Privacy Policy for IronWill Fitness

At IronWill Fitness, we are committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, and share information when you engage with our services, including one-on-one personal training, group fitness classes, nutrition coaching, rehabilitation exercise programs, and online fitness coaching.

Information We Collect

We collect various types of information to provide and improve our services to you:

• Personal Identifiable Information: This includes your name, address, email address, phone number, date of birth, and payment information (e.g., credit card details). We collect this when you register for our services, make a purchase, or communicate with us.
• Health and Fitness Information: To provide tailored fitness and nutrition coaching, we may collect information regarding your health status, fitness goals, medical history relevant to exercise, dietary preferences, and progress. This may include sensitive personal data which we handle with the utmost care and obtain explicit consent for.
• Usage Data: We may collect information about how you access and use our website or online platforms, such as your IP address, browser type, operating system, referral sources, pages viewed, and the dates/times of your visits.
• Communication Data: Records of your communications with us, including emails and messages sent through our online platform.

How We Use Your Information

We use the collected information for various purposes, including:

• To provide and deliver our fitness services, including personal training, group classes, nutrition coaching, and rehabilitation programs.
• To process your registrations, bookings, and payments.
• To personalize your experience and tailor our services to your specific needs and goals.
• To communicate with you about your appointments, services, updates, and promotional offers.
• To improve and optimize our services, website, and online platforms.
• To comply with legal obligations and resolve any disputes.

Legal Basis for Processing (GDPR)

Our legal basis for collecting and using your personal information depends on the specific context in which we collect it. We primarily process your data on the following bases:

• Performance of a Contract: When we need to process your data to fulfill our obligations under a contract with you (e.g., providing personal training services).
• Consent: When you have given us explicit consent to process your sensitive personal data (e.g., health information) for specific purposes. You have the right to withdraw your consent at any time.
• Legitimate Interests: When the processing is necessary for our legitimate interests and not overridden by your data protection rights (e.g., improving our services, preventing fraud).
• Legal Obligation: When we need to comply with a legal or regulatory obligation.

Sharing Your Information

We do not sell or rent your personal information to third parties. We may share your information with:

• Service Providers: Trusted third-party companies who perform services on our behalf, such as payment processing, website hosting, and analytics. These providers are obligated to protect your information and use it only for the purposes for which it was provided.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Data Security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Data Protection Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. To exercise any of these rights, please contact us using the details provided below.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your rights, please contact us:

• IronWill Fitness
• 315 Highgate Road
• Floor 2
• London, Greater London
• NW5 1QG
• United Kingdom