Privacy Policy – MR-I-FIT LTD

Last updated: 2 September 2025

MR-I-FIT LTD (“MR-I-FIT”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights when you use our website https://mr-i-fit.co.uk and related services.

Who we are (Data Controller)

MR-I-FIT LTD
Sheffield, United Kingdom
Tel: +44 7472 345166
Email: info@mr-i-fit.co.uk
Website: mr-i-fit.co.uk

Personal data we collect

  • Account & Membership data – name, email, phone, address, login details, chosen packages, booking history.
  • Payment data – processed securely by our payment providers (e.g., Stripe/PayPal via WooCommerce). We do not store full card details on our servers.
  • Health & consultation data (optional) – information you choose to share so we can tailor coaching safely. Treated as confidential special-category data and processed with your explicit consent.
  • Communications – messages sent via contact forms, email, or phone.
  • Usage & technical data – IP address, device/browser data, pages viewed, and actions on the site (for security, analytics, and to improve the service).
  • Comments – if enabled, we collect the data shown in the comment form, plus IP and user-agent for spam prevention. An anonymised hash may be sent to Gravatar to check if you use it.
  • Media uploads – avoid uploading images with embedded location (EXIF) data; visitors could download and extract it.

How and why we use your data (legal bases)

  • To provide services and manage memberships (contract).
  • To process payments and prevent fraud (contract/legitimate interests/legal obligation).
  • To personalise coaching, track progress, and ensure safety (consent for any health data; otherwise contract/legitimate interests).
  • To communicate with you about bookings, updates, and support (contract/legitimate interests).
  • To improve the site and our services using analytics (legitimate interests).
  • To comply with law (legal obligation), e.g., tax and accounting.

Cookies & similar technologies

We use cookies to operate the site (e.g., secure login, cart), remember preferences, and measure performance. You can control cookies in your browser settings. Login cookies typically last 2 days, screen options 1 year. Selecting “Remember Me” keeps login for 2 weeks.

Embedded content

Pages may include embedded content (e.g., YouTube, Instagram, TikTok). Embedded content behaves as if you visited those sites directly and may set cookies or track your interaction according to their privacy policies.

Analytics

We use analytics tools (e.g., Google Analytics/Site Kit) to understand how visitors use the site and to improve performance. These services may set cookies and collect usage data. Data is aggregated and not used to identify you personally.

Who we share data with

  • Payment processors (e.g., Stripe/PayPal via WooCommerce) to take payments securely.
  • Hosting, security, and email providers to run the website and communicate with you.
  • Analytics and anti-spam services (e.g., Google, Akismet/Recaptcha) to keep the site secure and stable.
  • Authorities or legal advisers where required by law or to protect our rights.

We do not sell your personal data.

International transfers

Some providers may process data outside the UK/EEA. Where this occurs, we rely on lawful transfer mechanisms such as adequacy decisions or standard contractual clauses.

How long we keep your data

  • Accounts & membership records: as long as your account is active, then for up to 6 years for legal/accounting purposes.
  • Health/consultation notes: only as long as needed to provide coaching safely or as required by law/insurance.
  • Contact enquiries: up to 12 months unless needed for ongoing support.
  • Comments and metadata: indefinitely (to recognise and follow up automatically).
  • Logs & analytics: typically 14–26 months (service-dependent).

Your rights (UK GDPR)

You have the right to access, rectify, erase, or restrict processing of your personal data; to object to processing; and to data portability in certain cases. You may also withdraw consent at any time (this won’t affect prior lawful processing).

To exercise your rights, contact info@mr-i-fit.co.uk. If you are not satisfied, you can complain to the UK Information Commissioner’s Office (ICO): ico.org.uk.

Data security

We use SSL encryption, secure hosting, access controls, and other reasonable safeguards to protect your information. No method of transmission or storage is 100% secure, but we strive to protect your data to industry standards.

Data breaches

In the unlikely event of a data breach that risks your rights and freedoms, we will notify affected users and, where required, the ICO without undue delay.

Children’s privacy

Our services are not directed to children under 16. If you believe a child has provided us with personal data without parental consent, please contact us to remove it.

Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects. Basic profiling (e.g., segmenting by package type) may be used to tailor communications.

Third-party links

Our site may link to third-party websites. We are not responsible for their content or privacy practices.

Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with the “Last updated” date.

Contact us: info@mr-i-fit.co.uk • +44 7472 345166 • Sheffield, United Kingdom