Privacy Policy
This Privacy Policy explains how The Wellness Black Card ("we", "us", "our") collects, uses, and protects information you provide when using this website and our coaching services. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
The Wellness Black Card is operated by Ryan Crockett, a personal coach based in London. For data-related enquiries, contact: ryan@thewellnessblackcard.com
2. Information We Collect
We collect information you provide directly to us, including:
- Name and email address (via contact form or guide download)
- Your stated fitness goals (via contact form)
- Health and body composition data you share during coaching sessions
- Payment information (processed by third-party providers — we do not store card details)
- Your IP address, recorded automatically with each form submission in standard server logs; rate limiting uses a one-way hashed form of the address from which you cannot be identified
- Whether you opted in to occasional emails (an optional tick box on the guide form, unticked by default)
We do not use tracking cookies or third-party advertising pixels. Visitor statistics are measured with Plausible Analytics, a cookieless service that records no personal data and cannot identify individual visitors.
3. How We Use Your Information
Information you provide is used to:
- Respond to your enquiries
- Deliver the guide you requested
- Provide and manage your coaching programme
- Send programme-related communications
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing
We process your data on the basis of:
- Consent — when you tick the optional marketing box on the guide form
- Contract — when you become a coaching client
- Legitimate interests — responding to direct enquiries, delivering the guide you requested, and protecting the site from abuse (rate limiting and bot protection)
5. Data Retention
Enquiry data is retained for 12 months. Client coaching data is retained for the duration of your programme and up to 3 years thereafter, unless you request deletion. Guide-request details are retained for 24 months and then deleted, or sooner on request. Rate-limiting records contain no identifiable data and stop being used one hour after submission. Form submissions stored by our hosting provider are removed manually by us.
5a. Lawful Basis for the Guide and Follow-Up
Sending the guide you requested, and replying to an enquiry, rely on our legitimate interest in responding to people who contact us, and on steps taken at your request before entering a contract. Any further marketing email relies on your consent, given by ticking the optional box on the guide form. You may withdraw that consent at any time by replying to any email or writing to the address below. The guide is yours regardless.
6. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email ryan@thewellnessblackcard.com
7. Third-Party Services
This site uses the following third-party services:
- Cloudflare — website hosting and form processing (cloudflare.com)
- Resend — email delivery of form submissions (resend.com)
- Cloudflare Turnstile — bot protection on forms (cloudflare.com)
- Plausible Analytics — cookieless visitor statistics (plausible.io)
- Calendly — appointment booking (calendly.com)
Each of these services has its own privacy policy. We recommend reviewing them if you have concerns.
8. Security
This site is served over HTTPS with a strict Content Security Policy. Form submissions are validated and rate-limited server-side. We take reasonable precautions to protect data in transit and at rest. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of this site after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions: ryan@thewellnessblackcard.com