonymised Member ID. You can request total erasure of those records once the applicable retention period has expired by contacting Francesco, our Privacy and Data Protection Officer, at francesco@tramp.co.uk.

4. If you have an active Membership

4.1 Deleting your app account does not automatically cancel a paid Membership. If you have an active paid Membership and you want to stop being billed, ask the Membership Team to cancel your Membership separately. Cancellation takes effect at the end of the then-current paid month in accordance with clause 5.3 of the Terms and Conditions.

4.2 Any outstanding balance, late-cancellation charge, or sum properly due under the Terms and Conditions remains payable. We may retain limited records (your name, the amount owed, and the basis for the charge) until that sum is paid, in reliance on UK GDPR Art. 17(3)(e).

5. Timescale

5.1 In-App deletion is immediate.

5.2 Membership-record erasure requests sent to Francesco, our Privacy and Data Protection Officer: we aim to confirm receipt within 5 working days and to complete the parts of the request we are permitted to action within 30 days of confirming your identity, in line with Article 12(3) of the UK GDPR. Where the request is complex or where we receive a high volume of requests, we may extend this period by up to a further two months. We will tell you if we need to do so and explain why.

6. Effect of deletion

6.1 Once your app account is deleted you will lose access to the App, your booking flow, the AI Concierge, your wearables sync, and any Content tied to your account. In-App deletion is irreversible.

6.2 If your Membership is still active, you will still be able to enter the Club using your existing access method (e.g. front-desk check-in) until the Membership itself is cancelled and any required notice period has run.

6.3 If you wish to use the App again in the future, you will need to register a new account.

7. Third-party services

7.1 Where you have linked third-party services to your account (for example, WHOOP, Oura, Stripe, GoCardless, WhatsApp, Apple ID, Google Play), deletion of your Tramp Health account does not delete data held by those third parties under their own controllership.

7.2 To remove data held by those third parties, please contact them directly. We will, on request, provide reasonable assistance in identifying which third parties hold what.

8. Your other data rights

8.1 You also have the right, under the UK GDPR and the Data Protection Act 2018, to:

• request a copy of the personal data we hold about you (right of access);
• have inaccurate personal data corrected (right to rectification);
• restrict or object to certain processing;
• request portability of personal data you have provided to us; and
• withdraw any consent you have given (without affecting the lawfulness of processing carried out before withdrawal).

8.2 To exercise any of these rights, please contact Francesco, our Privacy and Data Protection Officer, at francesco@tramp.co.uk.

9. Complaints

9.1 If you are not satisfied with how we have handled your deletion request, please contact Francesco, our Privacy and Data Protection Officer, at francesco@tramp.co.uk in the first instance. Our full complaints process is at tramphealth.co.uk/complaints.

9.2 You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

10. Contact

Tramp Health (Mayfair) Ltd T/a Tramp Health
3 Upper Grosvenor St, London W1K 2NR
Company registration number: 17090455
Privacy and Data Protection Officer: Francesco — francesco@tramp.co.uk
General: support@tramphealth.co.uk