Before you publish this page: this is a starting template, not legal advice. Fill in the [placeholders] below with your real details, and it's worth having a solicitor or a service like the ICO's self-assessment tool check it before it goes live, since exact requirements depend on things like whether you take online payments and what tools you connect (booking system, analytics, social media).

Privacy Policy

Last updated: [DATE, update this whenever the policy changes]

Who we are

This website is operated by [LEGAL / TRADING NAME], trading as The Fitness Room, based at Unit C, Philippa House, Burnden Business Park, Burnden Road (off Raikes Lane), Bolton. If you have any questions about this policy or your data, contact us at [CONTACT EMAIL].

What we collect

Contact details you give us when you enquire or book a session (name, email, phone number)
Booking and attendance information, handled through our booking provider, SimplyBook.me
Basic website usage data (pages visited, device type) if you accept analytics cookies
Health or injury information you tell a coach about before a session, kept only to train you safely
[Add anything else you actually collect, for example a paper waiver form or payment details]

How we use it

We use your details to manage bookings, respond to enquiries, and run our classes and 1:1 sessions safely. We do not sell your personal data to third parties.

Third parties we work with

SimplyBook.me - our online booking system, which processes booking and contact details on our behalf
Cloudflare Web Analytics - helps us understand how the site is used. This is cookieless analytics, it does not use cookies or track you individually across sites
Instagram - if you follow links to our Instagram page, Meta's own privacy policy applies there

Cookies

We use one small, essential cookie to remember your cookie preference. We do not use tracking or advertising cookies. Our analytics (Cloudflare Web Analytics) is cookieless by design, so accepting or rejecting the cookie banner does not affect it.

How long we keep your data

As a general rule, we keep booking and contact records for the duration of your time training with us, plus 24 months afterwards, in case we need to refer back to them for legal or insurance reasons. [Update this if your actual practice differs.]

Your rights

Under UK GDPR you can ask to see the personal data we hold about you, ask us to correct or delete it, or object to how it's used. To do this, email [CONTACT EMAIL]. If you're not happy with our response, you can complain to the Information Commissioner's Office (ICO).

Children

Our Fit Kids sessions are for children, attending with a parent or guardian's consent. We collect the same basic contact details from the parent or guardian who books, not directly from the child, and use them only to run the session safely.