This policy outlines how your data is collected, used, and protected in accordance with the UK General Data Protection Regulation (UK GDPR).

Personal information is collected and processed including:

• Contact details (such as name, email address, emergency contact details and phone number)

• Health and medical information provided through the PAR-Q and related forms

Data controller:

Kelly Green (Trainer) is the data controller responsible for your personal data.

Your information is used to:

• Assess your suitability for exercise

• Design and deliver safe and appropriate training programmes

• Monitor your health status where relevant to participation

• Maintain a record of your training and progress

• Meet legal and insurance obligations

• Manage bookings and payments for services

Lawful basis for processing:

Your personal data is processed on the basis of:

• Performance of a contract (to deliver training services)

• Legal obligations (e.g. insurance and record keeping)

• Explicit consent (for processing health-related data)

Data storage and security:

Your information is stored securely in password-protected systems. Appropriate technical and organisational measures are used to prevent unauthorised access, loss, or misuse of your data. Only necessary data is retained for delivery of services and legal compliance.

Data retention:

Client records are retained for as long as you are an active client and for up to 6 years after your last session, in line with insurance requirements and legal limitation periods, after which they are securely deleted or destroyed.

Under UK GDPR, you have the right to:

• Request access to your personal data

• Request correction of inaccurate data

• Request deletion of your data (where applicable)

• Restrict or object to processing in certain circumstances

• Withdraw consent for processing health data (this may affect your ability to continue training)

To exercise any of these rights, please contact: kgmobilept@gmail.com

Data sharing

Your personal data is not shared with third parties for marketing purposes. It may be shared where necessary to deliver services (e.g. secure coaching, payment processors or booking platforms), or where required by law, insurance, or safeguarding obligations. Payment details are processed securely by third party providers and are not stored directly by the Trainer.