Legal Document

Privacy Policy

Last updated: April 2026 · GDPR & UK Data Protection Act 2018 compliant

⚠ Draft document. This is a starting template. Before going live, this Privacy Policy should be reviewed by a qualified solicitor and registered with the ICO if applicable to your business.

1. Who We Are

G Physique is operated by Gareth Rivett, a sole trader based in the United Kingdom. For all data protection matters, the data controller is Gareth Rivett, contactable at gareth@gphysique.co.uk.

2. What Information We Collect

Information you give us directly

Name, email, phone number
Health information (medical history, injuries, medications, allergies)
Body composition data (weight, body fat percentage, measurements)
Training history, goals, and lifestyle information
Progress photos (only if you choose to share them)
Payment details (processed by Stripe — we never store card numbers)

Information collected automatically

Website analytics (pages visited, time on site) — used to improve the site
Device and browser information
Anonymous chat conversation data (when using the AI assistant)

3. How We Use Your Information

We use the information you provide to:

Build and deliver your custom coaching programme
Track your progress and adjust your plan based on results
Communicate with you via the MyPTHub app, email, and (where applicable) SMS
Process payments via Stripe
Respond to your questions and provide ongoing support
Improve the website and coaching service

4. Lawful Basis for Processing

We process your data on the following lawful bases:

Contract: To deliver the coaching service you've signed up for
Consent: For marketing communications and use of progress photos
Legitimate interest: For website analytics and improving the service
Legal obligation: Where required by law (e.g., for accounting records)

5. Special Category Data (Health Information)

Health information is classed as special category data under GDPR. We process it only with your explicit consent, given when you complete the onboarding form. You can withdraw consent at any time by emailing gareth@gphysique.co.uk.

6. Who We Share Your Data With

We do not sell your data. We share it only with the following service providers, all of whom are GDPR-compliant:

MyPTHub: Coaching app platform — stores your training, nutrition, and check-in data
Stripe: Payment processing
Klarna (if used): Payment processing for instalment plans
Email service providers: For coaching communications
Anthropic: Powers the AI chat assistant on the website

We will never share, sell, or rent your data to third parties for marketing purposes.

7. How Long We Keep Your Data

Active clients: All data retained for the duration of coaching plus 12 months
Past clients: Data retained for 6 years after the end of coaching (UK accounting requirements)
Marketing contacts: Until you unsubscribe or 2 years of inactivity
Website analytics: 14 months (Google Analytics standard)

8. Your Rights Under GDPR

You have the right to:

Access: Request a copy of all data we hold about you
Rectification: Correct any inaccurate information
Erasure: Request deletion of your data ("right to be forgotten")
Restrict processing: Limit how we use your data
Data portability: Receive your data in a machine-readable format
Object: To processing for marketing or other legitimate interest grounds
Withdraw consent: Where processing is based on consent

To exercise any of these rights, email gareth@gphysique.co.uk. We will respond within 30 days as required by law.

9. Data Security

We take data security seriously. Measures include:

Encrypted data transmission (HTTPS) on the website
Secure third-party platforms (MyPTHub, Stripe) with their own GDPR compliance
Limited access — only Gareth Rivett accesses your data directly
Regular review of security practices

10. Cookies

This website uses minimal cookies, primarily for essential functionality (e.g. remembering your TDEE calculator inputs). We do not currently use third-party advertising cookies. Analytics cookies (if used) are anonymous.

11. Children's Privacy

Our coaching service is not intended for anyone under 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page. Significant changes will be communicated by email to active clients.

13. Complaints

If you have any concerns about how we handle your data, please contact us first at gareth@gphysique.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Web: ico.org.uk