Privacy notice
This policy is being finalised. If you have any questions about it, please contact us.
Who we are
Body Bespoke is a trading name of [Legal business name – to be confirmed]. Our address is [Business address – to be confirmed]. You can contact us at bodybespoketraining@gmail.com or via our contact page.
We are the controller of your personal data. [ICO registration number – to be confirmed]
What we collect and why
| Information | Why we use it | Lawful basis |
|---|---|---|
| Name, email, billing details from checkout | To process your order and send order emails | Contract |
| Questionnaire answers about goals, training, food, lifestyle | To prepare your personalised plan | Contract |
| Health information you choose to give (e.g. injuries, allergies, medical conditions, pregnancy) | To make your plan safe and decide whether we can provide it | Your explicit consent (UK GDPR Article 9(2)(a)) |
| WhatsApp number (if you choose WhatsApp) | To provide support | Contract |
| Contact form messages | To answer your enquiry | Legitimate interests |
| Newsletter email and first name | To send the newsletter | Consent |
| Analytics data (only if you accept cookies) | To understand how the website is used | Consent |
| Order and payment records | Accounting and tax obligations | Legal obligation |
How we protect health information
- Questionnaire answers are encrypted when stored and can only be viewed by authorised Body Bespoke staff.
- We never send health information to payment, analytics, advertising or email-marketing providers.
- You can withdraw consent at any time; we then won't be able to continue preparing plans that depend on it.
Who we share data with
We use trusted service providers who process data on our behalf:
- Stripe – payments and subscription billing
- [Hosting provider, e.g. Vercel – to be confirmed] – website hosting
- [Database provider, e.g. Neon – to be confirmed] – secure data storage
- Brevo – transactional emails and, if you subscribe, the newsletter
- Google Analytics and Meta – only if you accept the relevant cookies
- WhatsApp (Meta) – if you contact us there
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or adequacy regulations. [Owner to confirm provider locations – to be confirmed]
How long we keep data
- Questionnaire and health answers: deleted [e.g. 12 months – to be confirmed] after your last plan is delivered, or sooner on request.
- Order and payment records: 6 years, for tax and accounting.
- Contact enquiries: up to 2 years.
- Newsletter data: until you unsubscribe (we keep a minimal record that you unsubscribed so we don't email you again).
Your rights
You can ask to access, correct, delete or receive a copy of your data, object to or restrict how we use it, and withdraw consent. Contact bodybespoketraining@gmail.com. You can also complain to the ICO at ico.org.uk.
Marketing
We only send marketing emails if you've opted in and confirmed your email. Buying a plan does not sign you up. Every marketing email includes an unsubscribe link.
Last updated: 12 October 2026