1. Introduction
Clinton Personal Training ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, services, and training programmes in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 Personal Information
- Contact details (name, email address, phone number)
- Booking and appointment information
- Payment details (processed securely through Stripe)
- Communications and correspondence with us
2.2 Health and Fitness Information
- Medical history and health questionnaires
- Fitness assessments and test results (VO₂ Max, Resting Metabolic Rate)
- Training progress and performance data
- Physical measurements and body composition data
- Emergency contact information
2.3 Technical Information
- IP address and browser type
- Device information and operating system
- Website usage data and analytics
- Cookies and similar tracking technologies
3. How We Use Your Information
We use your personal information for the following purposes:
- Providing personal training and coaching services
- Conducting physiological testing and assessments
- Processing bookings and payments
- Communicating about appointments and services
- Developing personalised training and nutrition programmes
- Monitoring your progress and adjusting programmes accordingly
- Sending service-related updates and information
- Improving our services and website functionality
- Complying with legal obligations
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: You have given explicit consent for processing your health data for training purposes
- Contract: Processing is necessary to perform our contract with you
- Legal Obligation: We must comply with legal requirements
- Legitimate Interests: Processing is necessary for our legitimate business interests while respecting your rights
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your data with:
- Service Providers: Payment processors (Stripe), booking systems, email services
- Legal Requirements: When required by law or to protect our legal rights
- Emergency Services: In case of medical emergency, we may share relevant health information
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls. However, no internet transmission is completely secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Typically:
- Client records: Duration of service plus 7 years (in line with professional indemnity insurance requirements)
- Financial records: 6 years (HMRC requirement)
- Marketing communications: Until you unsubscribe or withdraw consent
8. Your Rights Under UK GDPR
You have the following rights:
- Right of Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data (subject to legal obligations)
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time (where consent is the legal basis)
To exercise these rights, please contact us using the details below.
9. Cookies and Tracking
Our website uses cookies to enhance your experience. For detailed information, please see our Cookie Policy.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website with an updated "Last Updated" date.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
13. Supervisory Authority
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):