Privacy Policy
1. Who We Are (Data Controller)
The data controller responsible for the processing of your personal data under this policy is:
- Name: Ashley Sealy
- Business: Marathon Mindset
- Contact Number: 07785 554684
- Email: marathonmindset.pt@gmail.com
2. Personal Data We Collect
We only collect data that is necessary to provide you with a safe, effective, and personalised fitness coaching service. The personal data we collect falls into two main categories:
- Type of Data: Identity & Contact Data
- Type of Data: Health & Fitness Data
All information contained within the health and fitness forms completed together in our sessions (e.g., medical history, current fitness levels, goals, lifestyle details). Note: This is considered "Special Category Data" under data protection law due to its sensitive nature.
3. How We Use Your Data (Purpose and Legal Basis)
We process your data for the following specific purposes and rely on the following legal bases under GDPR:
- Type of Data: Identity & Contact Data, Health & Fitness Data.
- Contractual Necessity: To create and deliver your personalised training and nutrition plans as part of our contract with you.
- Explicit Consent: Necessary for processing sensitive Health & Fitness Data.
- Type of Data: Identity & Contact Data.
- Legitimate Interests: To schedule sessions, respond to inquiries, or communicate important updates regarding your service.
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Retention Period: All contact details and forms will be securely destroyed after 6 months from the date of your last session with us. This period allows for continuity if you decide to restart your training shortly after a break.
5. Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We restrict access to your personal data to Ashley Sealy, the Data Controller, who is subject to a duty of confidentiality.
6. Third-Party Data Processing (Website and Cookies)
Our website uses third-party services that may process your data:
- Google Maps: We use Google Maps to display location information. This service, provided by Google Ireland Limited, may collect your IP address and location information based on your consent (Art. 6 (1) (a) GDPR) for the purpose of displaying maps.
- Cookies and Tracking: Our website uses cookies and similar tracking technologies. When you first visit the site, you are presented with options to accept or decline the use of these technologies. You can manage your preferences through the Privacy Settings on the website.
7. Your Data Protection Rights
Under GDPR, you have the following rights concerning your personal data:
- The right to be informed about how your data is being used (which is what this policy does).
- The right of access to your personal data.
- The right to rectification if your personal data is inaccurate or incomplete.
- The right to erasure (also known as 'the right to be forgotten'), allowing you to request the deletion of your data.
- The right to restrict processing of your personal data.
- The right to data portability, allowing you to obtain and reuse your personal data for your own purposes across different services.
- The right to object to certain types of processing.
- Rights in relation to automated decision making and profiling (which we do not currently use).
To exercise any of these rights, please contact the Data Controller (Ashley Sealy) using the contact details provided in Section 1.
8. Changes to this Policy
We reserve the right to update this privacy policy at any time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.