Industries · Gyms & fitness
Website compliance for gyms and fitness studios
Gym and studio websites concentrate the single most-litigated subscription pattern on the internet: memberships that renew automatically, sold online, with cancellation that historically required showing up in person or sending certified mail. ROSCA and state auto-renewal laws now price that friction. Class texting programs, online booking, and workout-video libraries add TCPA, accessibility, and even VPPA exposure on top. Complidar scans the whole stack in one pass.
The cancellation flow is the lawsuit
Fitness is the canonical hard-to-cancel industry. It's the example regulators reach for. The legal mechanics: ROSCA requires simple cancellation for online-sold negative-option plans, and state laws like California's ARL add disclosure and consent requirements with private enforcement. The FTC's $100M Vonage settlement and the $150M Adobe settlement (DOJ, 2026) both turned on cancellation obstruction; the same playbook reads directly onto membership flows where signup is online but cancellation isn't.
The vacated federal Click-to-Cancel rule changed none of this: ROSCA and the state statutes it amplified are the operative law, and the screenshot of your cancel path is the evidence either way.
Beyond the membership terms
Class-reminder and promo texting sits under the TCPA at $500–$1,500 per message; consent captured at signup must actually cover marketing texts. Online booking and class schedules are exactly the interactive flows ADA web suits cite when they're keyboard-inaccessible. And if your site hosts a workout-video library behind a login with ad pixels on those pages, you've recreated the VPPA fact pattern that cost Tubi $19.99M (niche, but mechanical and detectable).
What the scan checks for gyms & fitness
- Membership signup flow: recurring-charge disclosure before billing, consent mechanics, trial-conversion terms
- The cancellation path, walked end to end: discoverability, dark patterns, retention walls
- TCPA consent capture on class-reminder and promo texting signups
- Full WCAG/axe-core accessibility pass including booking and schedule flows
- Ad pixels on workout-video pages (the VPPA pattern)
- Privacy policy and ToS auto-renewal clauses checked against what checkout actually shows
Common questions
We require in-person cancellation. Is that actually illegal?
For memberships sold online, ROSCA requires a simple cancellation mechanism, and California's ARL requires online cancellation for online signups. In-person-only cancellation for online sales is the precise asymmetry regulators and class firms target. State specifics vary; the scan documents what your flow requires today, which is the fact counsel needs.
Our booking runs through Mindbody / a third-party platform. Are we covered?
The platform's accessibility and tracking behavior become your site's behavior: the demand letter cites your domain. The scan tests the pages and embedded flows your members actually use, which is the only way to know what the platform shipped on your behalf.
What should a small studio check first?
The order of damage: the cancellation path (auto-renewal law), the texting consent language (TCPA's per-message damages), then booking accessibility (ADA letters). A free Complidar scan covers all three in the same pass and shows which one is actually open on your site.
All 22 checks · up to 120 pages · no card
Last updated 2026-06-11 · Informational, not legal advice: how to read this