PRIVACY POLICY

Last updated May 2026

Who we are

Gym Crush Coaching is the trading name of Dania Al-Saraf. We are the controller of the personal information we collect and use for our website, enquiries, coaching, digital products, payments, customer support, and marketing unless stated otherwise.

Contact: dania@gymcrushcoaching.com

What this policy covers

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you:

  • visit gymcrushcoaching.com;

  • contact us;

  • buy a product or service;

  • book a call;

  • join coaching;

  • communicate with us on Instagram, WhatsApp, email, or other channels;

  • submit forms, questionnaires, check-ins, testimonials, photos, or feedback; or

  • interact with our content, ads, or marketing.

Personal information we may collect

We may collect:

  • identity details, such as name and social media handle;

  • contact details, such as email address, phone number, Instagram profile, or WhatsApp number;

  • payment and billing information, processed through Stripe;

  • order and purchase history;

  • booking information and calendar appointment details;

  • coaching information, such as goals, training history, check-ins, measurements, progress photos, lifestyle information, food preferences, injuries, health information you choose to share, and other information needed to support coaching;

  • communications, such as messages, emails, reviews, enquiries, feedback, complaints, and support requests;

  • marketing preferences;

  • technical information, such as IP address, browser type, device information, website usage data, and cookie data where applicable; and

  • any other information you choose to provide.

Special category health information

Fitness coaching may involve information about your health, injuries, medical conditions, pregnancy, physical measurements, body composition, lifestyle, nutrition, and wellbeing. Some of this may be special category data under UK data protection law.

We will only use this information where needed to provide coaching safely and appropriately, where you have provided it to us, and where we have a lawful basis and special category condition to process it. Where appropriate, we may ask for your explicit consent to process health-related information for coaching purposes.

You can withdraw consent where we rely on consent, but this may mean we cannot continue providing some or all coaching services safely.

Lawful reasons for using your information

We may use your personal information because it is necessary to provide a product or service you requested, because we have a legitimate business interest, because you gave consent, because we need to comply with a legal obligation, or because we need to establish, exercise, or defend legal claims.

For health-related information, we may also rely on your explicit consent or another lawful condition that applies to special category data.

How we use your information

We may use your information to respond to enquiries, take payment, manage orders, deliver coaching, provide digital products, book calls, send calendar invitations, provide customer support, handle complaints, manage refunds or cancellations, keep business records, improve our website, protect our business, comply with legal obligations, and send marketing where we are allowed to do so.

We may use your coaching information to understand your goals, create or adapt your plan, review progress, support your check-ins, communicate with you, and help provide the service you bought.

We may use your messages, testimonials, reviews, screenshots, progress updates, or transformation content for marketing only where we have your permission to do so.

Where we get information from

We usually collect information directly from you. We may also receive information from Stripe, Google Calendar, Instagram, WhatsApp, website forms, analytics tools, or other platforms you use to interact with us.

Who we share information with

We may share personal information with:

  • Stripe for payment processing;

  • Google Calendar for bookings and scheduling;

  • Instagram/Meta where you contact us or interact with us there;

  • WhatsApp/Meta where we communicate with you there;

  • website hosting, email, IT, analytics, and security providers;

  • professional advisers, such as accountants, legal advisers, or insurers;

  • authorities, regulators, courts, or law enforcement if required; and

  • any future business systems we tell you about, such as coaching apps, email marketing tools, or file storage tools.

We only share information where needed and where we have a lawful reason.

International transfers

Some providers we use may process information outside the UK. Where this happens, we aim to rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, UK international data transfer arrangements, or the provider’s lawful transfer mechanism.

How long we keep information

We will not keep personal information for longer than necessary. As a starting point:

  • enquiry messages may be kept for up to [12 months];

  • customer/order records may be kept for up to [6 years] for tax, accounting, dispute, and legal reasons;

  • coaching records may be kept for up to [6 years] after your last purchase or coaching period, unless a shorter period is appropriate;

  • marketing preferences may be kept until you unsubscribe or withdraw consent, plus a suppression record to avoid contacting you again;

  • testimonials and consent records may be kept while the testimonial is used and for a reasonable period afterwards; and

  • website analytics data will be kept according to the settings of the relevant analytics tool.

Cookies and website data

Our website may use cookies or similar technologies that are necessary for the website to work properly, including security, performance, form, and site functionality cookies. If we add analytics, advertising pixels, or marketing cookies in future, we will update this policy and ask for consent where required.

You can usually manage cookies through your browser settings. If you block all cookies, parts of the website may not work properly.

How we protect information

We take reasonable steps to protect personal information, including using reputable third-party platforms, limiting access, using passwords and device security, and keeping information only where needed. No online system is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on the circumstances, you may have the right to:

  • access your personal information;

  • correct inaccurate information;

  • ask us to delete information;

  • restrict how we use information;

  • object to certain uses;

  • withdraw consent where we rely on consent;

  • ask for data portability; and

  • complain to the Information Commissioner’s Office.

To make a request, contact dania@gymcrushcoaching.com. We may need to verify your identity before responding.

Complaints

If you have concerns about how we use your personal information, please contact us first at: dania@gymcrushcoaching.com.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page.