Legal
How I handle your information
The short version: I collect what I need to coach you safely and run your bookings, I never sell it, and you can ask me what I hold whenever you like.
Who I am
I am Ella Murphy, a sole trader trading as MoveWithElls, based at Harrow Bottom Road, Lyne, Virginia Water, Surrey, GU25 4EB.
Under UK data protection law I am the controller of everything described here, which means I decide what is collected and why. To ask about any of it, email movewithells@gmail.com or call +44 7915 376941.
What I collect, and why
Every lawful basis below comes from the UK GDPR. Where it says consent, you can take it back at any time, and nothing else about your training changes because you did.
| What I hold | Why I have it | My lawful basis |
|---|---|---|
| Your name, email address and message, when you use the form on my contact page | To answer you, and to work out the best way for you to start | My legitimate interest in replying to people who get in touch, and taking the steps you asked for before any contract |
| Your name, phone number and messages, when you message me on WhatsApp | To answer you, arrange your free consultation, and work out the best way for you to start | My legitimate interest in replying to people who get in touch, and taking the steps you asked for before any contract |
| Your name, email address, phone number, the sessions and classes you book, whether you came, and what you paid. This lives in Gymcatch | To run bookings, take payment, and keep track of packs and when they expire | Performing my contract with you, and my legal duty to keep financial records |
| Health information you give me: injuries, medical conditions, pregnancy, surgery, anything that changes how you should train | To coach you safely, and to write a programme that suits the body you have today | Your explicit consent. There is a section on this below |
| Your training records: your programme, what you worked on, session notes and weekly reviews | To coach you properly over time, and to pick up where we left off | Performing my contract with you |
| Your marketing choice, and the email address or mobile number it applies to | To send class news and offers, if you want them | Your consent. For people who already train with me, my legitimate interest in telling them about the classes and coaching they already use |
| Photographs and video of you in a class or a session | Marketing, including Instagram, and only where you have agreed | Your consent |
| Website information: the cookie that records your cookie choice, and standard server logs holding your IP address, your browser and the pages you asked for | To remember what you chose, and to keep the site working and secure | Your consent for the choice I store. My legitimate interest in a site that stays up and is not attacked |
| Emails, texts, WhatsApp messages, and notes of calls between us | To keep track of what was agreed | My legitimate interest in running the business properly |
I never see your full card details. Payments go through Gymcatch and its payment provider, and what reaches me is the fact that you paid, not the card.
I do not buy information about you from anyone, and I do not build a profile of you. Nothing here is decided by a machine: no automated decision is made about you that has a legal or similar effect.
Health information
Health information gets extra protection in law, and rightly so. I ask for it because coaching someone through a disc injury, or in their second trimester, safely means knowing about it first.
- You give it in the Gymcatch waiver before your first class, in your first consultation, or in a message to me.
- I use it to plan and adapt your training, and for nothing else.
- Only I see it. It is never shown to other clients, and never used for marketing.
- My basis is your explicit consent, which you give when you complete the waiver, or tell me in a consultation or a message.
You can withdraw that consent at any time by telling me, and I will delete what I hold. Be aware that there are things I cannot safely coach without knowing about them, so withdrawing it may change what I am able to offer you.
Marketing, and how to stop it
I only send marketing if you asked for it, or you already train with me and it is about the classes and coaching you already use. It is never sold or passed to anyone else for their own marketing.
Every marketing email has an unsubscribe link. For texts, reply STOP. Or simply tell me, in any way you like, and I will stop. Saying no to marketing has no effect on your bookings, your prices or your training.
Photographs and video
I ask before using a photo or video of you, and you are free to say no. If you agreed once and have changed your mind, tell me: I will stop using it, and take down my own posts where I can. Anything already reshared or saved by somebody else is beyond my reach, which is the honest position rather than a promise I could not keep.
Who else sees your information
These companies handle information for me, on my instructions, so that the business can run:
- Gymcatch, a UK company, for bookings, waivers, class registers and payments.
- Tally, in the EU, for the enquiry form on my contact page.
- Vercel, which hosts this website and keeps its server logs.
- Google Fonts, which serves the site's typeface. It sets no cookies, but loading it does tell Google your IP address.
- My accountant, and HMRC, for the financial records the law requires me to keep.
- My insurer or a legal adviser, but only if a claim or a legal duty ever made that necessary.
If you message me on WhatsApp, WhatsApp (owned by Meta) carries the conversation. Messages are end to end encrypted, so WhatsApp cannot read them, but it does handle your phone number and the details of when we message, under its own privacy policy.
Gymcatch and Tally bring suppliers of their own, which my cookie policy lists. Beyond that, nobody else gets your information: I do not sell it, and I do not share it for anyone else's advertising.
Where your information is kept
Most of it stays in the UK or the EU, because that is where Gymcatch and Tally are. Some of the suppliers behind them, such as the error logging both use, run servers in the United States, and so does WhatsApp. Where information does leave the UK, it is covered by the safeguards UK law recognises, such as the UK addendum to the standard contractual clauses.
How long I keep it
| What | Kept for |
|---|---|
| An enquiry, by the contact form or WhatsApp, that never turns into a booking | 12 months |
| Client records, bookings and payment history | 6 years after your last session, which covers my tax records and the window in which a claim could be brought |
| Health information and training notes | 6 years after your last session, for the same reason |
| Your marketing choice | Until you withdraw it. I then keep a note that you said no, so that nobody contacts you again by mistake |
| Photographs and video | Until you withdraw permission |
| The cookie recording your website choice | 6 months |
When a period runs out, the information is deleted, or stripped of anything that identifies you.
Your rights
Over the information I hold about you, you have the right to:
- ask for a copy of it;
- have anything wrong corrected;
- have it deleted;
- ask me to pause what I do with it while something is sorted out;
- object to me using it, including for marketing, which I will always honour;
- receive it in a portable form, or have it sent to someone else;
- withdraw any consent you gave, including for health information, marketing and photographs.
To use any of these, email movewithells@gmail.com. It costs nothing, and I will reply within one month. I may ask you to confirm who you are first, so that I never hand your information to somebody else.
If you are unhappy
Tell me first if you can, and I will try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk or on 0303 123 1113. Coming to me first is not a condition of complaining to them.
Children
MoveWithElls is for adults. I do not knowingly collect information about anyone under 18. If that ever changes, this notice will say so before it does.
Cookies
What this site stores on your device, what loads only once you agree, and how to change your mind, are all in the cookie policy.
Changes to this notice
If what I do with your information changes, this page changes with it, and I will tell clients directly where the change actually matters to them.
Last updated 18 October 2026.