Draft

Privacy policy

This is a starter template for the site owner to edit. It is not legal advice, and it is not a finished policy until a qualified person has reviewed it and every placeholder has been replaced.

Who this draft is for

This notice is a starting point for [REPLACE: legal business name], trading as Paradox Fitness. Company number or sole-trader status: [REPLACE]. Registered office or business address: [REPLACE]. Contact email: [REPLACE: the same public email used on the site].

The coach named on the site is Davide. Change that here if the public name changes in the site configuration.

What the site is built to collect

The pages can ask for:

Starter kit form: name, email, and consent.
Consultation form: name, email, optional phone number, location band, coaching interest, goal, training experience, message, and consent.
A cookie choice of accepted or rejected, stored in this browser under the key paradox-fitness-cookie-choice.

Right now those forms validate the details and then discard them. They do not email the coach, add you to MailerLite, or save a database record. The cookie buttons do not load analytics or advertising scripts. If you press play on the homepage video, your browser then contacts YouTube. If you press play on a playlist, it contacts Spotify. That is described in the cookie policy.

Purposes and lawful bases

[REPLACE: the real purposes, for example replying to a consultation or sending the starter kit, and the lawful basis for each one.] In the UK that is often contract, legitimate interests, or consent. Which one applies depends on what you actually do. Confirm it with your adviser. Do not leave this paragraph unchanged on a live site.

Who else might receive data

[REPLACE: name each processor you actually use, such as the website host, email provider, or MailerLite, and the country where they store data if you know it.] No processor is connected to the forms until the owner turns delivery on. The host that serves the website may still process technical logs. [REPLACE: say whether the host keeps IP addresses and for how long.]

How long data is kept

[REPLACE: retention periods for enquiries, consent records, and any email list.] Because the forms do not store submissions today, there is no enquiry archive on this site to retain.

Your rights

People in the UK usually have rights to access, correct, delete, restrict, or object to certain uses of personal data, and to complain to the Information Commissioner’s Office. [REPLACE: how someone should make a request, and how long you aim to reply.] This paragraph is a reminder for the owner, not a guarantee of how a request will be handled.

Cookies are described in the cookie policy. Training content is covered by the health disclaimer. Use of the site is covered by the terms and conditions. All three are drafts.