PRIVACY POLICY

Last updated: September 2026

WHY DO WE HAVE THIS PRIVACY POLICY?

We are Archon Combine Limited, the operator of The SIX, and treating individuals and their personal information with respect reflects our core values and the values of our brand.

We want you to know as much as possible about what we do with your personal information. You and your personal information are protected by various laws and guidance, and we are committed to upholding these, respecting your privacy and keeping your information safe.

In this privacy policy, any reference to “us”, “we”, “our” or “ourselves” is a reference to Archon Combine Limited, trading as The SIX, and any reference to “you”, “your” and “yourself” is a reference to you as an individual who has a relationship with us or is in contact with us.

This privacy policy applies to everyone who interacts with us as a customer who has purchased any of our online services, a user of any apps or websites we provide, anyone who has signed up to receive marketing materials from us, anyone who enters any of our promotions or competitions, and anyone who applies to attend any of our events or interacts with us on social media.

This privacy policy provides details in accordance with applicable data protection laws about how we collect and use personal information about you during and after your relationship with us.

As this privacy policy covers a range of individuals and different types of relationships and interactions with us, not all aspects of this privacy policy will apply to you. The aspects that apply will depend upon the nature of your relationship and interactions with us.

If you are unsure, you can contact us at support@archon-app.com.

THE CONTROLLER OF YOUR PERSONAL INFORMATION

For the purposes of data protection laws and this privacy policy, the controller of personal information collected through The SIX App, The SIX website and The SIX events, competitions and activations is:

Archon Combine Limited

Company Number: 07181605

Registered in England and Wales.

Being a controller of your personal information means that we are responsible for deciding how and why we hold and use your personal information.

Where you specifically consent to us sharing your personal information with a named partner, that partner may become an independent controller of the information it receives. It will then be responsible for its subsequent use of your personal information in accordance with its own privacy notice.

For example, where you consent to us sharing your name and contact details with Archon Academy so that it can contact you about its fitness qualifications, courses and related offers, Archon Academy will act as an independent controller of the information it receives.

Any queries regarding personal information processed by The SIX or Archon Combine Limited can be sent to support@archon-app.com.

YOUR DUTY TO INFORM US OF CHANGES

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during the period of your interactions with us.

WHAT IF YOU DO NOT PROVIDE PERSONAL INFORMATION?

Failing to provide some of the personal information we require may have an adverse impact on our ability to interact with you. For example, we may not be able to provide you with the services you would like to receive.

However, generally, you are not obliged to provide us with your personal information.

Where we invite you to consent to your personal information being shared with a partner for marketing purposes, providing that consent is optional. Choosing not to consent will not prevent you from using The SIX App or participating in an event, competition or activation, unless we clearly explain that particular information is required for another legitimate purpose.

IF YOU HAVE QUERIES OR CONCERNS JUST ASK!

We have appointed a data protection officer to oversee our compliance with data protection laws.

If you have any questions about this privacy policy or how we handle your personal information, please contact our data protection officer at support@archon-app.com.

CHANGES TO THIS POLICY

We keep our privacy policy under regular review and may update this privacy policy from time to time.

The current version is available on our website at https://thesixrating.com/privacy-policy/

You can also request a copy from support@archon-app.com.

If there are material changes to this privacy policy in the future, we will take appropriate steps to make those changes available to you.

DATA PROTECTION PRINCIPLES

We are committed to being transparent about how we collect and use your personal information and to meeting our data protection obligations.

Data protection laws say that the personal information we hold about you must be:

• Used lawfully, fairly and in a transparent way.
• Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
• Relevant to the purposes we have told you about and limited to what is necessary for those purposes.
• Accurate and kept up to date.
• Kept only as long as necessary for the purposes we have told you about.
• Kept securely.

To make sure this happens, we are required under applicable data protection laws to provide you with information about how and why we process your personal information.

It is important that you read this document before interacting with us so that you understand how and why we process your personal information.

WHAT PERSONAL INFORMATION DO WE COLLECT?

In connection with your relationship or interactions with us, we may collect and process a wide range of personal information about you. This includes:

• Personal contact details such as name, title, address, including billing address, email address and telephone number.
• Information about your date of birth, age, height, weight and sex assigned at birth.
• Details regarding or connected to services you have subscribed to.
• Details of apps that you have licensed from us to use and usage information relating to those apps, where they were downloaded from, traffic and communications data, and resources accessed.
• Device data where you use our apps or website. This may include information about the device you use and its unique device identifier, mobile network information, your mobile operating system, the type of mobile browser you use, time zone setting, IP address, device type, usernames, account details and location information disclosed by your device or software. We do not use separate location tracking software.
• Profile data including your username, account settings and preferences, such as notification preferences, feedback and responses you choose to provide, and basic service usage data such as features used and interaction with in-app guidance. We do not use personal data to create psychological profiles or infer personality traits, attitudes, intelligence, predispositions or similar characteristics about you.
• Content data including login information, videos, photographs or other digital content, check-ins, workout data that you input and upload, and social media handles, posts and information that you choose to provide or tag us in.
• Payment details, payment card details, bank account details, financial transactions and refunds.
• Any terms and conditions relating to your relationship with us.
• Communications between ourselves and you.
• Your social media handles, social media posts, information about your social media followers, information about any product or service endorsements by you and other relevant aspects of your social media activity.
• Publicly available personal information, including information you have shared through a public platform, online or on social media.
• Details of your sporting or athletic achievements and activity and related plans and progress where you provide these to us.
• Responses to and results of surveys.
• Fraud prevention-related information, which may include details of other relevant transactions.
• Applications to enter or attend competitions, promotions, events or activations, attendance at those events or promotions, results and related personal information.
• Information about how you use our website, including pages you view and how you use them, usernames and account details, entry and exit data, details of services, events and materials that may interest you, subscription information, browser-related information and cookies set on your device.
• IP address information which allows us to understand usage of our website or App, website or App training records, professional details, and vehicle registration number, make and model where you are driving to visit us at an event.
• Details of queries, complaints, claims and cases involving both us and you, including related communications.
• Third-party CCTV footage and other information obtained through electronic means such as swipe card records and access control systems if you visit premises used for an event.
• Photographs, video footage, audio recordings and other content created or obtained as part of marketing or promotional campaigns, events, competitions, social media or visits to premises, or which you provide to us.
• Records of marketing preferences, partner sharing preferences and consents you have provided or withdrawn.
• Any other personal information you provide to us.

We may also in some cases collect and process more sensitive special category personal information including:

• Information about your health, including any medical condition, health and sickness records, including where you inform us about ill health, injury or disability.
• In some cases, equal opportunities monitoring information, including information about your ethnic origin, sexual orientation, health and religion or beliefs. This will usually only be where it is relevant to events, promotions, campaigns or other activities involving you.

WE AIM NOT TO COLLECT PERSONAL INFORMATION ABOUT CHILDREN

Our online services, apps, website, events, promotions, social media, content, blogs, materials and other services are not intended for use by anyone under the age of 18, and we do not knowingly collect personal information relating to anyone under 18.

We may in some circumstances collect limited personal information relating to children where they are connected to someone aged 18 or over with whom we have a relationship. For example, a child may attend an event when accompanied by a responsible adult entitled to attend.

WHERE DO WE COLLECT YOUR PERSONAL INFORMATION FROM?

We collect personal information in a variety of ways and from a variety of sources, including:

• Directly from you, including through contact with you, information you enter into your account, information entered into our App, correspondence, applications, competition or promotion entries, event or activation registrations, attendance at events or promotions, subscriptions, memberships and other interactions with us.
• From websites, the internet, social media or other publicly available sources.
• From our website, apps, information technology and communications systems, access control systems and CCTV, and suppliers we use in connection with them.
• From third parties appointed by you, such as financial or legal advisers.
• From third parties appointed by us, such as legal advisers, identity or background check providers, fraud prevention organisations, data cleansing providers or market research and analysis providers.
• From government or government-related bodies, regulators, police, law enforcement authorities or security services.
• We store personal information relating to you within our information technology systems, including our email systems.

WHAT ARE OUR BASES FOR PROCESSING YOUR PERSONAL INFORMATION?

We will only use your personal information when the law allows us to do so. This means we must have one or more lawful bases for processing your personal information.

The most common lawful bases applying to our use of your personal information are:

• Where we need to perform a contract we have entered into with you or take steps at your request before entering into a contract.
• Where we need to comply with a legal obligation that applies to us.
• Where processing is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests.
• Where you have given your consent.

Generally, we do not rely on your consent for most uses of your personal information. However, we may rely on consent where:

• You have asked to receive direct marketing from us where consent is required or relied upon.
• You have specifically agreed that we may share particular personal information with a named partner so that the partner can contact you for the purpose described when you gave your consent.
• Another activity specifically requires your consent under applicable law.
• Where we rely on your consent, you may withdraw it at any time.
• We may in limited circumstances process sensitive special category personal information about you, such as information revealing racial or ethnic origin, religious or philosophical beliefs or data concerning health.
• Where we do so, we will also identify an appropriate condition for processing that information, which may include:
• Where you have given your explicit consent.
• Where processing is necessary to protect your vital interests or someone else’s vital interests.
• Where you have already made the personal information public.
• Where processing is necessary for establishing, exercising or defending legal claims.
• Where processing is necessary for reasons of substantial public interest or another condition permitted by law.
• In some cases, more than one lawful basis may apply to our use of your personal information.

HOW WILL WE USE YOUR PERSONAL INFORMATION?

There are many ways we may need to use your personal information in the context of your relationship with us.

The main uses are set out below.

To perform our relationship with you

We will process your personal information to perform our relationship with you. This may relate to entering into or performing a contract with you and may also be in our legitimate interests.

To provide services

We will process your personal information to provide services you have asked to receive from us. This may relate to entering into or performing a contract with you and may also be in our legitimate interests.

To send marketing materials

We may process your personal information to send you direct marketing about our products or services where permitted by law.

Where consent is required or where we have chosen to rely on consent, we will only send marketing through the communication channels covered by the consent you have given.

You can change your marketing preferences or withdraw consent at any time.

To share your information with a named partner where you have requested this

At certain events, competitions or activations, we may give you the option to request information about products or services offered by one of our named partners.

Where you actively choose this option, we may share only the personal information specified when you give your consent with that named partner so that it can contact you for the purpose described to you.

For example, where Archon Academy is a partner of The SIX, you may choose to allow us to share your name, email address and telephone number with Archon Academy so that Archon Academy can contact you by email and telephone about its fitness qualifications, courses and related offers.

We rely on your consent for this sharing and will not share your personal information with Archon Academy for this marketing purpose if you have not opted in.

Choosing not to consent will not affect your ability to use The SIX App or participate in the relevant event, competition or activation.

To record and manage your consent

Where we rely upon your consent, we will maintain appropriate records showing that consent was provided. These records may include who gave consent, when it was given, how it was given, what the consent covered and the wording or privacy information presented to you at that time.

We will also record where consent has subsequently been withdrawn.

To build a customer profile

We may process your personal information to build and develop a profile for you as a customer or potential customer of our products, services and apps, and to send or show you content, advertisements or marketing materials likely to be of interest to you where you have opted in or where this is otherwise permitted by law.

We will not use special category information for direct marketing profiling unless an appropriate lawful basis and condition applies.

To monitor and manage our relationship with you

We may process your personal information to monitor and manage our relationship with you. This may include communications with you and decisions relating to your relationship with us.

To conduct events, promotions, competitions or campaigns

We may process your personal information to organise and conduct events, activations, competitions, promotions or campaigns.

Depending on the circumstances, this may be necessary to perform a contract, be in our legitimate interests or be based upon your consent.

To manage our social media relationship with you

We may process your personal information to manage our social media or online relationship with you. This will normally be in our legitimate interests and, in some cases, may be based upon your consent.

To manage your involvement in events and promotions

We may process your personal information to hold or conduct events, activations, competitions, promotions, campaigns and visits to premises and to manage your participation in them.

This may relate to entering into or performing a contract, our legitimate interests or legal obligations.

To train our staff

We may process your personal information where necessary to train our staff and ensure they deliver the standards expected in relation to our brand. This will be in our legitimate interests.

To carry out background or fraud prevention checks

Where appropriate, we may carry out background, identity, fraud prevention or other checks to decide whether to enter into or enforce a relationship with you. This may be in our legitimate interests or necessary to comply with legal obligations.

To comply with legal obligations

We may process personal information where necessary to comply with legal obligations, including consumer protection, data protection, health and safety and other applicable laws.

To maintain records

We may maintain appropriate records relating to your relationship with us and information relevant to that relationship.

This may be necessary to perform a contract, comply with legal obligations or pursue our legitimate interests.

To prevent and detect crime

We may process personal information where necessary to prevent, detect or prosecute criminal activity, comply with legal obligations or exercise our legal rights.

To respond to queries or complaints

Where you contact us with a query, complaint or enquiry, we will process your personal information as necessary to respond and deal with the matter.

To gather evidence for legal cases

We may process personal information where necessary for establishing, exercising or defending legal claims.

To manage our business administration

We may process personal information to manage and maintain records relating to our relationship with you and to administer our business.

To ensure network and information security

We may monitor use of our website, apps, information and communication systems and social media accounts where necessary to ensure network and information security, prevent unauthorised access, prevent malicious software distribution and protect personal information.

To conduct data analytics and research

We may conduct data analytics and research to understand trends, improve our business and improve our website, apps, events and services.

Where possible and appropriate, information used for broader insight and research purposes may be anonymised or aggregated so that individuals cannot be identified.

To carry out market and product research

We may carry out market or product research to improve our services, products, website, apps, events, activations or social media activities.

To use personal information ethically

We aim to use your personal information in an ethical and non-intrusive way.

We will not use your personal information to target, segment or profile individuals based on health, including pregnancy, negative financial status or condition, political affiliation or beliefs, racial or ethnic origin, religious or philosophical affiliation or beliefs, sex life or sexual orientation, alleged or actual criminal activity, or for any unlawful or discriminatory purpose.

CHANGING MARKETING PREFERENCES AND WITHDRAWING CONSENT

You have the right to opt out of receiving direct marketing communications from us at any time by:

• Updating your preferences in your App settings or your account where this functionality is available.
• Contacting our customer support team at support@archon-app.com.
• Using the unsubscribe option contained in emails or other electronic marketing communications we send to you.
• Writing to us at My Data Queries, 20 Romsley Hill Grange, Farley Lane, Romsley, Worcestershire, B62 0LN, United Kingdom.

Where you have separately consented to us sharing your personal information with a named partner for that partner to contact you about its products or services, you may withdraw that consent at any time.

If you withdraw your consent before your information has been shared, we will not make that disclosure.

If your information has already been shared with the partner, we will stop any further sharing for that purpose and, where relevant, take appropriate steps to communicate your withdrawal to the partner. You may also contact the partner directly to change your communication preferences with them.

For example, where your information has been shared with Archon Academy following your consent, Archon Academy is responsible for managing its subsequent communications with you in accordance with its own privacy notice.

Withdrawal of consent does not affect the lawfulness of processing or sharing that took place before consent was withdrawn.

We may retain limited information about your marketing preferences or withdrawal of consent where necessary to ensure that we respect your preferences in the future.

These measures do not apply to necessary service communications, such as account, event or service updates, which are not direct marketing.

CHANGE OF PURPOSE

We will only use your personal information for the purposes for which it was collected unless we reasonably consider that we need to use it for another purpose and that purpose is compatible with the original purpose.

If we intend to use your personal information for a materially different or unrelated purpose, we will provide appropriate information about that new purpose before beginning the new processing where required by law.

We may process your personal information without your knowledge or consent where this is required or permitted by law.

COOKIES

Our website uses cookies to improve the user experience while visiting the website.

Where required, our website uses a cookie banner to provide users with information and choices regarding the use of cookies and similar technologies.

Cookies are small files saved to a user’s computer or device which can store information about interactions with and use of a website.

Users who wish to restrict or block cookies can do so through the cookie controls provided on the website where available or through their browser or device settings. Blocking certain cookies may affect the functionality of the website.

Our website may use analytics technologies, including Google Analytics, to help us understand how visitors interact with the website. These technologies may collect information such as device information, browser information, IP address, pages viewed and interactions with the website.

We may also use services provided by third parties, such as video, social media, referral or advertising platforms, which may place cookies or use similar technologies where permitted.

Where consent is required for non-essential cookies or similar technologies, these will not be used until the required consent has been obtained.

Further information about the cookies and similar technologies used on our website and available choices will be provided through our cookie consent tools or cookie information.

WHO HAS INTERNAL ACCESS TO YOUR PERSONAL INFORMATION?

We only provide access to your personal information to members of our staff who need access to it for legitimate business purposes.

WHO DO WE SHARE YOUR PERSONAL INFORMATION WITH EXTERNALLY?

When using your personal information, we may share it with third parties where appropriate and where we have a lawful basis to do so.

Third parties with whom we may share personal information include:

• Service or product providers supporting our business, such as information technology suppliers, fraud prevention organisations, marketing and public relations service providers, market research and analysis providers and data cleansing providers.
• Third parties that process personal information on our behalf and in accordance with our instructions.
• Companies connected with our business where there is an appropriate lawful basis for the sharing.
• Named partners where you have specifically consented to us sharing particular personal information with them for a stated purpose.
• Purchasers, investors, funders and their advisers where we sell or restructure all or part of our business, assets or shares.
• Our legal and professional advisers and auditors.
• Social media and other online platforms where relevant to our relationship with you.
• Government bodies, HMRC, regulators, police, law enforcement agencies, security services and courts or tribunals where appropriate.

SHARING OF PERSONAL INFORMATION WITH PARTNERS

We work with selected official partners in connection with The SIX, our services, events, competitions and activations.

There are two main circumstances in which we may share personal information with a partner.

Operational sharing

We may share your personal information with an official partner where this is necessary to facilitate your participation in an event, competition or service or to fulfil an agreed operational or contractual purpose.

Examples include where: You have been selected to represent a partner at a The SIX event.

Sharing information is necessary to provide an event or service you have requested or agreed to.

A partner needs to contact you regarding logistical, administrative or operational requirements relating to an event, competition or service.

We only share personal information that is necessary for the relevant purpose and put appropriate data protection arrangements in place.

Partner marketing and enquiries

At certain events, competitions or activations, you may be given an optional opportunity to ask a named partner to contact you about its products or services.

Where you actively opt in, we may share the personal contact information specified when you give your consent with that named partner so that it can contact you for the purpose described at the time.

For example, where Archon Academy is an official partner of The SIX, you may be offered the following choice or substantially similar wording:

“I would like Archon Academy to contact me by email and telephone about its fitness qualifications, courses and related offers. I understand that The SIX, operated by Archon Combine Limited, will share my name, email address and telephone number with Archon Academy only for this purpose. I can change my mind at any time.”

Where you make this choice, we may share your:

Name.

Email address.

Telephone number.

with Archon Academy for that specific purpose.

We will only make this disclosure where you have actively opted in. The choice will not be pre-selected and choosing not to opt in will not affect your ability to participate in The SIX, the relevant event, competition or activation.

We will not share your fitness scores, performance information, photographs, videos, health information or other App profile information with Archon Academy for this marketing purpose unless we have separately informed you and have an appropriate lawful basis for doing so.

Once the information has been provided to Archon Academy, Archon Academy acts as an independent controller of the personal information it receives and processes it in accordance with its own privacy notice.

You may withdraw your consent at any time.

We maintain records of consent where appropriate so that we can demonstrate when, how and for what purpose consent was provided.

We do not disclose personal information to anyone else except as described in this privacy policy or where we are otherwise legally entitled or required to do so.

We may provide third parties with aggregated statistical information and analytics about users of our products and services, but we will take appropriate steps to ensure that individuals cannot be identified from that information.

INTERNATIONAL TRANSFERS

It may sometimes be necessary for personal information to be transferred outside the United Kingdom or European Economic Area, or for it to be accessed from outside those locations.

This may occur where service providers supporting our business are based overseas or where you are based outside the UK or EEA.

Where personal information is transferred internationally, we will ensure that appropriate protections required by applicable data protection law are in place.

Depending on the circumstances, these protections may include adequacy regulations, recognised contractual safeguards, appropriate contractual clauses, transfer risk assessments and technical or organisational security measures.

Our directors or other key staff may in limited circumstances access personal information from outside the UK or EEA when travelling or working overseas. Appropriate security measures will continue to apply.

If you would like more information about how we protect personal information in connection with international transfers, please contact our data protection officer at support@archon-app.com.

HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

We are committed to keeping your personal information safe and secure and have security measures in place designed to protect against loss, misuse, unauthorised access, disclosure and alteration of information under our control.

Our security measures may include:

• Encryption of personal information where appropriate.
• Cybersecurity assessments of service providers who may handle personal information.
• Planning and assessments designed to help us respond to cybersecurity attacks and data security incidents.
• Security testing of appropriate systems.
• Controls designed to protect information technology infrastructure and premises against unauthorised access.
• Backups and recovery arrangements for information technology systems.
• Internal policies setting out information security requirements.
• Training for staff relating to appropriate handling and processing of personal information.
• Where we engage third parties to process personal information on our behalf, they are required to process that information in accordance with our instructions and appropriate contractual requirements and to implement appropriate technical and organisational security measures.

We take information security seriously and use reasonable measures designed to protect the integrity and security of the personal information we process.