Privacy Policy

This privacy policy applies to this website, damospt.com, operated by Damo's Personal Training. It explains how we control, process, handle and protect your personal information when you browse or use this website, including your rights under current UK data protection law. If you do not agree with this policy, please stop using the website.

Key definitions

• "We", "us", "our" refer to the business — Damo's Personal Training, Damo's PT, and damospt.com.
• "You", "the user" refer to the person(s) using this website.
• GDPR means the UK General Data Protection Regulation.
• PECR means the Privacy & Electronic Communications Regulations.
• ICO means the Information Commissioner's Office.
• Cookies are small files stored on a user's computer or device.

Processing of your personal data

Under the GDPR, we control and process personal information about you electronically using the following lawful bases:

If the lawful basis on which we process your personal information changes, we will notify you of the change and any new lawful basis to be used. We shall stop processing your personal information if the lawful basis used is no longer relevant.

Your individual rights

Under the GDPR, your rights are as follows:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• The right not to be subject to automated decision-making, including profiling

You can read more about your rights on the ICO website. You also have the right to complain to the ICO at www.ico.org.uk if you feel there is a problem with the way we are handling your data. We handle subject access requests in accordance with the GDPR.

Cookies

This website does not set any tracking or advertising cookies. Our analytics (see below) works without cookies and without collecting any personal data.

We use your browser's local storage for two small pieces of housekeeping only: remembering your light/dark theme preference, and remembering whether you have already seen our newsletter popup so we don't show it again. Neither is used to identify or track you, and neither is shared with anyone. Third-party services embedded on some pages (such as our booking calendar or payment checkout) may set their own cookies when you use them — see the sections below.

Website analytics

We use Plausible Analytics, a privacy-first analytics service, to understand how the website is used — for example which pages are most popular. Plausible does not use cookies, does not collect or store personal data, and does not track you across other websites. All measurement is aggregated and anonymous, in line with GDPR and PECR requirements.

Payments

When you buy a package or gift card through this website, payment is processed securely by Stripe. Your card details are entered on and handled entirely by Stripe's secure checkout — we never see or store your card information. Stripe shares with us only what we need to fulfil your order: your name, email address, and details of what you purchased. Stripe processes your data in accordance with its own privacy policy.

Contact forms and bookings

When you send us a message via the contact form, the details you submit (name, email address, phone number and your message) are delivered to us through Netlify, the platform that hosts this website. We use this information solely to respond to your enquiry.

If you book a consultation through our online booking page, scheduling is provided by Calendly, which collects the details you enter (such as your name and email address) to create the appointment and processes them under its own privacy policy.

Data security and protection

We protect any personal information we hold by using secure data storage technologies and clear procedures for how we store, access and manage that information. Our methods meet GDPR compliance requirements.

Email marketing

Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing list. Email marketing messages are sent through an Email Marketing Service (EMS) — a third-party software provider that allows us to manage email campaigns to a list of subscribers.

Marketing emails may contain tracking beacons or tracked clickable links that record activity such as opens, clicks, forwards, times, dates, IP addresses, and geographic and demographic data. This activity is used to understand subscriber engagement.

Our EMS provider is MailChimp. We hold the following information about you within our EMS:

• Full name
• Email address
• Telephone number
• Subscription time & date

All marketing emails include an easy unsubscribe link. You can also withdraw consent or update your preferences at any time by contacting us at info@damospt.com.