Kelly's Core Fitness Privacy Policy

Kelly’s Core Fitness

Date: 1 November 2023 (review date 1 November 2024) | Version 1

Contact Details

Name: Kelly Black

Address: 47 Station Wynd, Doune FK16 6DT

Phone Number: 07811352265

E-mail: kellyjoanneblack@gmail.com

Website: www.kellyscorefitness.com

Basis for policy:

I am a sole trader, providing strength and conditioning coaching, indoor and outdoor fitness instruction (individual and group) and other similar services. As a data controller, this Privacy Policy has been developed in accordance with the current UK data protection legislation.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

(a) Your consent.

You are able to remove your consent at any time. You can do this by contacting Kelly Black (kellyjoanneblack@gmail.com)

(b) I have a contractual obligation.

I need to collect your personal information so that I can manage your attendance and involvement in private and group sessions, classes and events. I will use personal information collected to manage these obligations relating to bookings, planned activities, and managing payments.

I process personal information in pursuit of my legitimate interests to promote and encourage participation by sending members’ communications and booking information for upcoming classes and events.

The type of personal information I collect

I will be a controller of the personal information that you provide to me when you contract with me for my services. This information will include:

· Personal identifiers, contacts and characteristics (for example, name and contact details)

· Age and health information, as it relates to fitness abilities/constraints

· Fitness activities (work plans, personal goals etc)

· Group information (ie individual personal identifiers who partake in group activities)

· Bank information (eg for any refunds etc)

How I get the personal information and why I have it

Most of the personal information I process in pursuit of my legitimate interests is provided to me directly by you for one of the following reasons:

· To register for classes/training sessions, including the receipt of training plans and other associated correspondence

· Manage individual and group bookings for my strength and conditioning/fitness coaching services;

· To aid the development of training plans and sessions (eg your personal goals, health status, age etc)

· To track your progress

· Request and track payment;

· To manage risk and safety, including child protection

· To keep you advised of future planned classes and events that I may hold

· To respond to any questions you may have and to communicate with you regarding your questions and needs

I do not generally receive personal information indirectly. Where I coach sports groups, it is generally the responsibility of that group to manage attendees and any associated personal data. Similarly, if an individual wishes to adopt specific activities due to, for example, advice from a physiotherapist, then that information will be communicated through the data subject directly.

I currently do not share this personal information with third party organisations or individuals. However, I would share this information with relevant third parties for legal / statutory / regulatory purposes. This may include Disclosure Scotland, Health and Safety Executive, legal advisors and Police Scotland. In the event that I do share personal information with external third parties, I will only share such personal information strictly required for the specific purposes and take reasonable steps to ensure that recipients shall only process the disclosed personal information in accordance with those purposes.

If your personal information is included in any images or videos taken by me at training sessions or events, I may share this for promotional purposes. I may include your photo on my website, Facebook and Instagram pages for promotional purposes, subject always to your right to request that I do not do so by contacting me at kellyjoanneblack@gmail.com

How I store your personal information

Your information is securely stored. I only store your personal data electronically on a Microsoft 365 account, protected by Microsoft access controls. The device I use to access my M365 account is also password protected at login.

I will store your personal information for the period in which you have contracted me to provide you with services plus one year. After one year, if you have no longer been a customer for that period, I will delete your personal data.

This applies to all the data types identified in this Policy.

Your rights

Your rights can be exercised by writing to me at kellyscorefitness@gmail.com. Your rights in relation to your personal information are:

· You have a right to request access to the personal information that I hol about you by making a subject access request

· If you believe that any of your personal information is inaccurate or incomplete, you have a right to request that we correct or complete your personal information

· You have a right to request that we restrict the processing of your personal information for specific purposes

· If you wish me to delete your personal information, you may request that I do so.

Any request received by me will be considered under the applicable data protection legislation. If you remain dissatisfied, you have a right to raise a complaint with the Information Commissioner’s Office at www.ico.org.uk.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at [insert email address, phone number and or postal address] if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at [Insert your organisation’s contact details for data protection queries].

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk