top of page

TAGFIT UK – Privacy Notice

Last updated: [19/06/2026]

​

This Privacy Notice explains how TAGFIT UK (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you register with us, purchase a programme or package, attend Training Sessions, or interact with us online.

​

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable privacy laws.

​

1. Who We Are (Data Controller)

TAGFIT UK Owner: Harry Worrow Company Registration Number: 13905787 FiWebsite: www.tagfit.co.uk

We act as the Data Controller, meaning we determine how and why your personal data is processed.

2. What Personal Data We Collect

​

We may collect and process the following categories of personal data:

​

2.1 Identity & Contact Information

  • Name

  • Address

  • Email address

  • Phone number

  • Emergency contact details

​

2.2 Health & Medical Information (Special Category Data)

Collected via your Registration Form or during training:

  • Medical history

  • Injuries

  • Health conditions

  • Medications

  • GP details

  • Form responses

  • Information you disclose verbally or in writing

​

We only collect this information with your explicit consent, as required by UK GDPR.

​

2.3 Payment Information

  • Payment confirmations

  • Direct debit details (processed securely by third‑party payment providers) We do not store full card details.

​

2.4 Training & Progress Information

  • Session attendance

  • Training notes

  • Progress tracking data

  • Measurements (if provided)

  • Fitness assessments

​

2.5 Photography & Videography

If you have consented under our Terms & Conditions:

  • Photos and videos taken during Sessions

  • Images used for progress tracking

  • Images used for marketing or social media

​

2.6 Website & Social Media Data

  • Messages sent via our website or social media

  • Analytics data (cookies, IP address, device information)

​

3. How We Use Your Personal Data

​

We use your data for the following purposes:

3.1 To Provide Personal Training Services

  • Booking and delivering Sessions

  • Creating personalised training programmes

  • Monitoring progress and adapting training

  • Ensuring your safety during exercise

​

3.2 To Comply With Legal Obligations

  • Health and safety requirements

  • Record‑keeping obligations

  • Responding to legal claims

​

3.3 For Business Administration

  • Managing payments

  • Contacting you about Sessions

  • Maintaining accurate records

​

3.4 Marketing & Social Media (Where Consent Applies)

If you have agreed to our Terms & Conditions, you consent to:

  • Use of photos/videos for marketing

  • Use on social media platforms

  • Use on our website and promotional materials

You may withdraw consent at any time (see Section 8).

​

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Contractual necessity – to provide the services you have purchased

  • Explicit consent – for health data and photography

  • Legitimate interests – business administration, service improvement

  • Legal obligation – tax, safety, and regulatory requirements

​

5. How We Store and Protect Your Data

We take appropriate technical and organisational measures to protect your data, including:

  • Secure password‑protected systems

  • Encrypted storage where appropriate

  • Restricted access to health information

  • Secure third‑party payment processors

  • Regular data reviews and deletion schedules

​

6. How Long We Keep Your Data

We retain your data only for as long as necessary:

  • Health & training records: up to 7 years after your last Session (industry standard for liability protection)

  • Progress photos: until consent is withdrawn

  • Financial records: 6 years (legal requirement)

  • General enquiries: 12 months

​

After these periods, data is securely deleted.

​

7. Sharing Your Data

We do not sell your data.

​

We may share your data only with:

  • Payment processors (e.g., Stripe, GoCardless)

  • Email or booking system providers

  • Legal or medical professionals (only with your consent or where legally required)

  • Social media platforms (only for content you have consented to share)

All third parties are required to comply with UK GDPR.

​

8. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Withdraw consent at any time

  • Object to certain processing

  • Request data portability

​

To exercise any of these rights, contact: louise@tagfit.co.uk

​

9. Photography & Social Media Consent

By agreeing to our Terms & Conditions, you consent to the capture and use of photographs and videos as described.

​

You may withdraw consent at any time by emailing us. Withdrawal does not apply to content already published before the date of withdrawal.

​

10. Complaints

If you have concerns about how your data is handled, please contact us first. Email: louise@tagfit.co.uk

You also have the right to complain to the UK Information Commissioner’s Office (ICO): www.ico.org.uk

​

11. Updates to This Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website or provided on request.

bottom of page