Privacy Policy

1. Introduction

Powering Through ("we", "us", or "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and share your personal data when you use our website (www.powering-through.com), visit our gym, or interact with our services. We are based at 8 Eckersley Rd, Chelmsford, Essex, CM1 1SL, United Kingdom.

2. Data We Collect

We may collect the following personal data:

• Identity & Contact Data: Name, email address, phone number, and date of birth when you sign up for membership, enquire about services, or purchase from our shop.
• Health & Fitness Data: Information about your fitness goals, medical conditions, or injuries that you voluntarily provide to our coaches or physiotherapists.
• Payment Data: Payment transactions are processed securely via third-party providers (e.g. Stripe, Ashbourne Management). We do not store your full card details.
• Usage Data: Information about how you use our website, including pages visited, time spent, and referring URLs.
• Communication Data: Any correspondence you send to us via email or enquiry forms.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your gym membership
• To provide coaching, physiotherapy, and other booked services
• To process purchases from our shop
• To respond to your enquiries and provide customer support
• To send service-related communications (e.g. booking confirmations, timetable changes)
• To improve our website and services
• To comply with legal obligations

4. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

• Essential Cookies: Required for the website to function properly (e.g. session management).
• Advertising & Measurement Cookies: Set by our advertising partners — Google Ads and Meta (Facebook) — to measure our ads and understand when visitors take actions on our site (such as submitting a booking form). This data covers pages visited and actions taken on the site, and is used to measure and improve our advertising.
• Third-Party Cookies: Set by services we use such as embedded social media content or payment processors.

In the UK and regions where consent is required, advertising and measurement tracking is switched off until you make a choice in our cookie banner. Where required, we keep a record of the choice you made, when you made it, the region it was made in, and the version of this notice shown to you. You can change your choice at any time using the Cookie Settings link at the bottom of every page — your current choice stays in force until you change it. Outside regions where consent is required, these trackers run without a banner; a refusal you record anywhere is still honoured.

5. Legal Basis for Processing (GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your data based on the following lawful bases:

• Contract: Processing necessary to fulfil our membership agreement or service booking with you.
• Legitimate Interest: Processing necessary for our business interests (e.g. improving services), provided it does not override your rights.
• Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g. marketing emails).
• Legal Obligation: Processing necessary to comply with the law.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request restriction of processing in certain circumstances.
• Portability: Request transfer of your data to another service provider.
• Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us using the details below. We will respond within one month.

7. Data Sharing

We may share your data with:

• Ashbourne Management: Our membership management provider.
• Stripe: For secure payment processing.
• Resend: For sending transactional emails (e.g. booking confirmations).
• Google (Google Ads): Receives data about pages visited and actions taken on our site (e.g. a submitted booking form) to measure and improve our advertising. Only enabled where you have consented, or outside regions where consent is required.
• Meta (Facebook Pixel): Receives data about pages visited and on-site actions for advertising measurement, under the same consent rules as above.
• Google: For calendar integrations and analytics.

We do not sell your personal data to third parties. We only share data where necessary to provide our services or where required by law.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. When your data is no longer needed, we will securely delete or anonymise it.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS), secure payment processing, and access controls on our systems.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy, your personal data, or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled unlawfully.