Privacy Policy
Last updated: January 2024
freshnut-construct Ltd ("we", "our", or "us") is committed to protecting the privacy of individuals who visit our website and use our services. This Privacy Policy explains how we collect, use, store, and share your personal information.
Information We Collect
We collect information that you provide directly to us, as well as information collected automatically when you use our website.
Information You Provide
When you enquire about our services, book a consultation, or communicate with us, we may collect:
- Name and contact details (email address, postal address)
- Health and fitness information relevant to your training
- Payment and billing information when you purchase services
- Communications and correspondence with our team
- Feedback, reviews, and survey responses
Information Collected Automatically
When you visit our website, we automatically collect certain technical information:
- IP address and approximate geographic location
- Browser type and version
- Device information and operating system
- Pages visited and time spent on the site
- Referring website or source
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our fitness training services
- To process bookings and payments
- To communicate with you about your training and our services
- To respond to your enquiries and provide customer support
- To send service updates and administrative messages
- To analyse website usage and improve user experience
- To comply with legal obligations and protect our rights
Legal Basis for Processing
We process your personal data under the following legal bases as defined by UK GDPR:
- Contract: Processing necessary to fulfil our contractual obligations to you
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services
- Consent: Where you have given clear consent for us to process your data for specific purposes
- Legal obligation: Processing necessary to comply with legal requirements
Data Sharing
We do not sell your personal information to third parties. We may share your information in the following circumstances:
- With service providers who assist in our operations (payment processors, IT providers)
- With professional advisers such as lawyers or accountants when necessary
- When required by law or to protect our legal rights
- In connection with a business transfer or acquisition
All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.
Data Retention
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including:
- Client records: 7 years after your last interaction with us
- Financial records: As required by UK tax law (typically 6 years)
- Marketing preferences: Until you withdraw consent or unsubscribe
- Website analytics: 26 months from your last visit
Your Rights
Under UK data protection law, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data in certain circumstances
- Restriction: Request limitation of processing in certain circumstances
- Portability: Request transfer of your data to another organisation
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw previously given consent at any time
To exercise any of these rights, please contact us at [email protected].
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Secure access controls and authentication
- Regular security assessments and updates
- Staff training on data protection practices
International Transfers
Your information may be processed by service providers located outside the United Kingdom. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.
Children's Privacy
Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children without parental consent. If we become aware that we have collected information from a child without appropriate consent, we will delete that information promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or contacting you directly where appropriate.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer:
Email: [email protected]
Post: Data Protection Officer, freshnut-construct Ltd, 47 Riverside Walk, Manchester, M3 4LQ
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit freshnut-construct.com for more information.