PRIVACY POLICY

Last Updated: August 3, 2026

1. Introduction & Data Controller

Welcome to CS Fitness. CS Fitness is a trading name of Creative Solutions Limited (Company Registration Number: 11625744). We respect your privacy and are committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, process, and safeguard your data when you visit our website, submit forms, participate in online coaching, or attend in-person personal training sessions with Phil Birch.

2. Information We Collect

We collect and process the following categories of personal data:

• Identity & Contact Data: Full name, date of birth, gender, email address, phone number, emergency contact details, and postal address.
• Health & Physical Data (Special Category Data): Physical Activity Readiness Questionnaire (PAR-Q) responses, weight, height, body fat measurements, photographic progress photos, caloric intake, metabolic metrics, injury history, medical conditions, and physical performance data.
• In-Person Session Data: Attendance logs, training facility access logs, and CCTV footage captured independently by external gym facilities where in-person personal training sessions occur.
• Transaction Data: Details about payments, bank transactions, and subscriptions for coaching services (processed via secure third-party payment gateways).
• Technical & Usage Data: IP addresses, browser types, cookie consent preferences, and page interactions captured via Hostinger hosting, Elementor forms, and analytical scripts.

3. How We Use Your Information

We use your data strictly to deliver elite personal training and online coaching services, including:

• Designing tailored training programs, biomechanical assessments, and nutritional protocols.
• Conducting safe in-person personal training sessions, ensuring medical clearance, and managing emergency protocols.
• Tracking physique transformations, body composition, and performance metrics over time.
• Processing payments, invoicing, and subscription management.
• Communicating via WhatsApp, SMS, phone call, or email regarding weekly check-ins, scheduling, and service updates.

4. Third-Party Software & Technical Processors

To provide high-performance coaching and client management, your data may be processed through the following secure third-party systems:

• GoHighLevel (GHL): Our primary CRM, appointment scheduler, automated marketing, and messaging funnel platform.
• Hostinger & Elementor: Secure web hosting infrastructure and form handler used to receive website inquiries.
• Complianz: Cookie management software enforcing script blocking and consent logging under UK privacy laws.
• Third-Party Gym Facilities: Where in-person training takes place, facilities may operate independent entry systems and CCTV for safety and security.

5. SMS & Messaging Communication Consent

By providing your contact phone number, you explicitly consent to receive transactional and operational communications (such as appointment reminders, weekly check-in prompts, and coaching support) via SMS or WhatsApp.

• You can opt-out of marketing communications at any time by replying "STOP" to any automated message or emailing us directly.
• We strictly do not sell, rent, or trade your phone numbers or consent data to third parties for commercial marketing purposes.

6. Legal Basis for Processing Health Data

Under UK GDPR, health data is categorized as Special Category Data. We process this information under explicit client consent provided during onboarding (PAR-Q form completion) and for the legitimate purpose of ensuring client safety during physical training sessions.

7. Data Retention & Security

We retain your personal data only as long as necessary to fulfill the services requested, or to comply with UK legal, accounting, and legal liability insurance requirements (typically 6 years post-coaching for personal injury/health records).

8. Your UK GDPR Rights

Under UK data protection laws, you have the right to:

• Request access to a copy of the personal data we hold about you.
• Request correction of incomplete or inaccurate data.
• Request erasure of your personal data (where legally applicable).
• Withdraw consent for marketing or health data processing at any time.

9. Contact Us & Business Information

For any questions, data deletion requests, or privacy queries, please contact us directly: