Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains how SHA FITNESS LIMITED collects, uses, stores and protects personal information when you visit the SHA Fitness website or contact us through our website enquiry form.

For the purposes of UK data protection law, SHA FITNESS LIMITED is the data controller responsible for the personal information collected through this website.

Company name: SHA FITNESS LIMITED

Company registration number: 16882584

Registered in: England and Wales

Registered office:
30 Timbermans View
Basildon, Essex
SS16 4UX, United Kingdom

SHA Fitness studio:
43-49 Fowler Road
Hainault, Essex
IG6 3FF, United Kingdom

Email: support@shafitness.co.uk

This Privacy Policy applies only to the SHA Fitness website. The SHA Fitness mobile application has its own separate Privacy Policy and Terms and Conditions, as explained below.

The SHA Fitness website provides information about our fitness coaching, personal training, and related services. The website currently allows visitors to submit a general enquiry form.

The website does not currently provide:

• Customer account registration or login
• Online coaching accounts
• Social-media login
• Public user profiles
• In-app messaging
• Direct collection of workout or nutrition information
• Direct collection of progress photographs
• Direct collection of payment-card details

If any of these features are introduced in the future, we will update this Privacy Policy before using personal information for those purposes.

Information submitted through the enquiry form

When you submit an enquiry, we may collect:

• Your name
• Your email address
• Your telephone number, if requested or provided
• The subject of your enquiry
• The information you enter in the message field
• Your preferred method of contact
• Any other information you voluntarily provide

Please do not include detailed medical information, medical records, diagnoses or other sensitive health information in the general website enquiry form.

If health or medical information is required as part of your coaching or fitness onboarding, it will be collected separately through the appropriate SHA Fitness onboarding process or through the SHA Fitness app.

Communications with us

If you contact us by email or telephone, we may retain:

• Your contact details
• A copy of your message
• Our response
• Relevant follow-up communications
• Notes required to manage your enquiry

Technical and website information

When you use the website, our website-hosting provider and security systems may automatically process limited technical information, including:

• Your IP address
• Browser type and version
• Device type
• Operating system
• Date and time of your visit
• Pages visited
• Referring website
• Website error and security logs

This information is generally used to operate, secure and troubleshoot the website.

Analytics information

Where analytics tools such as Google Analytics are enabled, and where you have provided the required cookie consent, we may collect information about how visitors use the website.

Analytics information may include:

• Pages viewed
• Time spent on the website
• General location based on IP address
• Device and browser information
• How you arrived at the website
• Interactions with website pages

We do not use analytics information to access medical information, fitness records or information held within the SHA Fitness app.

How we use your information

We may use personal information collected through the website to:

• Respond to your enquiry
• Contact you about the services you asked about
• Arrange a consultation or initial discussion
• Provide information about SHA Fitness services
• Manage follow-up communication
• Keep appropriate records of enquiries
• Protect the website against spam, fraud and misuse
• Maintain website security and functionality
• Understand general website usage, where analytics consent has been provided
• Meet legal, regulatory, accounting or insurance requirements
• Establish, exercise or defend legal claims

We will not sell your personal information.

We will not use information submitted through the enquiry form to automatically create a SHA Fitness app account.

Lawful basis for processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Steps before entering into a contract

We may process your information when you ask us about personal training, online coaching, group classes or another SHA Fitness service, and we need to respond before you decide whether to enter into a contract with us.

Legitimate interests

We may process information where it is reasonably necessary for our legitimate business interests, including:

• Responding to general enquiries
• Managing business communications
• Operating and protecting our website
• Preventing spam, fraud and misuse
• Maintaining appropriate business records
• Improving our customer service

We will consider your rights and interests before relying on legitimate interests.

Consent

We may rely on your consent for:

• Non-essential analytics cookies
• Optional marketing emails
• Other processing where we specifically ask for your permission

You can withdraw your consent at any time.

Legal obligation

We may process or retain information where necessary to comply with a legal or regulatory obligation.

UK privacy information must explain the purpose for processing and the lawful basis being relied upon.

Marketing communications

Submitting a general website enquiry does not automatically subscribe you to marketing emails.

We will only send marketing communications where:

• You have clearly agreed to receive them, or
• We are otherwise legally permitted to contact you

You can unsubscribe at any time by:

• Using the unsubscribe link in a marketing email, or
• Emailing support@shafitness.co.uk

We may still send non-marketing messages that are necessary to respond to your enquiry or provide a service you requested.

SHA Fitness mobile application

SHA FITNESS LIMITED also operates the SHA Fitness mobile application.

The app is a separate service and may process additional information, such as:

• Account and profile information
• Fitness goals
• Workout plans and workout records
• Nutrition plans and food logs
• Water-intake records
• Questionnaire responses
• Health and fitness information
• Progress measurements
• Progress and workout photographs
• Trainer and client communications
• App notifications
• Device and technical information

Information collected through the app is governed by the app’s separate legal documents.

Please add the following links when the documents are published:

• SHA Fitness App Privacy Policy: App Privacy Policy
• SHA Fitness App Terms and Conditions: App Terms and Conditions

The website Privacy Policy does not replace or override the app Privacy Policy.

If you submit an enquiry and later become a SHA Fitness client, relevant information from your enquiry may be added to your client record where necessary to arrange or provide the requested service. Any further information collected through the app will be handled under the app Privacy Policy.

We may share personal information with trusted service providers where necessary to operate the website and manage enquiries.

These providers may include:

• Website-hosting providers
• Business email providers
• Website developers and technical-support providers
• Website security and spam-prevention providers
• Analytics providers, where you have consented
• Cloud storage or business administration providers
• Accountants, insurers, solicitors or professional advisers
• Government bodies, regulators, courts or law-enforcement authorities where legally required

Service providers are only permitted to use personal information for the services they provide to us and must protect it appropriately.

We do not make enquiry information publicly available.

Some of our service providers may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include:

• A UK adequacy regulation
• The UK International Data Transfer Agreement
• The UK Addendum to approved standard contractual clauses
• Another safeguard permitted under UK data protection law

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

Website enquiry records will normally be retained for up to 12 months after the last meaningful communication.

We may keep information for longer where:

• You become a SHA Fitness client
• The information forms part of a contractual or customer record
• We are required to retain it for legal, tax, accounting or insurance purposes
• It is required to resolve a complaint or dispute
• It is needed to establish, exercise or defend a legal claim

Technical security logs are retained only for as long as reasonably necessary for website security, investigation and troubleshooting.

Analytics information is retained according to the settings applied to the relevant analytics service.

When information is no longer required, we will delete it, anonymise it or securely dispose of it.

Cookies are small files or similar technologies that websites may store or access on your device.

Strictly necessary cookies

The website may use essential cookies required for:

• Website security
• Spam prevention
• Remembering cookie preferences
• Maintaining website functionality
• Submitting the enquiry form

These technologies may be used where they are necessary for the website to work correctly.

Analytics and non-essential cookies

Analytics, advertising or other non-essential cookies will only be activated after you provide consent through the website’s cookie controls.

You can refuse non-essential cookies without losing access to the basic website.

You can also withdraw or change your cookie choices through the website’s cookie settings or your browser settings.

Under PECR, visitors must be clearly informed about cookies, and consent is normally required for non-essential technologies. Strictly necessary cookies may qualify for an exception.

We use reasonable technical and organisational measures to protect personal information from:

• Unauthorised access
• Accidental loss
• Unlawful disclosure
• Misuse
• Alteration
• Destruction

These measures may include access controls, secure hosting, software updates, password protection and limiting access to people who require the information for legitimate business purposes.

However, no website, internet transmission or electronic-storage system can be guaranteed to be completely secure.

Depending on the circumstances, you may have the right to:

• Ask for confirmation that we process your personal information
• Request a copy of your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your personal information
• Ask us to restrict how your information is used
• Object to certain uses of your information
• Request the transfer of information you provided to another organisation
• Withdraw consent where processing is based on consent
• Complain about how your information has been handled

Some rights are subject to legal conditions and exemptions. For example, we may need to retain certain information where required by law or where it is needed in connection with a legal claim.

The UK GDPR provides rights including access, rectification, erasure, restriction and objection, although not every right applies in every situation.

To exercise your rights, contact:

support@shafitness.co.uk

We may need to verify your identity before responding. We will normally respond within the period required by applicable data protection law.

We do not use information collected through the website enquiry form to make decisions about you solely through automated processing where those decisions produce legal or similarly significant effects.

The website enquiry form is intended for people aged 18 or over.

We do not knowingly ask children to submit personal information through the website.

Where an enquiry relates to someone under the age of 18, their parent or legal guardian should contact us and provide only the information reasonably necessary for the enquiry.

The SHA Fitness app has separate age and eligibility requirements set out in the app Terms and Conditions and Privacy Policy.

The website may contain links to third-party websites, social-media platforms or services that we do not control.

Those organisations are responsible for their own privacy practices. We recommend reviewing their privacy policies before providing them with personal information.

SHA FITNESS LIMITED is not responsible for the privacy practices, security or content of third-party websites.

We may update this Privacy Policy when:

• Our website changes
• We introduce new services or technologies
• Our suppliers or processing activities change
• Legal or regulatory requirements change

The latest version will be published on the website with an updated revision date.

Questions, requests or complaints about this Privacy Policy or how we handle personal information can be sent to:

SHA FITNESS LIMITED
Company Number: 16882584
Registered in England and Wales

Email:
support@shafitness.co.uk

Registered office:
30 Timbermans View
Basildon, Essex
SS16 4UX, United Kingdom

Studio address:
43-49 Fowler Road
Hainault, Essex
IG6 3FF, United Kingdom

Please contact us first if you have concerns about how we use your personal information, so that we have an opportunity to investigate and resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

The ICO provides an online complaint service and a public helpline on 0303 123 1113.