How your information is looked after.

Mama & Me Fitness is run by Steph Sturgeon and is the data controller for the information described in this policy. That means I decide what is collected and what happens to it.

Business

Mama & Me Fitness

Address

67 Holmsley Field Lane, Oulton, Leeds, LS26 8TL

Email

steph@mamaandmefitness.co.uk

Phone

07540 946373

When you fill in a form on this site

• The enquiry form asks for your name, phone number, email address and the service you’re interested in.
• The newsletter sign-up popup asks for your name and email address, which go to Klaviyo, my email provider, so I can send you the emails you’ve asked for.
• The six week programme priority list asks for your email address and your first name and is hosted by my email provider rather than by this website. There’s more on that below.

The enquiry form comes straight to me. Nothing you send is published anywhere on this site.

Before you train with me

Everyone completes a health screening form before starting online coaching or the six week programme. It asks about your pregnancy or birth, any injuries, medical conditions and medication. That is health information, which data protection law treats as a special category and protects more strictly. There’s a section on it below.

While you’re a client

• Payment records. Online coaching is collected by direct debit, and the six week programme is paid for through Stripe. I never see or store your full card or bank details.
• Your check-ins, plus any measurements, weights or progress photos you choose to send me.
• Messages between us, whether email, WhatsApp or the programme group chat.

Automatically, when you visit the site

The company that hosts this site keeps standard server logs, covering the IP address a request came from, the browser used and the page asked for, so the site can be kept running and secure. There is no analytics on this site. If you accept cookies in the banner, Klaviyo (my email provider) sets a cookie so its sign-up popup can work and so it can recognise you on this site if you’re on my mailing list. Decline, and nothing is set at all. The cookie policy sets out exactly what is and isn’t stored on your device.

• To answer your enquiry and work out whether I’m the right fit for you. My lawful basis is my legitimate interest in responding to people who get in touch.
• To deliver the service you’ve booked, manage your sessions and take payment. My lawful basis is performing our contract.
• To train you safely and adapt sessions around your recovery, injuries or condition. My lawful basis is your explicit consent to me using your health information.
• To send you emails about the six week programme and other news, if you asked me to. My lawful basis is your consent, which you can withdraw at any time.
• To keep accounting and insurance records. My lawful basis is a legal obligation, plus my legitimate interest in being able to defend a claim.

I don’t use your information to profile you, to target advertising or to make any automated decisions about you.

The health screening form exists for one reason: so I can keep you safe. I ask for your explicit consent before you complete it, and I only use what you tell me to plan and adapt your training.

It is stored securely and is not shared with anyone else. You can withdraw your consent at any time by emailing me, though I won’t be able to keep training you without it, because I’d be doing so without knowing whether it was safe.

• Enquiries that don’t go any further: deleted within 12 months. If you don’t go on to book a trial session or anything else, I don’t keep what you sent.
• Client records, including health screening: for as long as you’re training with me and then for six years afterwards, which is how long I need them for tax and insurance purposes.
• Mailing list: until you unsubscribe, which you can do from any email I send.
• Server logs: kept for a short period by the hosting provider and then deleted automatically.

Only the services I need to run the business and only with what they need:

• Stripe, which takes payment for the six week programme. You’re on Stripe’s own checkout page when you pay, so your card details go to them and never pass through this website.
• My direct debit provider, for online coaching payments.
• Klaviyo, which runs my mailing list, the newsletter sign-up popup on this site and the six week programme priority list. If you sign up through any of them, the name and email address you give go to Klaviyo, and your opt-in and unsubscribe are recorded there.
• Resend, which delivers the enquiry form to my inbox. What you type into that form passes through them on its way to me.
• My email provider and the company that hosts this website.
• My accountant, plus my insurer if there were ever a claim.

I may also have to share information to comply with the law or to respond to a lawful request from a public authority. Beyond that, nobody else sees it. I don’t sell your information, I don’t swap it and I don’t pass it to advertisers.

This website is hosted by Vercel Inc., which is based in the United States, and some of the other services above also store data outside the UK. Where that happens, the transfer is covered by the safeguards UK data protection law requires, such as the International Data Transfer Agreement or the UK addendum to the EU standard contractual clauses.

You have the right to:

• Ask what information I hold about you and get a copy of it.
• Have anything inaccurate corrected.
• Ask me to delete it or to stop using it in a particular way.
• Withdraw your consent, at any time, where consent is what I’m relying on.
• Ask for a copy of it in a portable format or object to how I’m using it.

To do any of these, email me at steph@mamaandmefitness.co.uk. It costs nothing and I’ll respond within a month.

If you’re not happy with how I’ve handled your information, please tell me first so I can put it right, but you also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

This website and the services on it are intended for adults. I don’t knowingly collect information from anyone under 18. If you mention your baby or your children while we’re working together, I don’t collect anything about them beyond a first name and anything you tell me that affects your training.

I’ll update this policy if how I work changes. The date at the top of the page always tells you when it was last revised.

For anything to do with your information, email steph@mamaandmefitness.co.uk, call 07540 946373 or write to me at 67 Holmsley Field Lane, Oulton, Leeds, LS26 8TL.