Privacy Policy
Last updated: 22nd September 2026
This policy explains what personal information Matt Lo Coaching
collects, why, what we do with it, and what you can do about it.
## Who we are
Matt Lo, trading as Matt Lo Coaching, [registered address], is the data
controller for the information described here.
We are registered with the Information Commissioner's Office,
registration number [ICO reference].
Contact: matt@mattlocoaching.com
## What we collect
**If you enquire or book a call:** your name, email address, phone
number if you give it, and whatever you tell us about your situation.
**If you become a client:** the above, plus your health questionnaire,
your training history and any injuries, your height, weight and
measurements, your training logs, your food logs, progress photos if
you choose to send them, and the content of our calls and messages.
Most of this is entered by you into Trainerize or MyFitnessPal rather
than sent to us directly — see "Where your information is kept".
**If you buy The Blood Panel:** your results, and the report written by
the provider's doctor.
**If you join a call:** your name and image on the call, and — for the
recorded monthly group call only — your voice and image in that
recording.
**If you pay us:** your billing name and address, and a record of the
payment. Card details are handled by our payment provider and are never
seen or stored by us.
**If you visit the website:** basic analytics about how the site is
used, through cookies. See "Cookies" below.
## Health information — the important bit
Your health questionnaire, your injuries, your measurements and your
blood results are **special category data** under UK GDPR, which gets a
higher level of protection.
We process it only with **your explicit consent**, which you give when
you complete your health questionnaire, and which you can withdraw at
any time by emailing matt@mattlocoaching.com.
If you withdraw consent, we can't safely continue coaching you, so
withdrawing it will normally mean ending the programme. Clause 11 of
the Terms & Conditions covers what happens then.
## Why we use it, and our legal basis
| What we use it for | Legal basis |
|---|---|
| Delivering your coaching programme | Performance of our contract with you |
| Assessing whether exercise is safe for you | Your explicit consent (special category data) |
| Reviewing your blood panel report to shape your training | Your explicit consent (special category data) |
| Taking payment and keeping accounts | Legal obligation, and our legitimate interests |
| Answering your enquiry | Our legitimate interests in responding to you |
| Sending you the newsletter | Your consent |
| Improving the website | Our legitimate interests, and your consent for non-essential cookies |
## Where your information is kept
**Almost none of it sits with us.** Your coaching records live inside
the platforms we use to deliver the coaching, each with its own
security and its own privacy policy:
- **Trainerize** — the coaching platform. Your programme, your training
logs, your measurements, your check-ins and our messages all live here
- **MyFitnessPal** — your food diary. This is normally **your own
account**, which you choose to share with us so we can read it. You
control that access and you can remove it at any time from within the
app
- **Medichecks** — only if you have bought The Blood Panel. Your
results go to you and to their doctor. We see the report so we can
shape your training
- **Stripe** — takes your payment. We never see or store your card
details
- **Kit** — the newsletter, if you're subscribed
- **Calendly** — booking your calls
- **Our accountant** — payment records, for tax
**What we do hold directly** is small but not nothing: your email
address and our email correspondence, your phone number and our
WhatsApp messages if we use it, and anything you send us directly.
**An important point about responsibility.** Even where your
information sits on someone else's platform rather than ours, we remain
the data controller for it under UK GDPR. That means the duty of care is
ours, not theirs, and every right listed below can be exercised with us
— you don't have to go to Trainerize or anyone else to get an answer.
We don't sell your data, ever. Some of these providers store data
outside the UK; where they do, transfers are covered by the safeguards
required under UK GDPR.
We will also disclose information where the law requires it.
## How long we keep it
- **Enquiries that don't become clients:** 12 months from your last contact
- **Coaching records, including health questionnaires and blood
reports:** 7 years after your programme ends. These are held in
Trainerize; when the period ends, the account is deleted
- **Your MyFitnessPal diary:** it's your account, so it stays yours.
Removing our access ends our side of it immediately
- **Financial records:** 6 years, as HMRC requires
- **Newsletter:** until you unsubscribe
After that we delete or anonymise it.
## Your rights
You have the right to:
- **Ask for a copy** of what we hold about you
- **Correct** anything that's wrong
- **Ask us to delete it**, where we're not required to keep it
- **Withdraw consent** at any time, including for health data and for
the newsletter
- **Object to** or **restrict** how we use it
- **Ask for it in a portable format**
Email matt@mattlocoaching.com and we will respond within one month.
If you're unhappy with how we've handled your information you can
complain to the Information Commissioner's Office at ico.org.uk, or on
0303 123 1113. We'd rather you told us first so we can put it right.
## Keeping it safe
Your records sit inside the platforms above, each of which has its own
security. Our accounts with them are password-protected with two-factor
authentication where the provider offers it, and **only Matt has
access** — there is no team, no assistant and no one else logging in.
Health information is never shared in the group chat, in marketing, or
anywhere else, and no client is ever identified in content without
their written permission.
## Testimonials and photographs
We only use your name, photograph, results or words in marketing if you
have given permission in writing. You can withdraw that permission at
any time and we'll remove it from anywhere we control — though we can't
always pull back something already printed or reshared by someone else.
## Cookies
The website uses essential cookies to work properly, and [analytics
cookies] to understand how the site is used. You can accept or reject
non-essential cookies using the banner, and change your mind at any
time in your browser settings.
## Children
Coaching is for adults. We don't knowingly collect information about
anyone under 18.
## Changes
If this policy changes, the new version goes up here with a new date.
If the change is significant and affects current clients, you'll be
told directly.