Privacy Policy

Last updated: 29/05/2026

GMCFIT ("we", "us", "our") is committed to protecting your privacy. We collect as little personal data as possible: a short health questionnaire so we can coach you safely, and the details needed to arrange sessions and invoice you. We keep no training notes, session recordings, or written programs. This policy explains what data we handle, how we use it, who we share it with, and the rights you have. It applies to visitors to gmcfit.com and to clients of our online coaching services.

1. Who we are (Data Controller)

GMCFIT is operated by Gary Collins (GMCFIT), a sole trader based in, France. For any privacy question, or to exercise your rights, contact us at gary.collins@gmcfit.com.

2. What we collect

We keep our data handling deliberately minimal:

  • Identity and contact details: name, email address, phone number, and country of residence, so we can arrange and deliver sessions.

  • Billing data: held within our accounting software (Xero) to issue invoices and meet our legal accounting obligations. Payments are made by card (processed by Stripe, which does not give us your full card details) or by bank transfer.

  • Health information: before you begin, we ask you to complete a short health questionnaire (a PAR-Q), which we keep securely so that we can coach you safely. This is special-category health data, which we process only with your explicit consent. Aside from this questionnaire, we keep no training notes, progress logs, or written programs, and sessions are not recorded.

  • Technical data: IP address, device and browser information, and cookies when you use our website.

3. Why we use it, and our legal bases (GDPR)

  • To arrange and deliver live coaching sessions and fulfil our agreement with you (performance of a contract).

  • To issue invoices and keep accounting records (legal obligation and contract).

  • To coach you safely based on the health information you provide (your explicit consent, which you may withdraw at any time).

  • To respond to enquiries and to run and improve our website (legitimate interests).

4. Who we share it with

We share data only with the service providers who help us operate, namely: live video calls (Zoom), card payment processing (Stripe), invoicing and accounting (Xero), the service used to collect your health questionnaire (Web3Forms), and website and form hosting (Squarespace and Cloudflare). They act on our instructions under their data-processing terms. We never sell your personal data.

5. International transfers

Some of our providers are based outside the EU and UK, including in the United States. Where your data is transferred internationally, we rely on appropriate safeguards, such as the EU Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

We keep your health questionnaire securely for the duration of our coaching relationship, and delete it within 12 months of our last session. We keep no training notes, progress logs, or session recordings. Identity and billing data held in Xero is retained as required by law. In France, accounting documents and invoices are generally kept for up to 10 years. Enquiry correspondence is kept only as long as needed to deal with your request.

7. Your rights

Depending on where you live, you have the right to access, correct, delete, restrict, or object to our use of your data, to receive it in a portable format, and to withdraw consent at any time. To exercise any of these rights, contact gary.collins@gmcfit.com. If you are in the EU or France, you may also lodge a complaint with the CNIL (cnil.fr); if you are in the UK, with the ICO (ico.org.uk).

8. California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request that we delete or correct it, and to be free from discrimination for exercising these rights. We do not sell or "share" your personal information as those terms are defined under California law. Submit requests to gary.collins@gmcfit.com.

9. Cookies

Our website uses cookies necessary for it to function and, where you consent, analytics cookies that help us understand how the site is used. You can manage cookies through your browser settings.

10. Security

We use appropriate technical and organisational measures to protect your data, and we limit what we collect and keep. No method of transmission over the internet is completely secure, but we take reasonable steps to keep your information safe.

11. Children

Our services are intended for adults aged 18 or over. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a revised "last updated" date.

13. Contact

Gary Collins, GMCFIT. Email: gary.collins@gmcfit.com.