top of page

Privacy Policy

1. Introduction
We are VicFit, based in Highbury, Islington, UK.

We are committed to protecting your privacy and processing your personal data in accordance with the UK GDPR and Data Protection Act 2018 .

 

2. What We Collect

  • Identity & Contact Data: name, email, phone, address.

  • Health & Fitness Data: PAR-Q results, weight, fitness goals, session notes.

  • Technical & Usage Data: website analytics (e.g. IP, browser, pages visited).

  • Payment Data: limited transaction details (e.g. date, method).

 

3. How & Why We Use Your Data

Purpose: Provide training services, manage bookings, support, billing, booking platforms. Send marketing emails. Improve website and user experience. Meet legal obligations (e.g. tax, fraud prevention).

Legal Basis: Performance of contract. Explicit consent. Legitimate interest and legal requirements.

Data shared with: booking platform (e.g. MindBody), payment processors, mailchimp or similar (if opted‑in), Google Analytics, website host, HMRC, auditors.

 

4. Cookies & Analytics
We use first‑party cookies to enhance site performance and third‑party cookies (e.g. Google Analytics) for anonymous visitor insights.
Your browser settings allow you to opt out or delete cookies.

 

5. Sharing & Transfers
We do not sell your personal data.
We may share data with:

  • Service providers (e.g. booking, payments) under contract.

  • Legal authorities if required by law .
    Some tools (e.g. MindBody, host servers) may process data outside the UK/EU—but only with adequate safeguards.

 

6. Data Retention
We keep your data only as long as needed for service or legally required (typically up to 7 years post final interaction). Your Rights Under UK GDPR, you have the right to:

  • Access, correct, delete, or restrict your data

  • Port your data

  • Object to processing and withdraw consent

  • Lodge a complaint with the ICO (Information Commissioner’s Office)

 

8. Security
We implement appropriate physical, technical, and organizational measures, including SSL encryption and secure storage, to protect against unauthorized access.

​

9. Minors
We do not knowingly collect data from persons under 16 without parental consent.

 

10. Changes to Policy
We may update this policy, Any changes will be posted here with an updated effective date.

 

11. Contact Us
Questions or requests? Reach out to:

bottom of page