Privacy Policy

Who is responsible for your information

I am David Gordon, the sole trader operating DHG Fitness, and I am responsible for how personal information is handled by the business. My coaching services are intended for adults aged 18 and over, but this privacy notice applies to anyone whose personal information I process, including website visitors and people making enquiries. Address: 1 Yule Close, Bricket Wood, St. Albans, Hertfordshire, AL2 3XZ, United Kingdom. For privacy questions or requests, email Email about privacy . For general enquiries, email Email David .

What information I collect

When you use the main website enquiry form, I receive your name, email address, selected enquiry type and message. If you use a learning-guide question form, I receive your name, email address, question and the guide it relates to. I use this information to respond to you; submitting a question does not sign you up to marketing emails.

If you become a client, I may record appointment details, correspondence, agreed goals, coaching notes, your personalised Action Plan, and payment and accounting records. Please avoid including medical information or other sensitive details in website forms. I do not routinely collect clinical health records.

Why I use information

I use enquiry and guide-question details to answer your questions and, where relevant, take steps you request before entering a coaching agreement (legitimate interests in responding to general questions, or pre-contract steps where you enquire about coaching). I use coaching and appointment information to provide agreed services (contract), financial records to meet accounting and tax duties (legal obligation), and limited technical or administrative information to operate and protect the website and business (legitimate interests). Optional Google Analytics is used only with your consent.

I do not automatically add people who submit questions or enquiries to a marketing mailing list.

Information about health

Although coaching is non-clinical, information you share about an injury, medical condition or health status may be special-category personal data. Please do not include it in the public website forms. If information of this kind is genuinely needed for coaching, I will explain why it is needed and establish an appropriate UK GDPR Article 9 condition, such as explicit consent where appropriate, before intentionally recording it. I will avoid keeping unnecessary sensitive information.

Who handles your information

Netlify hosts this website and processes form submissions. Website enquiries are notified to me by email. My business email is forwarded through Porkbun and received using Gmail. Depending on what we agree, coaching correspondence and calls may use WhatsApp or Microsoft Teams, and coaching documents and administration may be stored using Google services.

Coaching payments are processed securely through Stripe. Stripe processes payment details and subscription transactions; I receive the payment and transaction information needed to administer coaching and keep business records. I do not collect card details through the DHG Fitness website. Stripe also handles personal information under its own privacy notice: Stripe Privacy Policy.

These providers process information as necessary to provide their services. I do not sell personal information or share it for unrelated advertising.

Processing outside the UK

Some of my service providers may process information outside the UK, including through international communications and cloud services. Where restricted transfers occur, appropriate safeguards must apply under UK data-protection law, such as UK adequacy regulations or recognised contractual safeguards. You can contact me for further information about relevant providers and safeguards.

How long I keep information

I keep personal information only for as long as needed. My intended retention periods are up to 12 months for enquiries that do not lead to coaching, up to 3 years after the last coaching service for routine coaching records, and the period required by HMRC for financial and tax records (generally at least 5 years after the relevant 31 January Self Assessment submission deadline). Information may be retained longer where reasonably needed for legal claims or other legal obligations. I review and delete records when they are no longer needed.

How I protect information

I use account access controls and take reasonable steps to protect client information, including limiting access and avoiding unnecessary sensitive details. No online system can be guaranteed completely secure.

Your privacy rights

Depending on the circumstances, you may have rights to access, correct or erase your data, restrict or object to processing, and to data portability. Where I rely on consent, you can withdraw it at any time by emailing me. Withdrawal does not affect processing already carried out lawfully before withdrawal. To exercise a right, email Email about privacy . You can also complain to the UK Information Commissioner’s Office at ico.org.uk .

Cookies and website tracking

With your permission, I use Google Analytics 4 (Google LLC) to understand website visits, traffic sources, pages viewed and enquiries. Analytics is optional and is not loaded unless you choose to accept it. You can reject analytics and still use the website and its forms.

If accepted, Google Analytics may use cookies and process information about your browser, device, approximate location and interactions with the site. Some processing may take place outside the UK. I do not intentionally send the contents of enquiry forms to Google Analytics. Netlify also processes technical information needed to deliver the website and handle form submissions.

You can change your analytics choice using the settings control below.