This Privacy Policy describes how Strengthspaces ("we," "us," or "our") collects, uses, discloses, and protects the personal information of visitors and clients who access or use our website at [www.strengthspaces.com] (the"Site") and related fitness training services (collectively, the"Services"). By using our Site or Services, you agree to the terms of this Privacy Policy.
If you do not agree with thisPrivacy Policy, please do not use our Site or Services.
We collect the following categories of personal information:
1.1 Information You Provide Directly
• Contact information: name,email address, phone number, mailing address
• Account credentials: usernameand password (if you create an account)
• Health and fitnessinformation: fitness goals, medical history, injuries, physical condition, bodymeasurements, and other health-related data you voluntarily share
• Payment information:credit/debit card details, billing address (processed securely via third-partypayment processors)
• Communications: messages,inquiries, feedback, and any other content you send us
• Emergency contact information 1.2 Information Collected Automatically
• Device and browserinformation: IP address, browser type, operating system
• Usage data: pages visited,time spent on pages, links clicked, referring URLs
• Cookies and trackingtechnologies (see Section 7)
• Location data (if you permitlocation access) 1.3 Information from Third Parties
• Social media platforms (if you connect accounts or interact with our social content)
• Payment processors and financial institutions
• Referral sources
2.1 To Provide and Improve Services
• Deliver personal training sessions, programs, and fitness plans
• Schedule and manage appointments
• Process payments and send invoices or receipts
• Communicate with you about your training progress and goals
• Improve and personalise our Services
2.2 Legal and Safety Purposes
• Comply with applicable laws,regulations, and legal obligations
• Respond to lawful requests from courts, law enforcement, or government authorities
• Protect the rights, safety, and property of our clients, staff, and business
• Enforce our Terms and Conditions and other agreements
2.3 Marketing and Communications
• Send newsletters, promotions, and updates (only with your consent, where required)
• Conduct surveys and gather feedback to improve our Services
• You may opt out of marketing communications at any time (see Section 9)
As a fitness training business, wemay collect and process sensitive health information about you. We treat this data with the highest level of care and implement additional safeguards including:
• Health data is collected only with your explicit, informed consent
• Access to health records isstrictly limited to authorised personnel on a need-to-know basis
• Health information is usedsolely to tailor training programmes and ensure your safety
• We do not sell, rent, orshare your health information with third parties for marketing purposes
• You have the right to withdraw consent for processing health data at any time (note: this may affect our ability to provide certain Services)
IMPORTANT DISCLAIMER: The fitness advice and information we provide does not constitute medical advice. You should consult a qualified healthcare provider before beginning any exercise programme, especially if you have pre-existing medical conditions.
We do not sell your personal information. We may share your information only in the following circumstances:
4.1 Service Providers: We share data with trustedthird-party vendors who assist us in operating our business, including
• Payment processors (e.g.,Stripe, PayPal, Square)
• Scheduling and booking platforms
• Email marketing tools
• Website hosting and analytics providers
• Cloud storage providers
All service providers are contractually required to protect your data and use it only for specified purposes.
4.2 Legal Requirements
We may disclose your information ifrequired to do so by law, court order, or governmental authority, or if webelieve disclosure is necessary to protect our legal rights or the safety ofany person.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our business assets, your personal information may be transferred to the acquiring party. We will notify you via email or a prominent notice on our Site before your data is transferred.
4.4 With Your Consent
We may share your information for any other purpose with your explicit prior consent.
We retain your personal informationfor as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Specifically:
• Client records (includinghealth information): retained for a minimum of 6 years after the end of our business relationship, in accordance with applicable regulations
• Financial and transaction records: retained for 6 years as required by tax and accounting laws
• Marketing preferences and communications: retained until you withdraw consent or request deletion
• Website analytics data:typically retained for up to 26 months
Upon expiry of the applicable retention period, we will securely delete or anonymise your personal information.
We implement a range of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction, including:
• SSL/TLS encryption for data transmitted via our Site
• Password hashing and secure authentication for user accounts
• Access controls androle-based permissions for staff
• Regular security assessment sand vulnerability testing
• Secure, encrypted storage for sensitive records
• Staff training on data protection best practices
IMPORTANT: No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by law.
.
Our Site uses cookies and similar technologies to enhance your experience and analyse Site usage. We use thefollowing types of cookies:
7.1 Types of Cookies
• Essential cookies: Required for the Site to function properly (cannot be disabled)
• Performance/analytics cookies: Help us understand how visitors interact with our Site (e.g., GoogleAnalytics)
• Functional cookies: Rememberyour preferences and settings
• Marketing cookies: Used todeliver relevant advertisements (only with your consent)
7.2 Managing CookiesYou can control and manage cookiesthrough your browser settings. Please note that disabling certain cookies mayaffect the functionality of our Site. For more information on managing cookies, visit www.allaboutcookies.org.
Where required by law, we will obtain your consent before placing non-essential cookies on your device.
8.1 General Rights (All Users)
• Right to access: Request acopy of the personal information we hold about you
• Right to correction: Requestcorrection of inaccurate or incomplete information
• Right to deletion: Requestdeletion of your personal information (subject to legal obligations)
• Right to withdraw consent:Withdraw your consent at any time where processing is based on consent
• Right to object: Object tocertain types of processing, including direct marketing
8.2 Additional Rights for UK/EEA Residents (GDPR/UK GDPR)
• Right to data portability:Receive your data in a structured, commonly used format
• Right to restrict processing: Request we limit how we use your data
• Right to lodge a complaint:With the Information Commissioner's Office (ICO) at www.ico.org.uk (UK) or yourlocal supervisory authority (EEA)
8.3 Additional Rights for California Residents (CCPA/CPRA)
• Right to know about categories and specific pieces of personal information collected
• Right to opt out of the saleor sharing of personal information (we do not sell your data)
• Right to non-discriminationfor exercising your privacy rights
• Right to correct inaccurate personal information
• Right to limit use ofsensitive personal information To exercise any of your rights,please contact us at info@strengthspaces.com. We will respond within 30 days.We may need to verify your identity before processing your request.
We will only send you marketingcommunications where we have your consent or a legitimate interest in doing so. You can opt out of marketing emails at any time by:
• Clicking the"Unsubscribe" link in any marketing email
• Contacting us directly at info@strengthspaces.com
Note: Opting out of marketing communications will not affect transactional or service-related messages (e.g. appointment confirmations, receipts).
Our Services are not directed toindividuals under the age of 16 (or the applicable age of digital consent inyour jurisdiction).
We do not knowingly collect personal information fromchildren under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@strengthspaces.com and we will take steps to delete such information. If a minor is participating in our Services, a parent or guardian must provide consent and remain responsible for the minor's engagement with our Services.
Our Site may contain links tothird-party websites, social media platforms, or integrated tools (e.g.,booking apps, payment portals). We are not responsible for the privacypractices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit. Our inclusion of a link does notconstitute an endorsement of that site or its privacy practices.
If you are located outside of United Kingdom, please be aware that your personal information may be transferred to and processed in United Kingdom or other countries where our service providers operate. These countries may not have the same data protection laws as your jurisdiction.Where we transfer data internationally, we ensure appropriate safeguards are in place, such as:
• Standard Contractual Clauses(SCCs) approved by the European Commission or UK ICO
• Adequacy decisions by relevant authorities
• Your explicit consent, where required
To the fullest extent permitted byapplicable law:
• We are not liable for anyloss or damage arising from your failure to keep your account credentials secure
• We are not responsible forthe privacy practices of third-party websites or services linked from our Site
• We are not liable for anyunauthorised access to your information resulting from circumstances beyond our reasonable control (e.g., cyberattacks, force majeure events)
• Our total liability for anyclaim related to your privacy shall not exceed the amount you have paid to usin the 12 months preceding the claimNothing in this section limits yourstatutory rights under applicable data protection laws.
We may take photographs or videofootage during training sessions or events for promotional purposes. We will always seek your explicit written consent before using your likeness fo rmarketing or promotional materials.
You may withdraw this consent at any time,and we will cease use of your image in future materials (though we cannot recall materials already published). Please contact us at info@strengthspaces.com to withdraw consent.
If you provide a testimonial or review, we may display it on our Site or marketing materials. We will always seek your prior consent and, where requested, may display testimonials anonymously.
Contact us at info@strengthspaces.comto request removal of your testimonial.
We may update this Privacy Policyfrom time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:
• Update the "LastUpdated" date at the top of this policy
• Notify you by email (where wehave your email address)
• Post a prominent notice on our Site
Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
This Privacy Policy is governed by the laws of United Kingdom, without regard to its conflict of law provisions. Any disputes arising under or in connection with this PrivacyPolicy shall be subject to the exclusive jurisdiction of the courts of United Kingdom.
If you have any questions, concerns,or requests regarding this Privacy Policy or our data practices, please contact us:
Attention: Privacy Officer
Email:info@strengthspaces.com
We aim to respond to all privacy-related inquiries within 30 days.
