GDPR POLICY
1. Introduction
At Frost Fitness (“we," "us," "our"), we are committed to protecting and respecting your privacy. This policy outlines how we collect, use, disclose, and safeguard your personal data when you engage with our personal training services. It also explains your rights regarding your personal data under the General Data Protection Regulation (GDPR).
2. Data Controller
The data controller responsible for your personal data is:
Frost Fitness
15 Keble Cl, Burton-on-Trent DE15 9GP
frostfitnesspt@gmail.com
+447429 028228
3. Data We Collect
We may collect and process the following personal data:
-
Personal Identification Information: Name, address, email address, phone number, date of birth, etc.
-
Health and Fitness Data: Medical history, fitness goals, exercise preferences, dietary information, and any other relevant health information you provide.
-
Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our services online.
-
Usage Data: Information about how you use our website and services.
-
Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.
4. How We Use Your Data
We use your personal data for the following purposes:
-
To provide, operate, and maintain our personal training services.
-
To create personalised training and nutrition plans.
-
To monitor your progress and adapt training programs as necessary.
-
To communicate with you, including responding to inquiries and providing customer support.
-
To send you updates, promotions, and marketing materials (if you have opted in to receive them).
-
To improve our services and develop new offerings.
5. Legal Basis for Processing Your Data
We process your personal data based on the following legal grounds:
-
Performance of a Contract: To fulfill our contractual obligations to you as a personal training client.
-
Consent: Where you have provided your consent to process your data for specific purposes.
-
Legitimate Interests: To pursue our legitimate interests in providing and improving our services, as long as these interests are not overridden by your data protection rights.
6. Data Sharing and Disclosure
We do not share your personal data with third parties except in the following circumstances:
-
With your explicit consent.
-
To comply with legal obligations.
-
To protect and defend our rights and property.
-
To third-party service providers who assist us in operating our business (e.g., payment processors, email marketing services) under strict confidentiality agreements.
7. Data Security
We implement appropriate technical and organisational measures to ensure the security of your personal data and to protect it from unauthorised access, alteration, disclosure, or destruction.
8. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
9. Your Data Protection Rights
Under the GDPR, you have the following rights regarding your personal data:
-
Access: You have the right to request access to your personal data and obtain a copy of it.
-
Rectification: You have the right to request correction of any inaccurate or incomplete data we hold about you.
-
Erasure: You have the right to request the deletion of your personal data where there is no good reason for us to continue processing it.
-
Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
-
Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller.
-
Objection: You have the right to object to the processing of your personal data where we are relying on legitimate interests (or those of a third party).
-
Withdraw Consent: Where we are relying on consent to process your personal data, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us at frostfitnesspt@gmail.com.
10. Changes to This Policy
We may update this GDPR policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you by email. We encourage you to review this policy periodically to stay informed about how we are protecting your data.
11. Contact Us
If you have any questions about this GDPR policy or our data practices, please contact us at:
Frost Fitness
15 Keble Cl, Burton-on-Trent DE15 9GP
frostfitnesspt@gmail.com
+447429 028228
By using our services, you acknowledge that you have read and understood this GDPR policy and agree to our collection, use, and sharing of your personal data as described herein.