Lewis Paris FitnessBook a free call

Privacy & cookie policy

Last updated: 31 October 2026

This policy explains what personal information Lewis Paris Fitness collects, why, how long we keep it and your rights. We keep it as short and plain as we can.

1. Who we are

Lewis Paris Fitness Ltd ("Lewis Paris Fitness", "we", "us") is a company registered in England and Wales, company number 11988710. Our registered office is 95 Mortimer Street, London W1W 7GB. We train clients at Engine Room Gym, St Bede's Hall, Albany Street, London NW1 4EE.

We are the controller of your personal information. Lewis Paris is responsible for data protection. Contact him at info@lewisparisfitness.com or on 07463 251942.

2. What we collect, why, and how long we keep it

WhatWhy we use itLawful basisHow long we keep it
Enquiries and bookings: your name, email, phone number and anything you tell us when you book a call through Calendly, use the contact form on our website, or contact us by email, phone, WhatsApp or social mediaTo reply, arrange your free call and recommend the right serviceSteps before a contract, and our legitimate interest in responding to enquiries12 months after our last contact, if you don't become a client
Client details: name, contact details, emergency contact, session history, programme and coaching notesTo deliver your training and manage your accountContract6 years after your last session
Health and fitness information: health questionnaire (PAR-Q), medical conditions, injuries, medication, pregnancy, movement assessment results, body measurementsTo train you safely and build a plan that fits your bodyYour explicit consent, plus contract6 years after your last session. For under-18 clients, until they turn 21 or 6 years after the last session, whichever is later
Progress photosTo show you your progressYour explicit consent (optional)Until you ask us to delete them, or 12 months after your last session
Payments: name, amount, payment status and the last digits of your card or account. We never see or store full card or bank detailsTo take payment and keep accounting recordsContract and legal obligation6 years from the end of the financial year the payment relates to (accounting rules)
Online coaching (Trainerize): workouts, check-ins, form videos, photos, nutrition logs and messagesTo deliver online coachingContract, plus your explicit consent for health informationWe close your Trainerize account within 3 months of coaching ending. Records needed for your client file are kept as above
Corporate clients: contact names, job titles, work emails, invoices and session attendance numbersTo deliver and invoice corporate sessionsContract and legitimate interests6 years after the contract ends
Testimonials, photos, videos and case studiesTo show prospective clients real resultsYour consent (optional)Until you withdraw consent. We remove them from our website and social media within 30 days of you asking
Website use: pages viewed, device and approximate location, through Google AnalyticsTo understand which pages help people and improve the siteYour consent (cookie banner)Up to 14 months

We don't send marketing emails. If that changes, we'll ask for your consent first.

You can withdraw consent at any time by emailing us. If you withdraw consent for us to use your health information, we may not be able to keep training you safely. We'll explain if that's the case.

3. Clients under 18

We only train under-18s with written consent from a parent or guardian. The parent or guardian provides the health questionnaire and contact details, and can use the rights in section 7 on the young person's behalf.

4. Who we share it with

We never sell your personal information. We share it only with the providers that help us run the business, and only what each one needs:

  • Calendly: booking calls and sessions
  • GoCardless: direct debit payments
  • Stripe: card payments
  • Trainerize (ABC Fitness): the online coaching app
  • Google: website analytics (only if you accept cookies), and our email and file storage
  • Lovable: our website builder and host
  • Lovable Cloud: storing website enquiries
  • Our accountant: for invoices and payment records

We may also share information:

  • with emergency services if you're hurt or unwell during a session
  • with our insurers or legal advisers if there's a claim
  • where the law requires it

Engine Room Gym, the private gym where sessions take place, may ask you to complete its own registration. Engine Room Gym is responsible for that information.

5. International transfers

Some of our providers (for example Calendly, Stripe, Trainerize and Google) may store or process information outside the UK, including in the United States. When they do, we rely on the UK's adequacy regulations, including the UK Extension to the EU–US Data Privacy Framework where the provider is certified. Otherwise we rely on contracts approved by the Information Commissioner's Office (ICO), the UK data protection regulator: the International Data Transfer Agreement or the UK Addendum.

6. How we keep it secure

  • Only Lewis can access client records.
  • Accounts are password-protected, with two-step login where the provider offers it.
  • Devices are locked with a passcode.
  • Paper forms are scanned and then shredded.
  • If something goes wrong, we'll tell you and the ICO when the law requires it.

7. Your rights

You can ask us to:

  • give you a copy of your information
  • correct anything that's wrong
  • delete it (unless we must keep it by law)
  • restrict how we use it
  • stop using it where we rely on legitimate interests
  • send it to you or another provider in a usable format
  • stop using it where we rely on consent (withdraw your consent)

We don't make decisions about you using automated processing alone.

Email info@lewisparisfitness.com. It's free, and we'll reply within one month. We may ask you to confirm who you are first.

8. Complaints

If you're unhappy with how we've handled your information, please tell us first at info@lewisparisfitness.com. We'll acknowledge your complaint within 30 days and respond as quickly as we can.

You can also complain to the ICO at ico.org.uk/make-a-complaint or on 0303 123 1113.

9. Cookies

Cookies are small files a website stores on your device.

  • Necessary cookies make the site work and remember your cookie choice. They're always on.
  • Analytics cookies (Google Analytics, named _ga and _ga_ followed by a code) show us which pages people use. They're only set if you click "Accept". They last up to 2 years.
  • Booking calendar: when you use the booking calendar on our Book page, Calendly sets cookies it needs to work. See Calendly's cookie notice.
  • Videos: if you play a YouTube video on our site, YouTube (Google) may set cookies.

You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

10. Changes to this policy

We'll update this page when how we use information changes, and change the date at the top. If a change affects you significantly, we'll tell you directly.