Let’s talk about your privacy
Shred & Sustain Last updated: 2/7/26
This policy explains how we collect, use, and protect your personal data when you visit our website, follow us on social media, enquire about coaching, or become a client. We are committed to handling your data lawfully, transparently, and only for the purposes described here.
Shred & Sustain is operated by Sam Parry-Brown ("we", "us", "our"). We are the data controller for the personal data described in this policy.
Contact: Sampbfitness@gmail.com
Postal address: MPFIT GYM, St Pegs Mill, Thornbeck Mills Lane, Brighouse HD6 4AH
Enquiries and marketing. When you contact us, message us on Instagram, join a waiting list, or sign up to emails, we collect your name, contact details, social media handle, and the content of your messages.
Client onboarding. When you purchase coaching or a training programme, we collect your name, email address, billing details, and the information in your signed agreements and questionnaires.
Health information (special category data). Before you start training with us, we collect health screening information through the Physical Activity Readiness Questionnaire (PAR-Q), and during coaching you may share information about injuries, medical conditions, medication, sleep, stress, and related wellbeing matters. This is special category data under UK GDPR and receives extra protection (see section 4).
Training and progress data. Through our coaching platform we collect training logs, body measurements, progress photos (where you choose to share them), weight records, nutrition information, and habit or check-in data.
Group call data. If you attend our group Zoom calls, we collect your name and email for registration, and calls may be recorded (with notice) so replays can be shared with attendees.
Payment data. Payments are handled by our payment processor ([e.g. Stripe / PayPal]). We do not see or store your full card details; we retain records of transactions (amount, date, product) for accounting purposes.
Website data. Our website may collect technical data such as IP address, browser type, and pages visited, via cookies and similar technologies.
To respond to enquiries and provide pre-sale information — legitimate interests (responding to people who contact us).
To deliver coaching and training programmes — performance of a contract with you.
To screen your readiness for exercise and coach you safely (PAR-Q and health data) — your explicit consent, which you may withdraw at any time. Withdrawing consent may mean we cannot safely continue coaching you.
To take payment and keep accounting records — performance of a contract, and legal obligation (tax and accounting law).
To send marketing emails or messages — your consent, which you can withdraw at any time via the unsubscribe link or by contacting us. We do not send marketing to clients or enquirers who have not opted in.
To run automated messaging flows on Instagram — legitimate interests (responding to and managing conversations at scale). You can leave these flows at any time by messaging us directly.
To improve our services and content — legitimate interests (understanding what our audience and clients find useful).
To establish, exercise, or defend legal claims — legitimate interests, and where health data is involved, the legal claims exemption under UK GDPR.
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we never sell your data.
Because fitness coaching involves your physical health, some of what you share with us is special category data. We only process it with your explicit consent, collected when you complete your PAR-Q and onboarding forms. We limit access to this data to Sam Parry-Brown/ those delivering your coaching, store it within the platforms listed in section 6.
We are proud of what our clients achieve, and we may share your results as part of our marketing. This section explains exactly how that works.
What we may feature. With your consent, we may use: progress and before/after photos; body measurements, weight change, and other progress statistics; written or recorded testimonials; success stories describing your journey, goals, and results; and screenshots of messages or check-ins (with anything sensitive or unrelated removed). Because some of this information relates to your physical health, it is treated as special category data and handled with the protections described in section 4.
Withdrawing consent. You can withdraw your consent at any time by emailing sampbfitness@gmail.com. If you do, we will stop all future use of your content but will only remove it from our website, active advertising, and our own social media posts within 30 days should you request it removed via email. Please note that content already shared publicly may have been seen, saved, or re-shared by others before removal, and printed or previously distributed materials cannot be recalled — but we will make all reasonable efforts to remove it from everything within our control.
How long we keep marketing consent records. We keep a record of your consent (and any withdrawal) for as long as we use your content and for a minimum of 6 years afterwards, so we can demonstrate that consent was properly obtained.
We use trusted third-party providers to run the business. They process data on our behalf under contracts that require them to protect it:
Trainerize — coaching platform used to deliver programmes, log training, and store progress and check-in data.
SignWell — electronic signature platform used for agreements and PAR-Q forms.
Zapier — automation tool that transfers data between our systems (for example, sending your signed PAR-Q status to our coaching platform).
ManyChat — Instagram messaging automation for handling DMs and enquiry flows.
Zoom — group coaching calls and recordings.
WhatsApp — client group channel used for coaching communication and service updates (such as check-in schedule changes).
Stripe — payment handling.
Mailchimp — email newsletters and client communications.
WhatsApp group visibility. Our client group channel operates on WhatsApp, which means your phone number and profile name are visible to other members of the group. By joining the group you accept this visibility; if you would prefer not to join, let us know and we will send you service updates individually instead.
We may also share data where required by law, or with professional advisers (such as accountants) under confidentiality obligations.
Some of our providers store or process data outside the UK, including in the United States. Where this happens, transfers are protected by safeguards recognised under UK GDPR, such as the UK–US Data Bridge, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
Enquiries that don't become clients: Until you have unsubscribed or requested this data to be removed.
Client coaching records, including health data: for the duration of coaching and afterwards until you request it removed, in case you return and so we can respond to any issues or claims.
Financial and transaction records: 6 years minimum, as required by UK tax law.
Marketing lists: until you unsubscribe.
Zoom recordings: Forever, as these are used for clients to refer back to as part of the programme.
When data is no longer needed, we delete or anonymise it.
Under UK GDPR you have the right to: access a copy of your personal data; have inaccurate data corrected; have your data erased in certain circumstances; restrict or object to certain processing; data portability for data you provided to us under contract or consent; and withdraw consent at any time where consent is our lawful basis (including for health data and marketing).
To exercise any of these rights, contact us at sampbfitness@gmail.com. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to resolve any concern with you first.
We take reasonable technical and organisational measures to protect your data, including using reputable platforms with encryption in transit, limiting access to client health data, and using strong authentication on business accounts. No system is completely secure, but we review our practices regularly and will notify you and the ICO of any breach where legally required.
Our website uses the following cookies:
Essential Cookies that are required for providing you with features or services that you have requested. For example, certain Cookies enable you to log into secure areas of our Site or Services. Disabling these Cookies may make certain features and services unavailable.
Functionality Cookies. Functional Cookies are used to record your choices and settings regarding our Services, maintain your preferences over time and recognize you when you return to our Services. These Cookies help us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Site and Services such as by collecting information about the number of visitors to the Site, what pages visitors view on our Site and how long visitors are viewing pages on the Site. Performance/Analytical Cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising. For example, Google, Inc. (“Google”) uses cookies in connection with its Google Analytics services. Google’s ability to use and share information collected by Google Analytics about your visits to the Services is subject to the Google Analytics Terms of Use and the Google Privacy Policy. You have the option to opt out of Google’s use of cookies by visiting the Google advertising opt-out page at https://www.google.com/privacy_ads.html or the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout/ .
Retargeting/Advertising Cookies. Retargeting/Advertising Cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you. For more information about this, please see the section below titled “Additional information about interest-based advertisements.”
You can decide whether or not to accept Cookies. One way you can do this is through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your computer. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some Services and functionalities may not work. You can manage cookies through your browser settings.
Our services are for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
We may update this policy from time to time. The latest version will always be available at sampbfitness.podia.com/privacy, and material changes will be communicated to active clients by email.