Privacy Policy

Last Updated: 11th March 2026

1. Introduction

This Privacy Policy explains how Niki Walker Personal Training collects, uses, and protects your personal information. As a Sole Trader providing personal training and nutrition advice, I am the Data Controller responsible for your personal data. I am registered with the Information Commissioner’s Office (ICO) under registration number: CSN1396614.

2. The Data I Collect

To provide you with safe and effective coaching, I collect the following information:

• Identity & Contact Data: Name, date of birth, email address, and phone number.

• Health Data (Special Category): Height, weight, body measurements, medical history, injuries, medications, and dietary requirements.

• Lifestyle Data: Exercise habits, sleep patterns, stress levels, and nutritional intake.

3. Why I Collect This Data (Legal Basis)

Under the UK GDPR, I must have a "lawful basis" for processing your data.

• Contractual Necessity: I need your contact and lifestyle data to fulfill my agreement to provide coaching services to you.

• Explicit Consent (Health Data): Because health information is "Special Category" data, I process this only with your explicit consent. This data is used solely to provide safe, personalised fitness and nutrition recommendations tailored to your physical capabilities and health needs.

4. How Your Data is Stored and Protected

Your privacy is my priority. I implement the following security measures:

• Encryption: All digital files and communications are protected by industry-standard encryption (SSL/TLS).

• Secure Storage: Data is stored on secure, password-protected devices or encrypted cloud storage (e.g. OneDrive).

• Access Control: Only I have access to your health and personal records. I do not employ staff or third parties who can view your sensitive data.

5. Data Retention

I only keep your personal data for as long as is necessary to provide my services or to comply with legal, accounting, or insurance requirements.

• Active client data is kept for the duration of our coaching.

• Upon termination of services, I typically retain records for 7 years to comply with professional insurance requirements, after which it is securely deleted.

6. Your Rights

As a data subject, you have the following rights:

• Access: You can request a copy of the data I hold about you.

• Rectification: You can ask me to correct inaccurate information.

• Erasure: You can ask me to delete your data (subject to my legal/insurance obligations).

• Withdrawal of Consent: You may withdraw your consent for me to process your health data at any time. Note: This may mean I am no longer able to safely provide coaching services to you.

7. Third-Party Sharing

I do not sell or rent your data to third parties. I only share information if:

• Required by law or my professional insurers.

• Required for essential business tools (e.g., your email address for an automated booking system), provided they are GDPR compliant.

8. Contact & Complaints

If you have any questions about this policy or how I handle your data, please contact me at:

• Email: nikijwalker@gmail.com

• Phone: 07867 972369

If you are unhappy with how I use your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) (www.ico.org.uk).