Paul McGowan Fitness & Health

1. Who we are

Paul McGowan Fitness & Health (“we”, “us”, “our”) operates from two gym locations in Derry (Unit 1 & 2, Springtown Industrial Estate, BT48 0LY) and Moville (Shore Front, Ballynally, Co. Donegal). We are the data controller for personal information collected through this website and our services.

For any data-related queries, contact us at paulmcgowanfitness@gmail.com.

2. What data we collect

We collect personal data in the following ways:

Contact form submissions: name, email address, phone number, and any message content you provide.
Free resource downloads: name and email address when you request a free guide.
Programme enquiries: information about the programme you are interested in and your location preference.
Website usage data: limited, aggregate figures such as pages visited and device type, collected by privacy-friendly, cookieless analytics that does not identify you individually (see our Cookie Policy).

3. How we use your data

We use your personal data to:

Respond to your enquiries and provide information about our programmes.
Deliver free resources you have requested.
Send relevant fitness tips, updates, and offers where you have given consent.
Manage your membership or programme participation.
Improve our website and services based on usage patterns.
Comply with legal obligations.

We will never sell your personal data to third parties.

4. Legal basis for processing

We process your personal data on the following legal bases:

Consent: where you have opted in to receive marketing emails.
Legitimate interests: to respond to enquiries and manage our business relationships.
Contractual necessity: to deliver programmes and services you have signed up for.
Legal obligation: where required by applicable law.

5. How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected. Enquiry and free-resource submissions are kept for a minimum of 24 months from the date you contact us, after which they are deleted. You can ask us to erase your data sooner at any time (see Your rights below). Member data is retained for the duration of membership plus 3 years for administrative purposes. Marketing data is retained until you unsubscribe.

6. Your rights

Under UK GDPR and GDPR (for ROI residents), you have the right to:

Access: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate data.
Erasure: request deletion of your data where there is no legitimate reason to continue processing.
Restriction: ask us to limit how we use your data.
Portability: receive your data in a structured, machine-readable format.
Object: object to processing based on legitimate interests.
Withdraw consent: at any time where processing is based on consent.

To exercise any of these rights, email paulmcgowanfitness@gmail.com. We will respond within one month.

7. Processors we use

We use a small number of trusted providers to run this website and respond to you. Each only processes your data to provide its service, under a data-processing agreement and in line with applicable data protection law:

Supabase: secure database that stores your form submission.
Resend: sends us an email notification when you make an enquiry.
Vercel: hosts the website and provides cookieless, aggregate analytics.
Calendly: provides the optional booking calendar on our thank-you pages, loaded only if you choose to.
OpenStreetMap Foundation: provides the optional location maps on our locations page, loaded only if you choose to.

We do not sell your personal data, and we do not use it for advertising.

8. Cookies

We use only the cookies necessary for the site to work. Non-essential cookies, such as the booking calendar and map embeds, stay off until you accept them on the banner shown on your first visit. You can change or withdraw your choice any time using the Cookie settings link in the footer. See our Cookie Policy for the full list and how to manage it.

9. Complaints

If you are based in Northern Ireland or the UK and are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are based in the Republic of Ireland, you may contact the Data Protection Commission at dataprotection.ie.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the website after changes are posted constitutes acceptance of the updated policy.