Privacy Policy

Last updated: March 2026

1. Who We Are

This website is operated by Chloe Mo, trading as Chlo Mo – The Little Gym Rat ("we", "us", "our"). We provide online and in-person personal training and coaching services.

If you have any questions about this policy or how we handle your data, please contact us at: chlomotlgr@outlook.com

2. What Information We Collect

We may collect the following types of personal information:

  • Contact information:your name, email address, and phone number when you submit an enquiry form
  • Health and fitness information:details about your fitness goals, training experience, and relevant health background that you voluntarily share as part of the coaching onboarding process
  • Progress data:measurements, progress photos, and check-in information shared during an active coaching relationship
  • Communication records:messages exchanged via email or messaging platforms in connection with coaching services
  • Payment information:processed securely via third-party payment providers; we do not store card details ourselves

3. How We Use Your Information

We use your personal data solely for the purposes for which it was collected, including:

  • Responding to enquiries and determining whether our services are a good fit for you
  • Delivering personalised coaching programmes and ongoing support
  • Communicating with you about your programme, progress, and any updates
  • Processing payments for coaching services
  • Complying with any legal obligations

We will never sell your personal data to third parties or use it for unsolicited marketing without your consent.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

  • Contract performance:processing necessary to deliver the coaching services you have engaged us for
  • Legitimate interests:responding to enquiries and communicating with prospective clients
  • Consent:where you have actively provided information (e.g. health data) and agreed to its use for coaching purposes
  • Legal obligation:where required by applicable law

5. Health Data

Information about your health, fitness, and body composition is classified as special category data under UK GDPR. We collect and process this data only where you have explicitly provided it for the purpose of receiving personalised coaching. This data is treated with the highest level of confidentiality and is never shared with third parties without your express consent.

6. How We Store Your Data

Your data is stored securely. We use industry-standard practices to protect personal information from unauthorised access, disclosure, or loss. Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Active client data is retained for the duration of the coaching relationship. Following the end of a coaching arrangement, basic records may be retained for up to 3 years for legitimate business purposes, after which they are securely deleted.

7. Sharing Your Data

We do not sell, trade, or rent your personal data. We may share data in the following limited circumstances:

  • Service providers:third-party tools used to deliver coaching (e.g. training apps, payment processors), who are bound by their own privacy policies and data protection obligations
  • Legal requirements:where we are required to disclose information by law or a regulatory authority

8. Cookies and Website Analytics

This website may use basic analytics tools to understand how visitors use the site (e.g. which pages are visited, where traffic comes from). This data is aggregated and anonymous. No personally identifiable information is collected through analytics.

You can disable cookies via your browser settings. Disabling cookies will not affect your ability to use this website.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access:request a copy of the personal data we hold about you
  • Right to rectification:request correction of any inaccurate or incomplete data
  • Right to erasure:request deletion of your data, where no overriding legal obligation exists
  • Right to restriction:request that we limit processing of your data in certain circumstances
  • Right to portability:receive your data in a structured, machine-readable format
  • Right to object:object to processing based on legitimate interests
  • Right to withdraw consent:where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at chlomotlgr@outlook.com. We will respond within 30 days.

10. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, at ico.org.uk. We would, however, appreciate the opportunity to address your concerns before you approach the ICO.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will be revised accordingly. Continued use of our services after any update constitutes acceptance of the revised policy.