Privacy Policy

Last updated: February 2026

This Privacy Policy explains how Gerald Latifi trading as Gerald Fitness (“we”, “us”, “our”) collects, uses and protects personal data when you use www.geraldfitness.co.uk, contact us, book services, or purchase training packages.

1. Who We Are (Data Controller)

Gerald Latifi trading as Gerald Fitness
1 Kite Close, Kestrel Court
London, SE2 9FB, United Kingdom
Email: info@geraldfitness.co.uk

2. What Personal Data We Collect

A) Information you provide

• Name, email address and phone number (via contact or booking forms).
• Booking details and service preferences.
• Messages you send to us (email or website forms).
• Training goals, fitness background and coaching notes.
• Health information you choose to share (e.g. injuries, medical conditions, PAR-Q answers).

B) Payment information

Payments are processed securely via Stripe. We do not store full card details.

C) Automatically collected data

• IP address
• Browser type and device information
• Pages visited and time spent on the website
• Cookie and tracking data (subject to your consent settings)

3. Special Category (Sensitive) Data

If you become a client, you may share health-related information such as injuries or medical history. Under UK GDPR, health data is classed as special category data. We process this only when necessary for safe coaching delivery and keep it confidential.

4. How We Use Your Data

• To respond to enquiries and provide support.
• To deliver personal training and coaching services.
• To manage bookings and communicate with you.
• To process payments and issue invoices/receipts.
• To improve website performance and user experience.
• To comply with legal and tax obligations.

5. Legal Basis for Processing

• Contract: to deliver requested services.
• Legitimate interests: to operate and improve our business.
• Consent: for optional marketing cookies and where required for health data processing.
• Legal obligation: for tax and compliance purposes.

6. Third-Party Service Providers

We may share data with trusted providers used to run the business:

• Stripe – payment processing.
• Zoho Mail – email hosting and communication.
• Google Analytics – website analytics.
• Meta (Facebook) Pixel – marketing performance measurement.
• Elfsight – cookie consent management.
• Sitejet / Hosting Provider – website hosting and infrastructure.
• Google Maps – embedded map services.

We do not sell your personal data.

7. Cookies and Tracking Technologies

We use cookies to operate the website, analyse traffic, and measure marketing performance. Non-essential cookies (analytics/marketing) are used only according to your consent preferences.

8. International Data Transfers

Some providers (e.g. Google, Meta, Stripe, Zoho) may process data outside the UK. Where this occurs, appropriate safeguards (such as contractual protections) are used.

9. Data Retention

• Enquiries: up to 24 months unless you become a client.
• Client records: retained as needed for coaching and insurance purposes.
• Financial records: retained up to 6 years as required by UK law.

10. Data Security

We use appropriate technical and organisational measures to protect your data. However, no online transmission is completely secure.

11. Your Rights

Under UK GDPR, you may have rights to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent (where processing is based on consent)

To exercise your rights, contact: info@geraldfitness.co.uk. You can also complain to the UK Information Commissioner’s Office (ICO).

12. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

13. Contact

Gerald Fitness
1 Kite Close, Kestrel Court
London, SE2 9FB
Email: info@geraldfitness.co.uk