Privacy policy

Startstrong Fitness CIC (Community Interest Company registration number 15060988) is the data controller for personal information collected through this website.

You can contact us at emma@startstrongfitnesscic.com with any questions about this policy or your data.

Startstrong Fitness CIC is registered with the Information Commissioner's Office (ICO), registration reference ZC182020.

Emma Shaw is our named contact for data protection. For any question about your data, contact emma@startstrongfitnesscic.com.

When you use our contact form, we collect the information you provide: your name, email address, enquiry type, message and whether you are a health professional.

When a health or social care professional refers a parent to us, we collect the information entered on our referral form — see “Referrals from professionals” below.

When you book a class through our booking provider (Bookwhen), booking and payment data is handled by that provider according to their own privacy policy.

Our class feedback survey is anonymous by design: it does not ask for or store your name, email address, IP address or any device identifier. We record only the town, how long you have been coming, your four ratings, any comment you choose to write, and the month — deliberately not the date or the time, so that a response cannot be traced back to a particular class. The one free-text box is the comment field, so please do not include your name or anything else that identifies you there. To protect the survey from automated abuse, your IP address is checked briefly in memory when you submit — it is never stored or connected to your answers.

When you visit this website, standard server and analytics data may be collected by our hosting provider (Vercel) — such as IP address, browser type and pages visited.

Our Parent and Carer Needs Survey (run with Families Together Suffolk) is anonymous in the same way as our class feedback: no name, email, IP address or device identifier is stored with your answers, your postcode is reduced to its first half (like IP14) before it is saved, and the month — not the date or time — is recorded. If you choose to leave your name and email at the end so we can tell you about new classes, those details are stored completely separately from your answers and the two are never connected.

A health visitor, midwife, GP, social prescriber or similar professional can refer you to our classes. If that has happened, they will have told you about it and asked your permission first — and this section explains what we then hold about you, because you did not fill anything in yourself and may never have visited this website.

Where the information came from. We did not collect it from you. It came from the professional who referred you, who gave it to us on our referral form. They tell us their own name, job role, organisation and contact details, so that we can reply to them.

What we hold about you. Which of our class locations would suit you, and a short list of reasons the professional ticked — things like cost or childcare being a barrier. Nothing more.

What we deliberately do not ask for. Until 10 August 2026 the form had a free-text box, and professionals often used it to describe a parent's health. We removed it. We do not need that information at the referral stage, and you will complete your own health questionnaire when you book a class — which is where it belongs, given by you rather than about you.

We also do not hold your name or any way of contacting you — no email address, no phone number, no address. Your name is sent to us in the referral email so we recognise you when we reply to the professional, and it is never written into our records. We keep no link between a referral and our class registers.

Who sees it. The two directors of Startstrong Fitness CIC and our administrator. If something about your referral affects how a session should be run, a coach is told that by a person — it does not come from our records, which cannot connect a referral to anyone in the room.

How long we keep it. One year from when we last had contact about the referral, then it is deleted automatically. If you ask us to delete it sooner, we will.

If you would like to know what we hold, have it corrected, or have it deleted, contact emma@startstrongfitnesscic.com. You do not need a reference number — tell us roughly when you were referred and by whom, and we will find it. You can also complain to the Information Commissioner's Office at ico.org.uk, and you do not have to raise it with us first.

One consequence of holding no contact details for you is worth being straightforward about: it means we cannot write to you to tell you any of this. It is why it is published here, and why we ask the professional referring you to pass this page on.

We use contact form submissions to respond to your enquiry — whether that is a class question, professional referral, or partnership request.

We use class feedback to improve our sessions and to report our impact to funders and commissioners. We report totals and percentages — for example, the proportion of parents reporting improved wellbeing — and never an individual response.

We use referral information to contact the referring professional and arrange a suitable class for the parent. Where something about the referral affects how a session should be run, that is passed on by a person, not by the record — our system deliberately stores no link between a referral and a class register.

We do not sell your personal data. We do not use your data for unrelated marketing without your consent.

We process contact form data on the basis of legitimate interest (responding to your enquiry) and, where relevant, consent (when you choose to submit the form).

We process referral information on the basis of consent. The referring professional confirms, when they submit the form, that they have the parent's consent to share their information with us and that they have told the parent about the referral; that confirmation is what we rely on, and we record the wording it was given against. ⚠️ Since 10 August 2026 the form no longer collects free text about a parent, so a referral holds only the locations that suit them and a short list of ticked reasons. A parent can withdraw consent at any time by contacting us, and we will delete the record.

Contact enquiries: one year, then deleted. The year runs from when you stop coming to classes, or from when we last heard from you if you never came.

Referrals: one year, then deleted — or sooner if the parent or the referrer asks us to remove them. The year runs from when we last had contact about the referral.

Emails: we keep enquiry and referral emails for one year, then delete them.

You can ask us to delete your information at any time, and we will. Because our database is backed up daily, a deleted record can take up to seven days to disappear from those backups as well.

Financial records: six years from the end of the financial year they relate to, because company law requires it of us as a community interest company.

Class feedback: kept indefinitely, so that totals covering several years remain available to show funders the difference our classes make over time.

Website analytics and server logs: kept according to our hosting provider's own retention periods, over which we have no control.

Class bookings are held by Bookwhen under their own retention policy, not ours.

Contact and referral forms: Messages from our contact form and referrals from professionals are both stored in our own database, hosted by Supabase in London, and a copy is emailed to us. We do not use a third-party form processor.

Class booking: We use Bookwhen for class bookings. When you book, your data is handled by Bookwhen according to their privacy policy at bookwhen.com/privacy.

Feedback survey: Anonymous survey responses are stored with Supabase, our database provider. No personal data is included in what we store there. See supabase.com/privacy for their policy.

Hosting and analytics: This website is hosted on Vercel, and we use Vercel Analytics and Speed Insights to understand how the site performs. These measure page visits and loading speed in aggregate. They use no cookies, they are not tied to your IP address, and they cannot follow you from one page to the next or on to another website. See vercel.com/legal/privacy-policy for their policy.

Some of the providers above are based outside the United Kingdom, or store data on servers outside it — Vercel and Supabase are US companies.

Where personal data is transferred outside the UK, that transfer relies on the safeguards those providers put in place in their terms, such as UK adequacy regulations or standard contractual clauses with the UK Addendum. You can ask us for more detail about any specific provider.

Under UK GDPR, you have the right to access, correct, or delete your personal data, restrict or object to processing and data portability where applicable. Where we rely on your consent, you can withdraw it at any time.

One practical limit: the feedback survey does not record who submitted a response, so we have no way of finding which one was yours. That means we cannot retrieve, change or delete an individual response — it is the trade-off that keeps the survey anonymous.

To exercise any of these rights, email emma@startstrongfitnesscic.com.

If you are unhappy with how we have handled your personal data, please tell us. Email Emma Shaw at emma@startstrongfitnesscic.com and say what has gone wrong. You do not need to use any particular form of words.

We will acknowledge your complaint within 30 days of receiving it, and often much sooner. We will start looking into it straight away, keep you updated while we do, and tell you what we have found.

If you are not happy with our response — or if you would rather not come to us at all — you can complain to the Information Commissioner's Office. You can reach them at ico.org.uk, on 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. You can go to the ICO directly at any point; you do not have to complain to us first.

Complaining is not the same as asking us for a copy of your data. If you want to know what we hold about you, that is a separate request — just say so and we will treat it that way.

We do not set any cookies on the pages of this site you are reading. There is no cookie banner because there is nothing to consent to.

The tools we use to measure how the site performs — Vercel Analytics and Speed Insights — do not use cookies at all. They count page views and loading speed, and Vercel does not tie that to your IP address or follow you between pages.

There is one exception. The class booking calendar on our classes page is provided by Bookwhen and loads inside our page, so Bookwhen may set its own cookies there.

We do not use advertising or tracking cookies anywhere on this site. You can control cookies through your browser settings.

We may update this policy from time to time. The latest version will always be published on this page.

Last updated: August 2026.