Privacy, without the small-print games.

1. Who is responsible for your information

Matthew Norrby, trading as MJNFit, is the controller responsible for the personal information described in this policy.

2. Information MJNFit may collect

The information collected depends on how you interact with MJNFit and may include:

• Identity and contact information: your name, email address, telephone number, location and social-media contact details.
• Assessment and coaching information: your goals, age, training history, body measurements, progress photographs, exercise data, nutrition, sleep, stress, recovery, lifestyle demands, injuries, medical conditions and other information you choose to provide.
• Appointment and communication information: consultation bookings, emails, messages, call notes, check-ins, feedback and support requests.
• Transaction information: services purchased, payment status, invoices and related accounting records. Full card details are processed by the payment provider and are not stored by MJNFit.
• Marketing preferences: whether you have asked to receive or stop receiving emails and other communications.
• Technical and usage information: IP address, browser, device, approximate location, pages visited, referring source and interactions with the website, subject to your cookie choices.

3. How information is collected

Information is collected directly from you when you complete an assessment, application, consultation form, purchase, coaching intake, check-in or survey; book a call; email or message MJNFit; or take part in coaching.

Some technical and transaction information is received from service providers used to operate the website and deliver services, such as payment, booking, form, email, analytics and coaching-platform providers.

4. How and why information is used

MJNFit only uses personal information where there is a lawful reason to do so.

If information needed to enter into or perform a coaching contract is not provided, MJNFit may be unable to assess your application or provide the service safely and effectively.

5. Health and other sensitive information

Some assessment and coaching information may reveal health information. Health information is classed as special-category personal data under UK data-protection law.

Where this information is required for an assessment or coaching service, MJNFit will ask for your explicit consent to process it. You may withdraw that consent at any time by emailing [email protected]. Withdrawal does not affect processing already carried out, but it may mean MJNFit can no longer provide a safe or appropriate coaching service.

6. Automated tools and AI-generated reports

Responses submitted through the free Performance Assessment may be processed using automated workflow and artificial-intelligence tools to generate an initial personalised report. The report is intended to provide general coaching insight and is not a medical diagnosis.

MJNFit does not use this process to make decisions that produce legal or similarly significant effects about you without human involvement. You can request clarification or a human review by emailing [email protected].

7. Who information may be shared with

MJNFit does not sell your personal information. Information may be shared with trusted providers only where needed to operate the business and deliver services, including:

• website hosting, security and content-management providers;
• form, assessment and survey providers, including Typeform and Tally;
• appointment scheduling providers, including Calendly;
• payment providers, including Stripe;
• email and marketing providers, including AWeber;
• workflow, report-generation and AI providers, including Zapier and OpenAI;
• client-management, coaching and record-keeping platforms, including Notion and TrueCoach;
• analytics and website-performance providers, including Google and Automattic/Jetpack;
• professional advisers, insurers, accountants, legal advisers, regulators or law-enforcement bodies where reasonably necessary or legally required.

Providers acting on MJNFit's behalf are expected to use information only for the agreed purpose and to protect it appropriately. Some providers may also act as independent controllers for parts of their service, such as payment processing.

8. International transfers

Some service providers may store or process information outside the United Kingdom. Where this involves a restricted transfer, MJNFit will rely on an applicable UK adequacy regulation or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses.

You may contact MJNFit for more information about the safeguard relevant to a particular provider.

9. How long information is kept

Information is kept only for as long as reasonably required for the purpose for which it was collected, including legal, tax, insurance and dispute-resolution requirements. Typical periods are:

• General enquiries and unsuccessful applications: normally up to 24 months after the last meaningful contact.
• Free assessment responses and reports: normally up to 24 months, unless you become a client or request earlier deletion.
• Active coaching records: for the duration of the service and normally three years afterwards; selected consent, safety, complaint or insurance records may be retained for up to seven years where necessary.
• Invoices, payments and tax records: normally six years after the relevant financial year or transaction.
• Marketing records: until you unsubscribe, withdraw consent or there has been no meaningful engagement for 24 months, subject to retaining a minimal suppression record so your opt-out is respected.
• Technical and analytics information: according to the configured retention period and your cookie choices.

Information may be deleted sooner where it is no longer needed, or retained longer where required by law or necessary to establish, exercise or defend legal claims.

10. Security

MJNFit uses reasonable technical and organisational measures designed to protect personal information from accidental loss, unauthorised access, alteration or disclosure. Access is limited to those who need the information for a legitimate business purpose.

No internet or storage system is completely secure. If you believe information relating to you has been compromised, contact MJNFit immediately.

11. Cookies and similar technologies

The website may use essential technologies required for security and functionality, as well as optional analytics or marketing technologies. Non-essential technologies should only be used in accordance with your cookie choices.

Further detail, including the categories used and how to change your preferences, will be provided in the MJNFit Cookie Policy.

12. Marketing communications

You can unsubscribe from marketing emails at any time by using the unsubscribe link in an email or contacting [email protected]. Service messages relating to an active booking, purchase or coaching arrangement are not marketing and may still be sent where necessary.

13. Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;
• ask for inaccurate or incomplete information to be corrected;
• ask for information to be erased;
• ask for processing to be restricted;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format;
• withdraw consent at any time where consent is the basis used;
• raise concerns about automated processing and request human involvement where applicable.

These rights are not absolute and may be subject to legal exceptions. MJNFit may need to verify your identity before responding and will normally respond within one month.

14. Children's information

MJNFit's website and standard coaching services are aimed at adults. MJNFit does not knowingly collect personal information from children through the website. Any service involving someone under 18 must be arranged directly with appropriate parent or guardian involvement and consent.

15. External websites

The website may link to third-party websites and services. Those organisations are responsible for their own privacy practices, and you should review their policies before providing information to them.

16. Changes to this policy

This policy may be updated when MJNFit's services, systems or legal obligations change. The current version will be published on this page with a revised “last updated” date.

17. Contact and complaints

For questions, requests or concerns about personal information, contact:

If you are not satisfied with the response, you have the right to complain to the Information Commissioner's Office. Visit ico.org.uk/make-a-complaint.