Privacy notice
SSS Fit · Last updated: 01/10/2026
This notice explains what personal information I collect when you train with SSS Fit, why, how long I keep it, and your rights.
Who I am
The person responsible for your information (the "data controller") is me, Sanchez Long, trading as SSS Fit.
- Email: [email protected]
- Address: evans house white city w12 7nz
- ICO registration number:
What I collect
| Information | Examples | Where it comes from |
|---|---|---|
| Contact and identity | Name, email, mobile, address, date of birth, emergency contact | You (checklist) and Stripe (when you pay) |
| Health information | PAR-Q answers, injuries, pain reports, medication you mention | You (checklist, injury form, emails, check-ins) |
| Lifestyle and availability | Work pattern, hours, dependents, sleep, stress, steps, goals | You (checklist, check-ins) |
| Training records | Sessions, sets, weights, personal bests, how sessions felt | Your training sheet |
| Body measurements | Weekly bodyweight, recovery scores | Your weekly check-in |
| Photos and videos (optional) | Progress photos, form-check videos | You, only if you consent |
| Messages and calls | WhatsApp messages and voice notes, emails, notes on your sheet, my replies, and what we discuss on video calls (calls are not recorded) | You and me |
| Payments | Amount, dates, payment status, Stripe customer reference | Stripe. I never see or store your card details |
| Enquiries | Name, email, phone number, main goal and any message, if you use the “Get in touch” form before joining | You (website form) |
| Daily Systems sign-ups | Your email address, first name if you give it, and whether you asked for tips and coaching offers (with the date you agreed) | You (Daily Systems page) |
Health information is "special category data" under UK GDPR. I only collect it with your explicit consent, which you give on the first page of the checklist.
Why I use it, and the legal basis
| Purpose | Legal basis |
|---|---|
| Delivering your coaching: programs, check-ins, feedback, messages | Contract (to provide the service you signed up for) |
| Keeping you safe: PAR-Q review, injury alerts, adjusting your program | Explicit consent for health data (UK GDPR Article 9(2)(a)), and contract |
| Progress photos and form-check videos | Consent (optional, you can withdraw at any time) |
| Training and check-in reminder emails, PB congratulation emails | Consent (optional, reply to any of them to stop them) |
| Service messages: your checklist link, "update your card", my replies to you | Contract |
| Taking payments and keeping accounts | Contract and legal obligation (tax records) |
| Replying to your enquiry about coaching | Steps you asked for before a contract, and my legitimate interest in answering you |
| Giving you the Daily Systems guides when you unlock them with your email | Your request (contract), and my legitimate interest in knowing who reads them |
| Sending tips and coaching offers by email, only if you ticked the box | Your consent. Unsubscribe any time with the link in my emails, or by replying |
| Contacting your emergency contact in an emergency | Vital interests |
Recommendations made by a system
When you send your checklist, a simple score of how busy your week is suggests how many days a week to train. I review and approve or change every recommendation myself. Nothing is decided about you automatically.
Who else handles your information
I don't sell or share your information for marketing. I use these trusted services to run SSS Fit. They process data on my behalf, under contracts that protect it:
| Service | What for | Where |
|---|---|---|
| Google (Sheets, Drive, Apps Script, Gmail) | Your training sheet, my records, private photo/video folder, emails | UK/EU/US |
| WhatsApp (Meta) | Messages, voice notes and video calls with me (end-to-end encrypted) | UK/EU/US |
| Stripe | Taking your monthly payment | UK/EU/US |
| n8n | Passing payment events from Stripe to my records | EU (n8n Cloud) |
| Cloudflare (Pages) | Hosting the SSS Fit web pages | UK/EU/US |
Where information goes outside the UK, it's protected by the UK's approved safeguards (the UK-US "data bridge" or approved contract clauses).
Your training sheet is shared only between you and me. Your photo and video folder is private to you and me.
How long I keep it
- Enquiries: if you get in touch but don’t join, your enquiry is deleted automatically after 12 months (sooner if you ask).
- Daily Systems sign-ups: if you only unlocked the guides, your email is deleted automatically after 24 months. If you asked for coaching offers, I keep it until you unsubscribe or ask me to delete it.
- While you're a client: everything above.
- After you leave: I keep your records until I decide they're no longer needed, and I review them at least once a year. My system reminds me. You can ask me to delete them sooner (see your rights below).
- Payment and tax records: as long as UK tax law requires (currently at least 5 years after the 31 January deadline for the tax year they relate to), even if you ask me to delete everything else.
How I keep it safe
- My Google account is private and protected with 2-step verification.
- Your sheet and folder are shared only with your email address.
- Your personal page links contain a private code, so nobody else can send information in your name.
- My SSS Fit (your progress page) needs you to sign in with a 6-digit code emailed to you. After that, a random sign-in key is kept in your browser for 60 days so you don't need a new code every visit. It's strictly necessary for the sign-in to work, isn't used for anything else, and is removed when you press “Sign out”.
- My coach dashboard also needs its own password, on top of my Google sign-in.
- The website sets no tracking cookies. While you fill in the checklist, your answers are held only in that browser tab and are cleared once sent.
Your rights
You can ask me to:
- see the information I hold about you (a copy, free of charge)
- correct anything that's wrong
- delete your information
- restrict or object to how I use it
- give you your information in a portable format (for example a spreadsheet)
- withdraw consent at any time: photos and videos, reminder emails (reply to any of them), or health data. Without health information I can't coach you safely, so withdrawing that consent would mean pausing or ending coaching.
Email [email protected]. I’ll reply within one month.
If you're unhappy with how I've handled your information, please tell me first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Changes
If I change this notice I'll update the date at the top and tell current clients about anything important.