Privacy Policy
1. Who We Are
- Data controller: Jon Bell, trading as Jon Bell Health
- Address: Leamington Spa, Warwickshire, United Kingdom
- Email: info@jonbellfitness.co.uk
- ICO Registration Number: [To be inserted on registration]
If you have any questions about how we handle your personal data, contact us at the address above.
2. What Data We Collect
- Contact information: name, email address, telephone number
- Health and lifestyle information: health history, current medical conditions, medications, fitness levels, dietary preferences, blood marker results, health assessment responses
- Programme enquiries: information you share in consultation calls or emails
- Newsletter subscription: name and email address
- Payment information: handled by third-party processors; we do not store card details
- Website analytics: pages visited, time spent on site, device type, browser, general location (collected only with your consent via Google Analytics)
- Cookies: see our Cookie Policy for full details
2c. Special category data
3. How We Use Your Data
Purpose | Lawful basis under UK GDPR |
|---|---|
Providing coaching programmes and services | Contract performance (Art. 6.1b) + Explicit consent for health data (Art. 9.2a) |
Sending the 7-Day Metabolic Reset and free resources | Consent (Art. 6.1a) |
Sending the Jon Bell Health newsletter | Consent (Art. 6.1a) |
Responding to enquiries and contact form submissions | Legitimate interests (Art. 6.1f) |
Improving our website and services | Legitimate interests (Art. 6.1f) — analytics only with consent |
Complying with legal obligations | Legal obligation (Art. 6.1c) |
Maintaining client records during coaching relationship | Contract performance (Art. 6.1b) |
4. How Long We Keep Your Data
Data type | Retention period |
|---|---|
Client programme records | 6 years after end of coaching relationship (standard UK business records requirement) |
Health assessment data | Request that we correct inaccurate or incomplete data. |
Newsletter subscribers | Until unsubscribe. Inactive subscribers may be removed after 24 months |
Contact form enquiries | 12 months or until resolved, whichever is longer |
Website analytics data | Anonymised/aggregated data up to 26 months (standard Google Analytics retention) |
5. Who We Share Your Data With
We do not sell your personal data. We do not share your data with third parties for marketing purposes.
- Email service providers (for newsletter delivery): data is processed under a data processing agreement compliant with UK GDPR
- Google Analytics (website analytics): only with your cookie consent. Google processes data in accordance with their data processing terms
- Payment processors (for programme fees): we use secure third-party processors. We do not store payment card details
- Legal authorities: if required to do so by law, court order, or to protect the legal rights of Jon Bell Health
- Healthcare professionals: only at your explicit request and with your consent
6. Your Rights Under UK GDPR
Right | What this means |
|---|---|
Right of access | Request a copy of the personal data we hold about you (Subject Access Request). We will respond within one calendar month. |
Right to rectification | Request that we correct inaccurate or incomplete data. |
Right to erasure | Request deletion of your personal data, subject to any legal retention obligations. |
Right to restriction | Request that we limit how we use your data in certain circumstances. |
Right to object | Object to processing based on legitimate interests, including direct marketing. |
Right to data portability | Request your data in a structured, commonly used format for transfer to another provider. |
Right to withdraw consent | Where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal. |
7. How We Protect Your Dat
- All data is stored securely. Access is restricted to Jon Bell only.
- Electronic data is stored on password-protected, encrypted platforms.
- We use industry-standard security protocols for email and data transmission.
- In the event of a data breach that is likely to result in risk to individuals, we will notify the ICO within 72 hours and affected individuals without undue delay.
8. Cookies
9. Marketing Communications
We will only send marketing emails to you if you have subscribed to our newsletter or explicitly opted in. Every marketing email includes an unsubscribe link. You can also unsubscribe by emailing info@jonbellfitness.co.uk.