Privacy Policy

David Jones T/A as RowStrong Coaching is committed to protecting your privacy and handling your personal data transparently and securely.  This policy explains how your personal information is collected, used, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

RowStrong Coaching is a personal training and indoor rowing coaching service based in the United Kingdom.  For the purposes of data protection law, RowStrong Coaching is the “Data Controller” of your personal information. If you have any questions about this policy, you can contact: Email: info@rowstrongcoaching.com

2. What Information We Collect

We collect personal information that you voluntarily provide when registering for training, completing health forms, or communicating with us.  This may include:

Personal Identification Data

• Full name
• Address
• Email address
• Telephone number
• Date of birth
• Emergency contact details

Health & Fitness Information (Special Category Data)

• Medical history
• Injuries and musculoskeletal issues
• Cardiovascular history
• Physical Activity Readiness Questionnaire (PAR-Q) responses
• Medication disclosures
• Pregnancy status
• Relevant lifestyle information relating to safe training

Training & Performance Data

• Attendance records
• Performance metrics (e.g., rowing splits, heart rate data where shared)
• Progress tracking notes

Website Data

When visiting our website, we may collect:

• IP address
• Browser type
• Device information
• Referral source
• Date and time of visit

We may use cookies to improve website functionality. Most browsers allow you to disable cookies, although doing so may affect site usability.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

Contractual Purposes

• To deliver coaching sessions and training programmes
• To ensure sessions are safe and appropriate
• To manage bookings and payments

Health & Safety

• To assess suitability for participation
• To adapt training safely based on disclosed medical information
• To respond appropriately in case of emergency

Legitimate Business Interests

• To communicate about training blocks, workshops, or relevant updates
• To maintain attendance and training records
• To improve services

Legal Obligations

• To comply with health and safety requirements
• To meet tax and accounting obligations

We do not sell, rent, or trade your personal information.  Your health information (special category data) is processed only with your explicit consent and for the purpose of ensuring safe participation.

4. Sharing Your Data

We will not share your personal data with third parties unless:

• It is required by law
• It is necessary to fulfil a contract (e.g., payment processor)
• You have provided explicit consent

We do not share medical or health data with third parties without your consent unless required in an emergency situation.

5. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Secure, password-protected systems
• Encrypted online forms (where used)
• Restricted access to data
• Secure storage of any paper records

While we take all reasonable precautions, no data transmission over the internet can be guaranteed to be completely secure.

6. Data Retention

We retain personal and health information only for as long as necessary.

• Health and registration data will typically be retained for up to 7 years after your last session, in line with insurance and legal best practice for fitness professionals.
• Basic contact data may be retained for legitimate business communication unless you request deletion.
• When data is no longer required, it will be securely deleted or destroyed.

7. Your Rights (Data Subject Rights)

Under UK GDPR, you have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate information
• Request erasure of your data (where legally permissible)
• Request restriction of processing
• Object to processing based on legitimate interests
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://www.ico.org.uk

8. Marketing Communications

You may opt out of marketing or non-essential communications at any time by contacting us at:

info@rowstrongcoaching.com

9. External Websites

The RowStrong website may contain links to external websites. RowStrong Coaching is not responsible for the content or privacy practices of those sites.

10. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect legal or operational changes. The latest version will always be available on the website.