Privacy Policy
1. Who We Are
Connor Movement is a sole trader personal training and online coaching service operated by Alexander William Connor, based in Wembley, London.
As the data controller for personal data collected through this website and our services, Connor Movement is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.
2. What Data We Collect and Why
We collect different types of personal data depending on how you interact with us. The table below sets out what we collect, why we collect it, and the legal basis under UK GDPR.
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Contact details Name, email, phone number |
To respond to enquiries, send consultation confirmations, and communicate about your coaching | Legitimate interests; contract performance |
| Consultation information Goals, lifestyle, training history |
To design a safe and appropriate training programme tailored to your needs | Contract performance; legitimate interests |
| Health and medical data PAR-Q+ responses, medical conditions, medications |
To assess readiness for exercise, identify contraindications, and ensure safe programming | Explicit consent (special category data under UK GDPR) |
| Training and progress data Session notes, measurements, performance records |
To monitor progress, adjust programmes, and deliver effective coaching | Contract performance; legitimate interests |
| Payment information Transaction records via Stripe |
To process payments for coaching services and maintain financial records | Contract performance; legal obligation |
| Communications Emails, messages via PT Distinction |
To deliver coaching support, respond to queries, and maintain records of coaching advice given | Contract performance; legitimate interests |
| Website usage data Pages visited, device type, browser, approximate location via cookies and analytics |
To understand how visitors use this website and to improve its content and performance | Legitimate interests; consent (where cookies require it) |
| Photography and video footage Training images, technique review clips, progress photographs |
To provide technique feedback, document progress, and (where separately consented) create promotional content | Explicit consent |
Special Category Data
Health and medical information is classified as special category data under UK GDPR and requires a higher standard of protection. We collect this data only with your explicit consent, use it solely for the purpose of delivering safe and effective coaching services, and store it in accordance with the security standards described in Section 5 below.
3. How We Collect Your Data
We collect your personal data through the following channels:
- This website — via the contact form, consultation booking links, and any enquiry forms
- Jotform — via the PAR-Q+, Informed Consent, Client Service Agreement, and Photography & Video Consent forms
- Calendly — when you book a consultation or appointment
- PT Distinction — when you register as a coaching client and engage with the coaching platform
- Stripe — when you make a payment for coaching services
- Direct communication — via email or telephone during consultation and coaching
4. Third Party Platforms and Data Processors
We use a number of third party platforms to deliver our services. Each of these acts as a data processor on our behalf and operates under their own privacy policy and a UK GDPR-compliant data processing agreement.
| Platform | Purpose | Data Shared |
|---|---|---|
| PT Distinction | Online coaching platform — programme delivery, habit tracking, messaging | Name, contact details, training data, health information, communications |
| Stripe | Payment processing and subscription management | Name, email, payment card details, transaction records |
| Jotform | Client intake, consent, and health screening forms | Name, contact details, health and medical data |
| Calendly | Consultation and appointment booking | Name, email, phone number, appointment details |
| Google Workspace | Business email, file storage, and document management | Communications, client documents, stored records |
| Squarespace | Website hosting and analytics | Website usage data, device information |
| Meta (Instagram & Facebook) | Social media presence and promotional content | Publicly shared content only; no client personal data shared without consent |
We do not sell, rent, or share your personal data with any third party for their own marketing purposes. Data is shared with third party platforms only to the extent necessary to deliver the services you have engaged us for.
5. How We Store and Protect Your Data
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure.
- Client intake and consent forms are collected via Jotform, which operates under a signed GDPR-compliant Data Processing Agreement, and transferred to password-protected files within Google Workspace
- Coaching data is stored within PT Distinction, which operates its own security infrastructure and GDPR-compliant data processing agreement
- Payment data is processed and stored by Stripe, which is PCI DSS compliant. Connor Movement does not store payment card details directly
- Business communications and client records are stored within Google Workspace, which operates under a UK GDPR-compliant data processing agreement
- Personal data is not stored on personal devices without encryption and is never transmitted via unsecured channels
6. How Long We Keep Your Data
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Health and medical data (PAR-Q+, consent forms) | 6 years from the date of last training session | Insurance obligations and professional liability |
| Client service agreements and contracts | 6 years from the end of the coaching relationship | HMRC requirements and legal obligation |
| Payment and financial records | 6 years from the date of transaction | HMRC legal requirement |
| Training and coaching records | 6 years from the end of the coaching relationship | Insurance and professional liability |
| Photography and video footage | Duration of coaching unless separate retention consent given; otherwise deleted on request | Consent-based; no retention beyond purpose |
| Website usage and analytics data | Up to 26 months | Standard analytics retention period |
| General enquiry and contact data | 12 months from last contact where no coaching relationship commenced | Legitimate interests; proportionality |
Following the expiry of the relevant retention period, your data will be securely deleted or anonymised so that it can no longer identify you.
7. Cookies and Website Analytics
This website uses cookies — small text files stored on your device — to improve your browsing experience and to help us understand how visitors use the site.
Types of cookies we use:
- Essential cookies — necessary for the website to function correctly. These cannot be disabled.
- Analytics cookies — used to collect anonymised data about how visitors interact with the website, including pages visited, time spent, and device type. This is provided by Squarespace Analytics.
- Third party cookies — our booking and payment providers (Calendly, Stripe) may set their own cookies when you interact with their embedded tools on this site.
Where cookies require your consent under UK law, we will request this via a cookie consent notice when you first visit the site. You can withdraw your consent or manage cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of this website.
8. Your Rights Under UK GDPR
Under UK GDPR you have the following rights in relation to your personal data. You can exercise any of these rights at any time by contacting us at will@connormovement.co.uk. We will respond within 30 days.
You may request a copy of the personal data we hold about you at any time.
You may request that we correct any inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data, subject to our legal retention obligations.
You may request that we limit how we use your personal data in certain circumstances.
You may request your personal data in a structured, commonly used, machine-readable format.
You may object to processing based on legitimate interests, including for direct marketing purposes.
Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
9. Marketing Communications
Connor Movement does not currently operate an email marketing list or newsletter. If this changes in the future, we will only send marketing communications to individuals who have given explicit consent to receive them, and we will always provide a clear and simple means to unsubscribe.
Our social media content on Instagram and Facebook is publicly available and is not targeted at specific individuals based on personal data held by Connor Movement.
10. Children and Young People
Our services are intended for individuals aged 16 and over. We do not knowingly collect personal data from children under the age of 16 without the consent of a parent or legal guardian. If you believe we have inadvertently collected data from a child under 16 without appropriate consent, please contact us immediately at will@connormovement.co.uk and we will take steps to delete it.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or legal requirements. Any material changes will be communicated via a notice on this website. The date at the top of this policy indicates when it was last reviewed.
We encourage you to review this policy periodically. Continued use of this website or our services following an update constitutes acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your rights, or have a concern about how your data has been handled, please contact us: