This Privacy Policy explains how Katherine Henshall, a sole trader trading as The Pocket PT Method ("we", "us" or "our") collects, uses, stores and protects your personal information when you use The Pocket PT Method website (thepocketptmethod.co.uk), mobile app and related services (together, the "Service").
We take your privacy seriously and aim to be clear about what information we collect, why we collect it and how we use it.
By using the Service, you acknowledge that your personal information will be handled as described in this Privacy Policy.
The Pocket PT Method is operated by Katherine Henshall, a sole trader trading as The Pocket PT Method, who is the data controller responsible for your personal information.
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at [email protected].
As a sole trader handling personal information, we keep our registration with the Information Commissioner's Office (ICO) and payment of the data protection fee under review, and will register if and when it becomes required.
Depending on how you use the Service, we may collect and process the following types of information.
When you create an account, we may collect information such as:
When you purchase a Pocket Plan, Quick Workout or The Method subscription, we may collect information relating to the transaction, such as:
For purchases made through our website, payments are processed by Stripe. We do not store your full payment card details.
For purchases made through the mobile app, payments may be processed by Apple App Store or Google Play. We may receive information necessary to confirm and manage your purchase or subscription.
If you choose to use features of the Service that involve tracking your progress or activity, we may collect information such as:
The Service may allow you to upload or store progress photos or other content.
Any progress photos or other personal content you choose to upload remain under your control and are treated in accordance with this Privacy Policy.
Progress photos added to your personal progress area are not publicly displayed unless you choose to share them.
If you choose to post content in The Club or another community area, that content may be visible to other members depending on the functionality of the Service.
If you choose to use nutrition-related features, we may process information that you enter into the Service, such as:
You should avoid entering medical information or other sensitive information unless the Service specifically asks for it and provides an appropriate way to do so.
If you enable notifications, our app records a device push token, provided by Expo (our push notification service), so we can send you notifications relevant to your training, such as workout reminders or Club updates. You can turn notifications off at any time in your device settings, which stops further notifications being sent to that device.
If you contact us, we may keep records of your correspondence and any information you provide when contacting us.
If you choose to receive marketing communications, we may collect information about your marketing preferences and interactions with those communications.
We may use your personal information to:
We will not use your personal information for purposes that are incompatible with the purposes described in this Privacy Policy unless we have a lawful basis to do so.
Under UK data protection law, we need a lawful basis for processing your personal information. Depending on the circumstances, we may rely on one or more of the following legal bases:
We may need to process your information to provide the Service you have purchased or requested, including managing your account, providing access to programmes and processing subscriptions.
We may process information where necessary to comply with a legal or regulatory obligation.
We may process information where it is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include maintaining the security of the Service, preventing fraud, improving our products and services and managing our business.
Where required, we may ask for your consent before processing your information, for example for certain marketing activities or the use of certain non-essential cookies or similar technologies.
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew your consent.
Some information relating to fitness, nutrition, injuries, medical conditions or other aspects of your health may constitute special category data under UK data protection law.
The Pocket PT Method is not intended to provide medical advice and we do not require you to provide medical information in order to use the Service.
If you voluntarily provide information that may constitute health or other special category data, we will only process it where we have an appropriate lawful basis and, where required, an additional condition for processing special category data under applicable data protection law.
Where possible, we encourage you not to provide medical or other sensitive information unless it is necessary for a feature you are using.
We do not sell health, fitness or nutrition information to third parties.
We use third-party payment providers to process payments.
Website payments may be processed by Stripe. Stripe may collect and process payment and transaction information in accordance with its own privacy policy. We receive information necessary to confirm and manage your purchase, but we do not store your full payment card details.
Purchases made through Apple's App Store are processed by Apple. Apple may process payment and transaction information in accordance with Apple's privacy policies and terms.
Purchases made through Google Play are processed by Google. Google may process payment and transaction information in accordance with Google's privacy policies and terms.
We may receive information necessary to confirm and manage purchases and subscriptions made through these platforms.
We may use trusted third-party service providers to help us operate the Service. These may include providers involved in:
These providers may process personal information on our behalf where necessary to provide their services.
Our app and website are built on Supabase, which provides our database, user account authentication and file storage (including any progress photos you choose to upload). Our Supabase project is hosted in the UK (London, eu-west-2 region).
We also use Expo's push notification service to deliver in-app notifications (see Section 2), and Stripe to process website payments (see Section 6).
We aim to use appropriate contractual and security measures to protect your information when it is processed by third parties.
We do not sell your personal information to third parties.
We may use cookies, analytics tools and similar technologies on our website and within the Service. These technologies may help us:
Where required by law, we will ask for your consent before using non-essential cookies or similar technologies.
You can control certain cookie preferences through your browser or, where available, through our cookie consent tools.
We may send you marketing communications about The Pocket PT Method, including information about programmes, workouts, promotions, new features and other relevant updates.
Where required by law, we will only send marketing communications where you have provided consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us.
Please note that you may still receive important non-marketing communications relating to your account, purchases, subscriptions or the operation of the Service.
If you use The Club or another community feature, information you choose to post may be visible to other members.
You should think carefully before sharing personal information or photographs in a community area.
You should not share another person's personal information without their permission.
Progress information and photographs stored in your personal account are not intended to be publicly visible unless you choose to share them through a feature that allows sharing.
We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. The length of time we retain information will depend on factors including:
When information is no longer required, we will take reasonable steps to securely delete or anonymise it.
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no online service can be guaranteed to be completely secure.
You are responsible for keeping your account login details confidential and should notify us if you believe your account has been accessed without your permission.
Our core database, authentication and file storage (provided by Supabase, see Section 7) is hosted in the UK.
Some of the other third-party providers we use, such as Stripe, Apple, Google or Expo, may process personal information outside the UK.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your information receives an appropriate level of protection under applicable data protection law. This may include relying on adequacy regulations, appropriate contractual safeguards or another lawful transfer mechanism.
Depending on the circumstances, UK data protection law gives you rights including:
These rights are not absolute and may be subject to legal exceptions.
If you wish to exercise any of these rights, please contact us at [email protected].
We may need to verify your identity before responding to a request.
You can request that your account is deleted by contacting us at [email protected].
Deleting your account may result in the loss of access to your account, progress information, purchased content and other Service features.
Where we are legally required to retain certain information, we may retain that information for the required period even after your account has been deleted.
Deleting your account does not necessarily cancel an active subscription. If you have an active subscription, you must cancel it separately using the applicable cancellation process described in our Terms & Conditions.
The Service is intended for people aged 18 and over.
We do not knowingly collect personal information from anyone under the age of 18 for the purpose of providing the Service.
If you believe that someone under 18 has created an account or provided personal information to us, please contact us so that we can investigate and take appropriate action.
The Service may contain links to websites, services or platforms operated by third parties.
We are not responsible for the privacy practices, content or security of third-party websites or services.
We recommend reading the privacy policy of any third-party service you visit.
We may update this Privacy Policy from time to time to reflect changes to the Service, our business, technology or applicable law.
When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.
Where required by law, we will provide additional notice of significant changes.
If you have a concern about how we have handled your personal information, please contact us first at [email protected].
We will aim to investigate and resolve your concern as soon as reasonably possible.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.
If you have any questions about this Privacy Policy or how we use your personal information, please contact:
This document is a general template and has not been reviewed by a solicitor or data protection professional. Because it covers health/fitness data, payment processing and third-party infrastructure (Supabase, Stripe, Apple, Google, Expo), we recommend having it checked before relying on it, and confirming whether ICO registration applies to your business.