Privacy Policy

1. Data Controller

KG FITNESS (NR1) is the data controller for the personal data we collect. We are based at Wensum Sports Centre, 169a King Street, Norwich, Norfolk NR1 1QH.

For any data protection enquiries, contact us at kieranfromkg@kgfitnessnr1.com.

2. What Data We Collect

We may collect and process the following personal data:

• Identity data: name, contact details (email, phone)
• Booking data: session preferences, dates, times, payment information
• Application data: information you provide when applying for coaching (goals, experience, health-related information where relevant)
• Technical data: IP address, browser type, device information, cookies
• Usage data: how you use our website (e.g. pages visited, time spent)

3. Lawful Basis for Processing

We process your personal data on the following lawful bases:

• Contract: to fulfil bookings, deliver services, and manage your account
• Legitimate interests: to improve our services, prevent fraud, and communicate with you about your bookings
• Consent: where you have given explicit consent (e.g. marketing communications, non-essential cookies)
• Legal obligation: where required by law (e.g. tax, accounting records)

4. Data Retention

We retain your data only for as long as necessary:

• Bookings: 24 months after your last session
• Coaching applications: 12 months after submission (or longer if you become a client)
• Analytics data: 6 months (aggregated where possible)
• Financial/legal records: as required by law (typically 6–7 years)

After the retention period, we securely delete or anonymise your data.

5. Your Rights Under GDPR

You have the following rights in relation to your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your data (subject to legal exceptions)
• Right to data portability: receive your data in a structured, machine-readable format
• Right to restriction: request that we limit how we use your data in certain circumstances
• Right to object: object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, contact us at kieranfromkg@kgfitnessnr1.com. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

6. Cookies

We use cookies to improve your experience and analyse site usage. For full details, see our Cookie Policy.

7. Third Parties

We share data with the following third parties where necessary:

• Stripe: payment processing — stripe.com/gb/privacy
• Google: analytics, maps, and related services — policies.google.com/privacy

We do not sell your personal data. Third parties process data only to provide services to us and are bound by data protection agreements.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls.

9. Contact for Data Requests

For any data protection requests, questions, or concerns, contact: