Privacy Policy

Last updated: 07/07/2026

This policy explains how Param Hirani trading as ParHFitness ("ParHFitness", "we", "us") collects and uses your personal data, and your rights under UK GDPR. We are the data controller. ICO registration: ZC187090. Contact: parhfitness06@gmail.com.

What we collect

• Contact & account details: name, email, phone, password (encrypted).
• Health & fitness data (special category): body weight, measurements, body-fat, progress photos, and wellbeing indicators (energy, sleep, stress), plus goals and any health notes you share.
• Payment data: processed by Stripe. We do not store your card details.
• Usage data: basic technical data needed to run the app securely.
• Enquiry & application data: if you apply or book a call before becoming a client, we collect the name, email, phone and goals you provide. Lawful basis: our legitimate interest in responding to your enquiry and taking steps toward a possible contract. We keep this only as long as needed to follow up, then delete it if you don't become a client.

Why we use it and our lawful basis

• To deliver your coaching (training/nutrition plans, check-in reviews, messaging). Lawful basis: performance of our contract with you.
• To process your health & fitness data. Lawful basis: your explicit consent, given at sign-up. You can withdraw consent at any time.
• To take payment and keep financial records. Lawful basis: contract and legal obligation.

Who we share it with

We use trusted providers ("processors") who act on our instructions under data processing agreements:

• Supabase (database/auth/storage): data hosted in the EU (Stockholm).
• Vercel (application hosting).
• Stripe (payments).
• Resend (transactional email): sends your application replies, booking confirmations and account emails.
• Zoom (video calls): used to host coaching and strategy calls you book.

We never sell your data or share it for marketing.

International transfers

Your data is stored in the EU. Where any provider processes data outside the UK/EU, it is protected by appropriate safeguards (e.g. UK/EU standard contractual clauses).

How long we keep it

We keep your data for as long as you are a client and for a reasonable period afterwards to meet legal/accounting obligations, then delete or anonymise it.

Security

We protect your data with encryption in transit and at rest, strict per-user access controls, optional two-factor authentication, and access limited to your coach.

Your rights

You can request access, correction, deletion, a copy (portability), restriction, and you can withdraw consent at any time. You can export your check-in data in the app and request account deletion. To exercise any right, email parhfitness06@gmail.com. You may also complain to the ICO (ico.org.uk).

Cookies

We use only essential cookies needed to keep you signed in and secure. We do not use advertising or tracking cookies.

Changes

We may update this policy and will post the new version here with an updated date.