Legal
How we handle your information
The short version: we collect what we need to coach you safely and run your bookings, we never sell it, and you can ask us what we hold whenever you like.
Who we are
MoveWithElls is [[PLACEHOLDER: your full legal name, for example Ella Smith]], a sole trader trading as MoveWithElls, based at Harrowbottom Road, Lyne, Surrey, GU25 4EB.
Under UK data protection law we are the controller of everything described here, which means we decide what is collected and why. To ask about any of it, email [[PLACEHOLDER: email address]] or call [[PLACEHOLDER: phone number]].
What we collect, and why
Every lawful basis below comes from the UK GDPR. Where it says consent, you can take it back at any time, and nothing else about your training changes because you did.
| What we hold | Why we have it | Our lawful basis |
|---|---|---|
| Your name, email address and message, when you use the form on our contact page | To answer you, and to work out the best way for you to start | Our legitimate interest in replying to people who get in touch, and taking the steps you asked for before any contract |
| Your name, email address, phone number, the sessions and classes you book, whether you came, and what you paid. This lives in Gymcatch | To run bookings, take payment, and keep track of packs and when they expire | Performing our contract with you, and our legal duty to keep financial records |
| Health information you give us: injuries, medical conditions, pregnancy, surgery, anything that changes how you should train | To coach you safely, and to write a programme that suits the body you have today | Your explicit consent. There is a section on this below |
| Your training records: your programme, what you worked on, session notes and weekly reviews | To coach you properly over time, and to pick up where we left off | Performing our contract with you |
| Your marketing choice, and the email address or mobile number it applies to | To send class news and offers, if you want them | Your consent. For people who already train with us, our legitimate interest in telling them about the classes and coaching they already use |
| Photographs and video of you in a class or a session | Marketing, including Instagram, and only where you have agreed | Your consent |
| Website information: the cookie that records your cookie choice, and standard server logs holding your IP address, your browser and the pages you asked for | To remember what you chose, and to keep the site working and secure | Your consent for the choice we store. Our legitimate interest in a site that stays up and is not attacked |
| Emails, texts, and notes of calls between us | To keep track of what was agreed | Our legitimate interest in running the business properly |
We never see your full card details. Payments go through Gymcatch and its payment provider, and what reaches us is the fact that you paid, not the card.
We do not buy information about you from anyone, and we do not build a profile of you. Nothing here is decided by a machine: no automated decision is made about you that has a legal or similar effect.
Health information
Health information gets extra protection in law, and rightly so. We ask for it because coaching someone through a disc injury, or in their second trimester, safely means knowing about it first.
- You give it in the Gymcatch waiver before your first class, and in your first consultation.
- We use it to plan and adapt your training, and for nothing else.
- Only your coach sees it. It is never shown to other clients, and never used for marketing.
- Our basis is your explicit consent, which you give when you complete the waiver or tell us in a consultation.
You can withdraw that consent at any time by telling us, and we will delete what we hold. Be aware that there are things we cannot safely coach without knowing about them, so withdrawing it may change what we are able to offer you.
Marketing, and how to stop it
We only send marketing if you asked for it, or you already train with us and it is about the classes and coaching you already use. It is never sold or passed to anyone else for their own marketing.
Every marketing email has an unsubscribe link. For texts, reply STOP. Or simply tell us, in any way you like, and we will stop. Saying no to marketing has no effect on your bookings, your prices or your training.
Photographs and video
We ask before using a photo or video of you, and you are free to say no. If you agreed once and have changed your mind, tell us: we will stop using it, and take down our own posts where we can. Anything already reshared or saved by somebody else is beyond our reach, which is the honest position rather than a promise we could not keep.
Who else sees your information
These companies handle information for us, on our instructions, so that the business can run:
- Gymcatch, a UK company, for bookings, waivers, class registers and payments.
- Tally, in the EU, for the enquiry form on our contact page.
- Vercel, which hosts this website and keeps its server logs.
- Google Fonts, which serves our typeface. It sets no cookies, but loading it does tell Google your IP address.
- Our accountant, and HMRC, for the financial records the law requires us to keep.
- Our insurer or a legal adviser, but only if a claim or a legal duty ever made that necessary.
Gymcatch and Tally bring suppliers of their own, which our cookie policy lists. Beyond that, nobody else gets your information: we do not sell it, and we do not share it for anyone else's advertising.
Where your information is kept
Most of it stays in the UK or the EU, because that is where Gymcatch and Tally are. Some of the suppliers behind them, such as the error logging both use, run servers in the United States. Where information does leave the UK, it is covered by the safeguards UK law recognises, such as the UK addendum to the standard contractual clauses.
How long we keep it
| What | Kept for |
|---|---|
| An enquiry that never turns into a booking | 12 months |
| Client records, bookings and payment history | 6 years after your last session, which covers our tax records and the window in which a claim could be brought |
| Health information and training notes | 6 years after your last session, for the same reason |
| Your marketing choice | Until you withdraw it. We then keep a note that you said no, so that nobody contacts you again by mistake |
| Photographs and video | Until you withdraw permission |
| The cookie recording your website choice | 6 months |
When a period runs out, the information is deleted, or stripped of anything that identifies you.
Your rights
Over the information we hold about you, you have the right to:
- ask for a copy of it;
- have anything wrong corrected;
- have it deleted;
- ask us to pause what we do with it while something is sorted out;
- object to us using it, including for marketing, which we will always honour;
- receive it in a portable form, or have it sent to someone else;
- withdraw any consent you gave, including for health information, marketing and photographs.
To use any of these, email [[PLACEHOLDER: email address]]. It costs nothing, and we will reply within one month. We may ask you to confirm who you are first, so that we never hand your information to somebody else.
If you are unhappy
Tell us first if you can, and we will try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk or on 0303 123 1113. Coming to us first is not a condition of complaining to them.
Children
MoveWithElls is for adults. We do not knowingly collect information about anyone under 18. If that ever changes, this notice will say so before it does.
Cookies
What this site stores on your device, what loads only once you agree, and how to change your mind, are all in the cookie policy.
Changes to this notice
If what we do with your information changes, this page changes with it, and we will tell clients directly where the change actually matters to them.
Last updated 19 September 2026.