ALL JOY WORKOUT

Privacy notice

This page is a scaffold, not a finished notice. It lists what a UK privacy notice for this business has to cover. Because health information is involved, get it finished by a solicitor before you take a single client. Budget £200–400.

Who we are

Trading name, legal status (sole trader or limited company), registered address, contact email, and your ICO registration number once you have one.

What we collect

Split this into ordinary personal data (name, email, phone, payment records) and special category health data — PAR-Q answers, injuries, discomfort, pregnancy or postnatal status, and any training videos you upload.

Why, and on what lawful basis

Contract for delivering the coaching you paid for. Explicit consent, separately given, for the health data and training videos. Legitimate interests for admin. Consent for marketing email, with a record of when it was given.

Who else sees it

Name every processor: the coaching platform, the payment provider, the booking tool, the email tool, the host. State where each stores data and whether it leaves the UK or EEA. Keep a signed data processing agreement from each one on file.

How long we keep it

Give an actual period for each category. Training videos should have the shortest retention — state it and stick to it.

Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawing consent. How to exercise them, how fast you respond, and the right to complain to the ICO.