Privacy Notice

Last updated 1 June 2026

This notice explains how Joshfit Personal Training, a sole trader business operated by Josh trading as Joshfit, collects and uses personal information. It applies to anyone who contacts Joshfit, books a session, completes a form on this website, or uses the WhatsApp number.

Who we are

Joshfit Personal Training is a UK sole trader. The data controller is Josh, trading as Joshfit. Contact: 07889 180224 or [email protected]. Trading address: Phoenix Leisure Centre, Widgeon Cl, Bradwell, Great Yarmouth NR31 8JU.

What we collect

Name, phone number, and email when you make an enquiry or book a session
Training goal, fitness level, and session preferences you provide on the booking form
Health information you choose to share (such as injuries or medical conditions) to help Josh plan safe sessions
Payment confirmation details from Stripe or your bank when you pay (we do not store full card numbers)
Anonymous website analytics through your browser, such as the page you arrived on and how long you stayed

Why we collect it

To respond to your enquiry and arrange sessions (legal basis: contract performance, UK GDPR Article 6(1)(b))
To safely plan and adapt training for any health considerations you tell us about (legal basis: explicit consent, UK GDPR Article 9(2)(a))
To keep records HMRC and Companies Act 2006 require for self-employment (legal basis: legal obligation, UK GDPR Article 6(1)(c))
To improve the website (legal basis: legitimate interest, UK GDPR Article 6(1)(f))

Who sees your information

Josh sees everything you share directly. Beyond that, your information may be processed by:

Stripe (payment processing). Stripe's privacy policy: stripe.com/gb/privacy
Hotmail / Microsoft (email correspondence)
WhatsApp / Meta (when you message the WhatsApp number)
HMRC and any accountant Josh appoints, where the law requires

Your information is not sold to third parties. It is not used for marketing without your consent.

How long we keep it

Enquiry messages are kept for up to 24 months. Booking and payment records are kept for at least six years to meet HMRC self-assessment record-keeping rules. Health information is kept only as long as the training relationship is active, then deleted within 90 days unless you ask us to keep it on file for a future return.

Your rights

Under UK GDPR you can:

Ask to see what information we hold about you
Ask us to correct anything that is wrong
Ask us to delete information when there is no longer a lawful basis to hold it
Withdraw any consent you have given (for example, for health information processing)
Complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113

To exercise any of these rights, contact Josh on 07889 180224 or [email protected]. We respond within one month.

Changes to this notice

When this notice changes we update the date at the top of the page. The most recent version is the one that applies.

Joshfit Personal Training · Sole trader · Josh trading as Joshfit · 07889 180224 · [email protected]