David Jones Personal Training – Privacy Policy

Date: 06^th March 2025

This Privacy Policy outlines how David Jones Personal Training (“we,” “us,” or “our”) collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) 2018. We are committed to protecting your privacy and ensuring the security of your information.

Data Controller and Data Processor:

David Jones, operating as David Jones Personal Training Ltd, is both the Data Controller and Data Processor.

Contact Information:

David Jones David@davidjonespersonaltraining.co.uk, 07973 533943, The Stables, Saxley Hill Barn, Meath Green Lane, RH6 8JA

Legal Basis for Processing:

We process your personal data based on one or more of the following legal bases:

Consent: When you provide explicit consent for us to process your data for a specific purpose.

Contract: When processing is necessary for a contract with you or to take steps at your request before entering into a contract.

Legal Obligation: When processing is necessary to comply with a legal obligation.

Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights and interests do not override those interests.

When relying on legitimate interests, we conduct a three-part test to ensure:

We have identified a legitimate interest.

Processing is necessary to achieve that interest.

The processing is balanced against your rights and freedoms.

Your Rights as a Data Subject:

Under the GDPR, you have the following rights:

Right to be Informed: You have the right to be informed about the collection and use of your personal data.

Right of Access: You have the right to access your personal data and supplementary information.

Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected.

Right to Erasure (Right to be Forgotten): You have the right to request the deletion or removal of your personal data when there is no compelling reason for its continued processing.

Right to Restrict Processing: You have the right to limit the processing of your personal data.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including direct marketing.

Right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: https://ico.org.uk/concerns/
- Phone: 0303 123 1113
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Types of Data We Collect, Purposes, and Legal Basis:

Type of Information Collected	Purpose(s)	Legal Basis for Processing
Name, address, phone number, email address	Managing your training, communication, and scheduling.	Contractual necessity and Legitimate Interest.
Health and fitness information, medical history.	Designing personalized training programs, ensuring safety.	Consent and Contractual necessity.
Payment details (e.g., bank details)	Processing payments for training services.	Contractual necessity.
Training progress and performance data.	Tracking your progress and adapting training programs.	Contractual necessity and Legitimate Interest.
Photos or videos for progress tracking (if consent given)	Visual progress tracking and motivation.	Consent.
Contact form data or email inquiry data.	Responding to your inquiries.	Legitimate Interest.
Marketing related Data such as name and email.	Marketing and newsletters	Legitimate Interest, with right to object at any time.

Export to Sheets

Data Retention:

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

Client contact and financial data is retained for six years after the termination of the client relationship, for tax purposes.

Health and Fitness related information, with consent, is stored for as long as needed for tracking progress, unless otherwise requested by client.

Data Security:

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction.

Data is stored securely on [Describe storage method, e.g., encrypted databases, secure cloud storage].

Access to personal data is restricted to authorized personnel only.

Payment information is processed through secure, PCI DSS-compliant payment processors.

Data will not be transferred outside of the EEA without consent.

Third-Party Sharing:

We will not sell or share your personal data with third parties without your consent, except:

When required by law.

To third-party service providers who assist us in providing services to you (e.g., payment processors, CRM systems). In such cases, we ensure that these third parties comply with GDPR and maintain appropriate data security measures.

Cookies:

We use cookies to track?????

Changes to This Policy:

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website or by other appropriate means.

Contact Us:

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

David Jones David@davidjonespersonaltraining.co.uk 07973533943

Sources and related content