Privacy Notice
How we collect, use and protect your personal information.
Business: Justyna Hurrell trading as FitnessJH
Contact: justyna@fitnessjh.com | 07414 301105
Address: 8 Ferguson Avenue, Gravesend, Kent, DA12 5LX
Registration: ICO ZB698051
Version 1.0
Issued 11 August 2026
This notice explains how FitnessJH uses personal information relating to prospective clients, current and former clients, website visitors and people who contact the business. FitnessJH is the data controller for that information.
FitnessJH provides services only to people aged 18 or over and does not knowingly collect client health information from children.
1. Information we collect
Depending on how you interact with FitnessJH, we may collect:
Identity and contact details: your name, date of birth, email address, telephone number, address or town, and emergency contact details.
Enquiry and contract information: your enquiry, chosen service, form responses, signed terms, signature, checkbox choices, consent records, submission date and time, start and end dates, appointments and cancellation information.
Health and readiness information: answers to health screening or physical activity readiness questions, medical conditions, injuries, medication, pregnancy or postnatal information, relevant symptoms, physical limitations and any professional advice you choose to provide.
Training, nutrition and progress information: goals, workout plans, completed sessions, exercise performance, check-ins, nutrition information, weight, measurements, progress photographs and other information used to adapt your programme.
Payment and transaction information: invoices, amounts, payment dates, payment status and limited payment references. If you pay by card, the payment provider processes your full card details; FitnessJH does not normally receive or store the complete card number or security code.
Communications: emails, WhatsApp messages, telephone notes, support questions, feedback and records of appointment arrangements.
Website and device information: IP address, browser and device information, cookie identifiers, website activity and consent preferences collected through Wix and permitted cookies or similar technologies.
Marketing and publicity information: marketing preferences and, where separately agreed, reviews, testimonials, photographs or transformation stories.
2. Where the information comes from
Most information comes directly from you when you enquire, complete a form, sign the terms, communicate with FitnessJH, attend a session, use the coaching application or provide a progress update.
Some technical information is collected automatically through the website and its cookies. Payment status and limited transaction information may come from a payment provider. If you give us another person's details as an emergency contact, please tell that person and direct them to this notice.
3. How and why we use your information
Enquiries and joining FitnessJH
We use contact and enquiry information to respond, discuss suitable services and take steps requested by you before entering a contract. The lawful basis is Article 6(1)(b) of the UK GDPR. Limited follow-up and enquiry administration may also be based on our legitimate interest in running and developing the business.
Providing and administering personal training
We use client, contract, appointment, training, progress and communication information to deliver the agreed service, create and adapt programmes, provide support, manage sessions, administer payments and keep an accurate record of the client relationship. The lawful basis is performance of the contract under Article 6(1)(b).
Health screening and safe programme design
We use relevant health and readiness information to assess suitability to exercise, identify precautions, design and adapt training, and deliver the service as safely as reasonably possible. Our Article 6 basis is performance of the contract and, where appropriate, our legitimate interest in protecting clients and operating safely. Because health information is special-category data, we normally rely on your explicit consent under Article 9(2)(a).
Safety and emergencies
In a genuine emergency, we may use or disclose relevant information to protect your vital interests or those of another person. Where health information is involved, this basis is used only where the conditions in Article 9(2)(c) are met, including where the person is physically or legally incapable of giving consent.
Accounts, legal obligations and claims
We use invoices and transaction information to maintain business and tax records. The basis is compliance with a legal obligation under Article 6(1)(c). We may retain and use necessary records to protect legal rights, deal with complaints, insurance matters or legal claims. The basis is our legitimate interests under Article 6(1)(f), and Article 9(2)(f) where relevant health information is necessary for legal claims.
Marketing, reviews and photographs
We may send marketing where you have consented or where the electronic-marketing soft opt-in lawfully applies to our own similar services. You can opt out at any time. We will not publish a review, testimonial, progress photograph or transformation story without separate permission. Where we rely on consent, the basis is Article 6(1)(a), and explicit consent where the material includes special category information.
Website operation and security
We use necessary technical information to operate and protect the website and forms. This is based on our legitimate interests in providing a secure and functional service. Non-essential analytics or marketing technologies are used only where the required consent has been obtained.
Information you need to provide
Contact, contract, payment and relevant health-screening information is needed to assess suitability and provide the service. If you do not provide it, FitnessJH may be unable to accept your order or continue training you safely. Marketing permissions, testimonials and publicity photographs are optional.
4. Health information and withdrawing consent
FitnessJH asks for explicit consent before using health information for screening, programme design and safe service delivery. You can withdraw that consent at any time by emailing justyna@fitnessjh.com. Withdrawal does not affect processing that was lawful before withdrawal.
If you withdraw consent, FitnessJH may be unable to continue providing the service safely. We may still retain or use limited information where another lawful basis and Article 9 condition applies, for example where it is necessary for a legal claim, insurance matter or legal obligation.
Please keep FitnessJH informed of relevant changes in your health. FitnessJH is not a medical service and may ask you to obtain advice or clearance from an appropriate healthcare professional before training continues.
5. Who we share information with
We share only the information reasonably necessary for the relevant purpose. Depending on the service and choices you make, recipients may include:
-
Wix, which hosts the website, forms, signed submissions, client-management and invoicing functions.
-
Google, where Google Forms, Google Drive, spreadsheets or business email are used for health screening and administration.
-
Trainerize, which is used to deliver and manage training, nutrition and progress information through the coaching application.
-
WhatsApp/Meta and telephone or email providers, where you choose to communicate using those services.
-
Stripe or another payment provider, where you select a card-payment or stored-payment option.
-
Professional advisers and service providers, including accountants, insurers, legal advisers and IT support, where reasonably necessary.
-
Regulators, courts, law-enforcement bodies, emergency services or other authorities where disclosure is required or permitted by law.
FitnessJH does not sell personal information.
6. International transfers
Some technology providers operate internationally and may store or make information accessible outside the UK. Where a restricted transfer occurs, FitnessJH relies on an applicable UK adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Where applicable, a provider may also rely on the UK Extension to the EU-US Data Privacy Framework.
You may contact FitnessJH if you would like more information about the safeguards relevant to your information.
7. How long we keep information
We keep information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, insurance and dispute-resolution requirements. Our normal periods are:
Unsuccessful enquiries: up to 12 months after the last meaningful contact, unless you ask us to delete the information sooner or separately agree to marketing.
Signed terms, consent records and core client-administration records: normally six years after the client relationship ends.
Health, training and progress records: normally seven years after the client relationship ends, subject to any longer period reasonably required by an insurer or an existing legal claim.
Financial and tax records: normally six years after the end of the relevant tax year.
Emergency-contact information: for the duration of the service and normally deleted within three months after it ends, unless needed in connection with an incident or claim.
Routine communications: normally two years after the client relationship ends. Messages forming part of a contract, health, payment or legal record may be kept for the relevant longer period above.
Marketing records: until you opt out or the information is no longer needed. We may keep a minimal suppression record so that we continue to respect an opt-out.
Published testimonials and photographs: until you withdraw permission or the material is no longer used, allowing a reasonable period to remove it from active channels and backups.
Website and cookie information: for the period shown in the website's cookie settings or as otherwise required for security.
When a retention period ends, information is securely deleted or anonymised. Limited copies may remain temporarily in protected backups until those backups are overwritten.
8. How we protect information
FitnessJH uses proportionate technical and organisational measures designed to protect information, including access controls, password-protected accounts and devices, appropriate supplier arrangements, software updates, secure disposal and limiting access to people who need the information. No internet or storage system can be guaranteed to be completely secure.
9. Marketing, testimonials and photographs
You can stop marketing emails or messages at any time by using the unsubscribe option provided or by emailing justyna@fitnessjh.com. Opting out of marketing does not affect service communications needed to administer your training.
Permission to use a review, testimonial, photograph or transformation story is separate from accepting FitnessJH's terms and from consenting to health-data processing. You may withdraw that publicity permission at any time. Withdrawal cannot remove material already lawfully printed or published by an independent third party, but FitnessJH will stop new use and take reasonable steps to remove material it controls.
10. Cookies
The website uses cookies and similar technologies. Some are necessary for the website, forms and security to work.
Optional analytics or marketing technologies should not be activated unless you consent through the cookie banner or settings. You can change your choices through the site's cookie settings and can also control cookies through your browser. Blocking some necessary technologies may affect website functionality.
11. Your data-protection rights
Depending on the circumstances and the lawful basis used, you may have the right to:
-
ask for access to your personal information and a copy of it;
-
ask for inaccurate or incomplete information to be corrected;
-
ask for information to be deleted in certain circumstances;
-
ask for use of information to be restricted in certain circumstances;
-
object to processing based on legitimate interests;
-
receive certain information in a portable format; and
-
withdraw consent at any time where processing is based on consent.
Your right to object
You have an absolute right to object to your personal information being used for direct marketing. You may also object to processing based on legitimate interests. Email justyna@fitnessjh.com to exercise these rights.
These rights are not absolute and may depend on the circumstances. FitnessJH will normally respond within one month and does not ordinarily charge a fee. We may ask for reasonable proof of identity before acting on a request.
FitnessJH does not make decisions about clients solely by automated means where those decisions have legal or similarly significant effects.
12. Contact and complaints
For questions, requests or concerns about personal information, contact:
-
Justyna Hurrell trading as FitnessJH
-
Email: justyna@fitnessjh.com
-
Telephone / WhatsApp: 07414 301105
-
Address: 8 Ferguson Avenue, Gravesend, Kent, DA12 5LX
-
ICO registration: ZB698051
You also have the right to complain to the Information Commissioner's Office (ICO). Visit ico.org.uk/make-a-complaint or telephone 0303 123 1113. You may contact the ICO without first contacting FitnessJH, although we welcome the opportunity to address your concern.