Legal

Privacy Policy

LAST UPDATED: [DATE YOU PUBLISH THIS]

This policy explains what personal information I collect, why I collect it, and what I do with it. I'm Luigi Sipos, trading as Luigi Fitness PT, and I'm the data controller for the information described here.

Who I am

• Name: Luigi Sipos, trading as Luigi Fitness PT
• Address: Anytime Fitness, 224–226 Norwood Road, Tulse Hill, London SE27 9AQ
• Email: luigi@luigifitnesspt.com
• Phone: 07737 524762

What I collect

When you enquire

• Your name
• Your email address and/or phone number
• Your fitness goal
• Anything else you choose to tell me in your message

When you become a client

• A health questionnaire (PAR-Q), including medical conditions, injuries, medication and anything affecting your ability to exercise safely
• Body measurements, weight and training records
• Dietary information, where we're working on nutrition
• Progress photographs — only where you have separately and explicitly agreed to them
• Payment records

When you visit this website

Standard server logs, which may include your IP address, browser type and the pages you viewed. This site does not run advertising trackers.

Health information — and why it's treated differently

Information about your health, injuries and medical conditions is what UK GDPR calls a special category of personal data. It gets a higher level of protection, and I can only process it with your explicit consent.

I collect it for one reason: I cannot programme safely for you without it. If you don't want to share something, tell me — but be aware there may be exercises I won't be able to prescribe as a result.

My lawful bases

• Consent — for health information, progress photographs, and any marketing
• Contract — to deliver the coaching you've booked and paid for
• Legitimate interests — to reply to your enquiry and run the business day to day
• Legal obligation — to keep financial records for HMRC

Progress photographs

I will never publish a photograph of you without asking first, in writing, and I'll show you the specific image and tell you where it will appear.

Consent to photographs is entirely separate from your training agreement. Saying no changes nothing about the coaching you receive, and you can withdraw consent at any time — email me and I'll remove the image from my website and social media as soon as I reasonably can.

Who I share it with

I don't sell your data. I don't share it for marketing. The only parties who ever touch it are the services I use to run the business:

• Hostinger — website and email hosting
• [YOUR FORM PROVIDER] — processes enquiries submitted through the contact form
• [YOUR PAYMENT PROVIDER] — processes payments; I never see your full card details
• [YOUR ACCOUNTANT, IF ANY] — for tax and bookkeeping

I may also disclose information where the law requires it.

How long I keep it

• Enquiries that don't become clients: up to 12 months, then deleted
• Client health and training records: for the duration of our work together, plus up to 3 years — this protects both of us if a question about a past session ever arises
• Financial records: 6 years, as HMRC requires
• Photographs: until you withdraw consent

How I protect it

Health records are stored securely and access-controlled. This website runs over HTTPS. I don't leave client paperwork lying around the gym floor, and I don't discuss your information with other clients.

Your rights

Under UK GDPR you have the right to:

• Ask what information I hold about you, and get a copy
• Have inaccurate information corrected
• Ask me to delete your information
• Ask me to restrict how I use it
• Object to my using it
• Receive your data in a portable format
• Withdraw consent at any time — including for photographs

Email luigi@luigifitnesspt.com and I'll respond within one month. It's free.

Complaints

If you think I've handled your information badly, please tell me first — I'd rather fix it. If you're not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this policy changes materially, I'll update the date at the top and tell current clients directly.