Train Mind Body Soul – Privacy Policy

Effective from 12th June 2025

Train Mind Body Soul Limited (“we”, “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data in compliance with UK GDPR.

1. What Information We Collect and Why

- Clients: contact details, health information, emergency contacts, payment data.
- Website visitors: IP address, usage data, cookies.
- Trainers: employment and qualification records.
Purpose: service provision, safety, payment processing, and communication.

2. Lawful Basis & Data Retention

- Contractual basis for clients and staff.
- Health data processed with explicit consent.
- Client records: kept for 1 year post service.
- Financial records: retained 6 years per tax laws.
- Trainer data: stored for 6 years after contract ends.

3. Sharing Your Information

- With payment providers (Stripe, GoCardless).
- With professional advisors and insurers.
- No third-party marketing.
- Legal obligations where required.

4. Your Rights

You have the right to access, correct, erase your data, object to processing, and withdraw consent. Contact craigj@trainmbs.com or the ICO to lodge a complaint.

5. Cookies

We use cookies to improve website experience. You can manage cookie preferences via your browser settings.

6. International Transfers

Your data may be processed outside the UK/EU. We ensure safeguards are in place (e.g., standard contractual clauses).

7. Data Breach Notification

We will notify affected individuals and the ICO in the event of a serious data breach.

8. Changes to This Policy

Minor changes will be posted on our website. Major changes will be communicated directly with affected users.

9. Children’s Privacy

We do not knowingly collect data from individuals under 16 without parental consent.