Privacy Policy

PRO-FIT is a UK-based sole trader providing personal training services and gym wear. For the purposes of UK GDPR and the Data Protection Act 2018, PRO-FIT is the data controller.

Contact: [email protected]

We collect the following personal data when you interact with our website or services:

• Identity data: name
• Contact data: email address, phone number
• Health & fitness data: age, training goals, experience level (coaching applications only)
• Transaction data: purchase history, payment details (processed securely via Stripe — we do not store card details)
• Technical data: IP address, browser type, device information, pages visited
• Marketing data: your preferences for receiving communications from us

We use your personal data for the following purposes:

• To process and fulfil orders for gym wear
• To deliver online coaching and 1-2-1 training services
• To respond to enquiries and applications
• To send you updates you have signed up for (you can unsubscribe at any time)
• To improve our website and services
• To comply with legal obligations

We process your data under the following lawful bases:

• Contract: to fulfil orders and deliver services you have purchased
• Legitimate interests: to run and improve our business, respond to enquiries
• Consent: for marketing communications — you can withdraw consent at any time
• Legal obligation: where required by law (e.g. tax records)

We do not sell your personal data. We may share it with trusted third parties only where necessary:

• Stripe: payment processing (subject to Stripe's own privacy policy)
• Email service providers: for sending transactional and marketing emails
• Delivery partners: for shipping gym wear orders (name and address only)
• Legal authorities: where required by law

We retain your personal data only for as long as necessary:

• Customer and order records: 7 years (HMRC requirement)
• Coaching application data: 12 months from application date
• Marketing list data: until you unsubscribe or request deletion
• Technical/analytics data: 26 months

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten") in certain circumstances
• Restrict processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses essential cookies required for the site to function (e.g. shopping cart). We do not use tracking or advertising cookies without your consent. You can control cookies through your browser settings.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is handled exclusively by Stripe, which is PCI DSS compliant.

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.

For any privacy-related queries, contact us at: [email protected]