Data Controller: Boniface Fitness and Wellness (Sole Trader),

Boniface Fitness and Wellness (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Notice explains what personal data we collect, how we use it, how it is stored, and your rights as a client.

1. Personal Data We Collect

We may collect and process the following information:

• Contact details: name, phone number, email address, home address.
• Health information: PAR‑Q responses, medical conditions, injuries, relevant health updates.
• Training information: session records, programme notes, progress updates, attendance.
• Payment information: confirmation of payment (we do not store card details).
• Online coaching data: video call interactions, messages, and feedback provided via Microsoft Teams or Zoom.

Health information is considered special category data and is processed only for the purpose of delivering safe and effective training.

2. How We Use Your Data

We use your personal data for the following purposes:

• To deliver personal training, group training, exercise‑to‑music classes, online coaching, and related services.
• To communicate with you regarding bookings, scheduling, programme updates, and administrative matters.
• To ensure your health and safety during training.
• To manage payments, subscriptions, and account administration.
• To comply with legal obligations (e.g., health and safety requirements).

We do not use your data for external marketing or share it with third parties.

3. Lawful Basis for Processing

We process your data under the following lawful bases:

• Contract: to provide the services you have purchased.
• Consent: for processing health information and PAR‑Q data.
• Legal obligation: where required for safety or regulatory compliance.
• Legitimate interests: for communication, scheduling, and service delivery.

You may withdraw consent for health‑related data at any time, but this may affect our ability to provide services safely.

4. Data Storage & Security

• All personal data is stored on a secure server.
• Access is restricted to the Trainer only.
• We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

5. Data Sharing

We do not share your personal data with any third parties unless:

• Required by law (e.g., safeguarding concerns).
• You provide explicit written consent.

We do not sell, trade, or transfer your data for marketing or commercial purposes.

6. Online Coaching Platforms

When using Microsoft Teams or Zoom:

• Your data is processed within those platforms according to their privacy policies.
• We do not record sessions unless you provide explicit consent.
• You are responsible for ensuring your environment is safe during online training.

7. Data Retention

We retain your personal data only for as long as necessary:

• Training records: retained for up to 6 years for legal and insurance purposes.
• PAR‑Q and health information: retained while you are an active client and for a reasonable period afterwards.
• Contact details: retained for administrative purposes unless you request deletion.

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data (“right to be forgotten”).
• Restrict processing of your data.
• Object to certain types of processing.
• Withdraw consent at any time (where applicable).
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below.

9. Contact Details

If you have questions about this Privacy Notice or wish to exercise your data rights, please contact:

Boniface Fitness and Wellness Email: [Insert email] Phone: [Insert number] Address: [Insert business address]

10. Updates to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be published and the effective date updated accordingly.