Privacy Policy

Last Updated: 27 November 2025

1. Introduction

ENHANCE PHYSIQUE LTD (Company Number: 15969986), trading as "Enhance Physique" ("we", "us", "our"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

ENHANCE PHYSIQUE LTD
Company Number: 15969986
Registered in England and Wales
Email: dataprotection@enhancephysique.com
Phone: +44 (0) 20 7946 0958

3. Information We Collect

We collect and process the following types of personal data:

3.1 Information You Provide

• Name, email address, phone number
• Postal address and billing information
• Payment card details (processed securely by our payment processor)
• Health and fitness information (medical history, fitness goals, dietary requirements)
• Photographs and videos for training purposes
• Emergency contact information

3.2 Information We Collect Automatically

• IP address and browser information
• Device information and operating system
• Usage data and website analytics
• Cookies and similar tracking technologies

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide our fitness services and programs
• Consent: For marketing communications and sensitive health data
• Legal Obligation: To comply with UK tax, accounting, and health & safety laws
• Legitimate Interests: To improve our services and prevent fraud

5. How We Use Your Data

We use your personal data for the following purposes:

• Providing fitness training and wellness services
• Processing payments and managing subscriptions
• Communicating about your program, bookings, and appointments
• Sending marketing communications (with your consent)
• Improving our services and website functionality
• Complying with legal and regulatory requirements
• Preventing fraud and ensuring security

6. Special Category Data

We process special category data (health information) only with your explicit consent or where necessary for the provision of health services. This includes:

• Medical conditions and injuries
• Fitness assessments and body composition data
• Dietary restrictions and allergies
• Disability or accessibility requirements

7. Data Sharing and Disclosure

We may share your personal data with:

• Payment Processors: Stripe, PayPal (for secure payment processing)
• Third-Party Service Providers: Email services, booking systems, analytics providers
• Legal Requirements: Law enforcement, regulators, or courts when legally required
• Business Partners: Nutritionists, physiotherapists (with your consent)

We do not sell your personal data to third parties.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Active clients: Duration of service plus 7 years (for financial records)
• Marketing data: Until you withdraw consent or 3 years of inactivity
• Health records: 8 years from last treatment (in line with UK medical record guidelines)

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, contact us at dataprotection@enhancephysique.com

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure payment processing (PCI DSS compliant)
• Regular security assessments and updates
• Staff training on data protection
• Access controls and authentication measures

11. Cookies

We use cookies to enhance your browsing experience. You can manage cookie preferences through your browser settings. For more information, see our Cookie Policy.

12. International Transfers

We primarily store data within the UK and European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses.

13. Children's Privacy

Our services are not intended for individuals under 16 years of age. If a parent or guardian believes we have collected data from a child without proper consent, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

15. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
Website: www.ico.org.uk

16. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, contact us at:

ENHANCE PHYSIQUE LTD
Email: dataprotection@enhancephysique.com
Phone: +44 (0) 20 7946 0958
Post: 128 City Road, London, EC1V 2NX, United Kingdom