1. Who we are

Revitalise Fitness (Dorking, Surrey) or ‘the studio by Revitalise Fitness’, it’s website and services are operated by Paul Persad, providing personal training, small group training, and coaching services.

2. What data we collect

We may collect and store the following personal data:

• Name and contact details (e.g. email address, phone number)

• Health and medical information relevant to safe participation in training

• Booking and attendance information

• Payment and transaction information (processed securely via third-party providers)

• Communications via email, contact forms, or social media messages

3. How your data is used

Your data is used to:

• Provide personal training and coaching services safely

• Manage bookings, subscriptions, and packages

• Communicate regarding sessions, updates, or service information

• Maintain health and safety records (e.g. PAR-Q and screening forms)

• Improve service delivery

• We do not sell your personal data.

4. Legal basis for processing (GDPR)

We process personal data under the following lawful bases:

• Contractual necessity (to deliver training and coaching services)

• Legitimate interests (to manage and improve services)

• Legal obligation (e.g. basic financial record keeping)

• Consent (e.g. marketing communications or use of client images)

5. Health and sensitive data

Health information is collected solely for the purpose of ensuring safe participation in exercise and appropriate coaching delivery.

This information is treated as sensitive data and stored securely.

Access is restricted to Paul Persad only.

6. Safeguarding and Age of Participants

This is primarily an adult personal training and coaching service.

Clients under the age of 18 are not routinely accepted. Where training is provided to a client under 18 by prior agreement, a parent or legal guardian must be present during sessions.

Paul operates with a duty of care to all clients. If there are any concerns relating to the welfare, safety, or wellbeing of a client, appropriate action will be taken, which may include referral to relevant external professionals or services.

7. Data storage and security

Personal data is stored securely using trusted third-party systems including:

• Squarespace (website and forms)

• Email systems linked to Squarespace

• Acuity Scheduling & Square (payment processing and subscriptions)

• Social media platforms (Instagram and Facebook, where applicable)

Reasonable steps are taken to ensure data is kept secure and protected from unauthorised access.

8. Marketing and communications

You may receive occasional emails relating to your sessions, services, or updates.

You may opt out of marketing communications at any time using unsubscribe links or by contacting Paul directly.

9. Photography and media

Images or video content will only be used for marketing or social media purposes where prior consent has been given.

Consent may be withdrawn at any time.

10. Your rights

Under GDPR, you have the right to:

• Request access to your personal data

• Request correction of inaccurate data

• Request deletion of your data (where applicable)

• Withdraw consent for marketing or media use

11. Data retention

Personal data is retained only for as long as necessary to provide services or meet legal obligations.

Health and training records may be retained for safety and liability purposes for a reasonable period.

12. Contact

If you have any questions about this Privacy Policy or your data, you can contact Paul directly via the contact page.