Privacy Policy
Last updated: 16 Jan 2026
Controller
Causeway Fitness Limited, UK. Contact: privacy@causewayfitness.co.uk.
Data we collect
- Contact form: name, email, phone (optional), message, IP address.
- Usage data: pages viewed, device/browser info, approximate location (via truncated IP), cookies/consent choices.
- Account or purchase data (if applicable): login details, order info, payment confirmations via payment processor (we do not store card data).
Purposes and legal bases
- Responding to enquiries: contract or legitimate interest.
- Providing services/accounts: contract.
- Analytics and improvement: legitimate interest; where cookies used, consent.
- Marketing (our own): consent with opt-out anytime.
- Security/fraud prevention and legal compliance: legitimate interest/legal obligation.
Sharing
- Service providers under contract (hosting, analytics, email delivery, payment processors). No selling of personal data.
- Legal, security, or fraud-prevention purposes when required.
International transfers
If transfers occur, they are protected by UK IDTA or EU SCCs with UK Addendum.
Retention
- Contact enquiries: up to 24 months.
- Account/purchase records: retained per tax/legal requirements (typically 6 years in the UK).
- Analytics: up to 25 months or shorter if configured.
Your rights (UK GDPR)
Access, rectification, erasure, restriction, portability, objection, withdraw consent, and the right to complain to the ICO (ico.org.uk).
Security
TLS in transit, least-privilege access, hashed passwords, and no card storage by us.
Children
Not targeted to under 16. We will remove data on notice.
Changes
Updates will be posted with a new date.