Legal
Privacy notice
This is a draft privacy notice for Flabuless Fitness. It must be reviewed and finalised before launch. [CONFIRM]
01
Who we are
Flabuless Fitness is a mobile personal training business based in Aberdeen, Scotland. [CONFIRM] legal entity name, address and ICO registration.
02
What we collect
- Contact details you give us: name, email, phone, date of birth.
- Your goals, preferred format, location and availability.
- Health information you choose to share, such as injuries, conditions or answers to the readiness check.
- For under 18s, a parent or guardian name and consent.
03
Health information
Health information, including information about diabetes, is special category data under UK GDPR. We only collect it with your explicit consent, use it to plan your training safely, handle it securely on the server, and never put it in web addresses or analytics.
04
Why we use your data
- To reply to your enquiry and arrange your consultation (legitimate interests, or steps before a contract).
- To plan and deliver training (contract).
- To use your health information safely (your explicit consent, which you can withdraw at any time).
05
Who sees it
Only Ryan, and the providers who help us run the service (for example email and booking platforms). [CONFIRM] list of providers.
06
How long we keep it
[CONFIRM] retention periods.
07
Your rights
You can ask to see, correct, delete or move your data, object to its use, or withdraw consent. You can also complain to the Information Commissioner's Office (ico.org.uk).