top of page

Privacy Policy

Fearless Fitness Training Academy Limited

Last updated: 8 August 2026

​

Fearless Fitness Training Academy Limited ("we", "us", "our") takes your privacy seriously. This policy explains what personal data we collect when you use our website, enquire about or book a course, or make a payment to us, why we collect it, who we share it with, and what rights you have.

​

This policy is written to reflect UK GDPR and the Data Protection Act 2018, and how our website and booking systems actually work in practice, including the fact that we use Wix, Stripe and Google Forms as part of delivering our services.

​

1. Who we are

We are Fearless Fitness Training Academy Limited, a company registered in England and Wales under company number 07890814. Our registered office is 5 Birch Way, Heathfield, East Sussex TN21 8BB. We trade as Fearless Fitness Training Academy.

We are registered with the Information Commissioner's Office (ICO) as a data controller, registration reference ZB103458.

For any question about this policy or how we handle your data, contact us at naomi@fearlessfitnesstrainingacademy.com or by post to the address above, marked for the attention of the Data Protection Officer.

​

2. What this policy covers

This policy covers personal data we collect through:

  • our website, www.fearlessfitnesstrainingacademy.com ("our Site"), which is built and hosted on Wix;

  • enquiry and contact forms on our Site;

  • course registration forms, which we currently run through Google Forms;

  • payments, which are processed either through Stripe or through Wix's own payment system, depending on how you book;

  • direct emails, calls or messages between you and us.

If you follow a link from our Site to another website, that site has its own privacy policy and we are not responsible for how it handles your data.

​

3. What personal data we collect

The data we collect depends on how you interact with us. It may include:

Website and enquiries

  • name and contact details (email address, phone number, address);

  • the content of any message you send us through a contact form or by email;

  • technical data collected automatically, such as IP address, browser type, device type, and pages visited, gathered through Wix and any analytics tools in use on the Site (see section 8, Cookies);

Course registration (Google Forms)

  • name, date of birth, address and contact details;

  • emergency contact details;

  • qualifications, professional experience and, where relevant, professional body membership;

  • health and physical readiness information collected through a PAR-Q (Physical Activity Readiness Questionnaire), which we ask for to run our courses and training safely and, where applicable, for insurance purposes. This is "special category" health data under UK GDPR, and we handle it with extra care as set out in section 5;

  • payment and invoicing details relevant to your course booking.

Payments

  • if you pay by card, your card details are entered directly into Stripe's or Wix's secure payment systems. We do not see or store your full card number;

  • we do receive confirmation that payment has been made, the amount, and limited billing details (such as name and billing address) needed for our invoicing and accounts.

​

4. How we use your data and our lawful basis for doing so

We only use your personal data where we have a lawful basis to do so under UK GDPR. Depending on the purpose, this will be one of the following:

  • Contract: to register you for a course, process your payment, and provide the training and support that comes with it;

  • Legal obligation: to meet our obligations to awarding bodies, insurers, HMRC, or other regulators;

  • Legitimate interests: to run and improve our Site, respond to enquiries, keep records for our accounts and insurance, and understand how our courses are performing, in each case only where this does not override your own rights and interests;

  • Consent: for marketing emails you have opted into, and for non-essential cookies (see section 8). You can withdraw this consent at any time.

We use your data to:

  • respond to enquiries and manage the enquiry-to-booking process;

  • register you on a course, process payment, and deliver the training and assessment process that follows it;

  • meet our health and safety and insurance obligations in running practical training;

  • send you information you have asked for about our courses;

  • where you have opted in, send you occasional marketing emails about courses, workshops or news, using Ascend by Wix. Every marketing email includes an unsubscribe link, and you can opt out at any time;

  • keep the financial and course records we are required to keep;

  • understand how people use our Site so we can improve it.

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.

​

5. Special category data (health information)

Where we collect PAR-Q or other health-related information as part of course registration, we only use it to assess whether it is safe for you to take part in practical training, and where relevant, to meet insurance requirements. We do not use this information for any other purpose, and we limit access to it to those who need it to run the course safely. Our lawful basis for processing this data is that it is necessary for reasons of substantial public interest / for the assessment of working capacity, and, where applicable, your explicit consent given when you complete the form.

​

6. Who we share your data with

We share personal data with the following categories of third party, only to the extent needed for them to provide their service to us:

  • Wix.com Ltd, who host our Site and, for some bookings, process payments and registrations directly through Wix's own systems;

  • Stripe, Inc., who process card payments for some course bookings;

  • Google (Google Forms), which we use to collect course registration information;

  • Ascend by Wix, which we use to send marketing emails to people who have opted in;

  • Elfsight and Cloudflare, whose widgets and bot-protection features run on our Site, and Google reCAPTCHA, which helps distinguish real visitors from bots on certain pages;

  • our accountant and, where relevant, awarding bodies (such as YMCA Awards or Active IQ) that need confirmation of your registration to issue qualifications;

  • insurers, where required to provide cover for practical training;

  • any party we are legally required to share data with, for example HMRC, a court, or a regulator.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

​

7. International data transfers

Wix, Stripe and Google are based in, or transfer data to, the United States. Where personal data is transferred outside the UK, we make sure it is protected to a standard that reflects UK GDPR, using one or more of the following safeguards depending on the provider: the UK-US Data Bridge (where the recipient is certified under the EU-US Data Privacy Framework and its UK extension), the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses, or another mechanism recognised under UK data protection law. You can ask us for more information about the specific safeguard used for a particular provider by contacting us using the details in section 1.

​

8. Cookies

Our Site uses a cookie consent tool (Cookiebot/Usercentrics) so you can choose which categories of cookie to accept, other than those that are strictly necessary. Based on our most recent cookie scan (4 August 2026), our Site uses 19 cookies, falling into these categories:

Necessary (17 cookies)

These make the Site work and do not require consent. They include Wix's own session and security cookies (svSession, bSession, XSRF-TOKEN, hs, ssr-caching, fedops.logger.sessionId, client-session-bind, server-session-bind, mpaSessionId, panorama), Cloudflare bot-protection cookies used by our Elfsight widgets (__cf_bm, _cfuvid), Google reCAPTCHA cookies that distinguish humans from bots (rc::a, rc::c), the CookieConsent cookie that remembers your cookie choice, and uc-scanner, part of the cookie scanning tool that keeps this list accurate. panorama and mpaSessionId/client-session-bind/server-session-bind are Wix platform cookies used for site security and keeping your visit working correctly as you move between pages.

​

Statistics (1 cookie)

_wixAB3, set by Wix, is used for split-testing different versions of a page so we can see which works best.

 

Marketing (1 cookie)

elfsight_viewed_recently, set by our Elfsight website widget, remembers which items you have viewed so we can show you related content.

 

You can change your cookie choices at any time through the consent banner on our Site, and separately through your browser settings. Because the tools we use on the Site can change, we recommend checking the cookie consent tool itself for the current, live list of cookies rather than relying solely on this policy.

​

9. How long we keep your data

We keep personal data only for as long as we need it for the purpose it was collected, and to meet our legal, accounting and insurance obligations. As a general guide:

  • course registration, PAR-Q and payment records are kept for as long as required for tax, accounting and insurance purposes, and to support you if you need evidence of your qualification;

  • general enquiries that do not lead to a booking are kept for a reasonable period to allow us to follow up, then deleted;

  • marketing contact details are kept until you unsubscribe or ask us to delete them.

If you would like to know how long we hold a specific piece of your data, contact us and we will confirm.

 

10. How we protect your data

We take appropriate technical and organisational measures to protect personal data, including relying on the security measures built into Wix, Stripe and Google's platforms, restricting access to personal data to those who need it, and limiting the amount of card and health data.

​

11. Your rights

Under UK GDPR, you have the right to:

  • be informed about how we use your personal data;

  • access the personal data we hold about you;

  • have inaccurate or incomplete data corrected;

  • ask us to delete your data ("the right to be forgotten"), subject to our legal and accounting obligations to keep certain records;

  • restrict how we use your data;

  • receive a copy of your data in a portable format;

  • object to us using your data for particular purposes, including direct marketing;

  • withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us at naomi@fearlessfitnesstrainingacademy.com. There is no charge for making a request, and we will respond within one month.

If you are unhappy with how we have handled your data, you can also complain to the Information Commissioner's Office (ICO) at ico.org.uk, or by calling 0303 123 1113.

​

12. Children

Our courses are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

 

13. If our business changes hands

If we sell or transfer all or part of our business, your personal data may be transferred to the new owner, who will only be permitted to use it for the purposes it was originally collected for, under the terms of this policy. Where this affects you, we will let you know in advance.

​

14. Changes to this policy

We may update this policy from time to time, for example if the law changes or if we start using a new tool or supplier that affects how we handle your data. Any changes will be posted on this page, with the "last updated" date at the top revised accordingly.

​

15. Contact us

Email: naomi@fearlessfitnesstrainingacademy.com

Post: Data Protection Officer, Fearless Fitness Training Academy Limited, 5 Birch Way, Heathfield, East Sussex TN21 8BB.

bottom of page