Legal

Privacy Policy

Last updated 29 September 2026

This policy explains what personal data James Gonzo Fitness collects, why, and what you can do about it. It is written plainly on purpose.

Who is responsible for your data

James Gornall, trading as James Gonzo Fitness, based in the United Kingdom, is the data controller. You can reach me at info@jamesgonzofitness.com.

What I collect

Your first name and email address — only when you choose to give them, by requesting the free 7-day fat-loss plan, Running Exercises or Couch to 5K Strength, joining a waiting list or making a coaching enquiry.
Training-page coaching enquiries and questionnaires — your name, email, optional training focus, contact agreement, form source and submission reference. If you complete the linked questionnaire, we also collect your goals, routine, preferred support and timing. Enquiries remain in the coaching Google Sheet; enquiry and submitted questionnaire details are stored with Cloudflare and synced to the separate JG Fitness HubSpot account to manage your enquiry. This does not subscribe you to a newsletter. Please do not include medical information in this questionnaire.
Questionnaire access — your personalised link opens a secure, essential session cookie lasting up to eight hours. It is used only to associate your submitted answers with your enquiry, not for advertising. Answers are saved when you press the final submit button, not at each step.
January coaching requests — your coaching focus, free waiting-list or deposit-enquiry choice, contact agreement, optional marketing choice and a submission reference. A deposit enquiry is not a payment record.
Basic technical data — IP address, browser type and request logs, processed automatically by my hosting provider to keep the site working and secure.

I do not run advertising pixels. With your explicit opt-in, I use Google Analytics for aggregated page activity on public marketing pages only. It is not loaded until you accept, does not collect form entries, free text, health information, advertising data, or URL query/hash details, and Google advertising signals are disabled. You can reject it with the same prominence as acceptance, or withdraw it at any time using the Privacy settings control.

Why I collect it, and my lawful basis

To send you the free guide and follow-up emails — your consent, given when you submit the form. You can withdraw it at any time.
To respond to January coaching requests — to take steps at your request before a possible coaching agreement. Free waiting-list availability updates are sent with your specific consent; you can ask us to stop.
To respond to coaching enquiries — to take steps at your request before a possible coaching agreement, including a confirmation and personal follow-up. You can ask me to stop contact at any time. Submitting an enquiry does not opt you into marketing.
Optional fitness tips and offers — only if you tick the separate, optional marketing box. Declining marketing does not prevent signup or checkout. Reply to any email to unsubscribe.
To keep the site running and secure — my legitimate interests in protecting the site from abuse.

Running Exercises: free email access

Your first name, email, guide-contact agreement and submission reference are saved in the existing subscriber Google Sheet with source running-exercises and marketing consent set to no. This is not a newsletter signup. With your agreement, AgentMail sends your private access link and any contact specifically about the guide; James receives a signup notification. You can withdraw contact consent by replying or emailing James.

A signed link grants access for 90 days. Keep it private: anyone with the link can use it. Opening it sets a strictly necessary, secure access cookie for up to 30 days, scoped to the running resource. Exercise completion checkboxes are saved locally in your browser, not sent to us. Short-lived hashed email/IP keys help prevent repeated submissions; submission receipts last up to 24 hours. Original demo links leave this website for Facebook, whose privacy policy then applies.

Couch to 5K Strength: free email access

Your first name, email, guide-contact agreement and submission reference are saved in the existing subscriber Google Sheet with source couch-to-5k-strength and marketing consent set to no. This is not a newsletter signup. With your agreement, AgentMail sends your private access link and any contact specifically about the guide; James receives a signup notification. You can withdraw contact consent by replying or emailing James.

A signed link grants access for 90 days. Keep it private: anyone with the link can use it. Opening it sets a strictly necessary, secure access cookie for up to 30 days, scoped to this resource. Exercise completion ticks are saved locally in your browser, not sent to us. Short-lived hashed email/IP keys help prevent repeated submissions; submission receipts last up to 24 hours. Exercise video links leave this website for YouTube, whose privacy policy then applies.

Who I share it with

Only the services needed to run the site and deliver your emails, acting as processors on my behalf:

Google — subscriber details are stored in Google Sheets.
AgentMail — sends the guide and any follow-up emails.
Cloudflare — hosts the site and handles security.

I never sell your data, and I never pass it to advertisers. If you click an affiliate link on my kit page you leave this site and the destination retailer's own privacy policy applies.

Where your data is processed

These providers may process data outside the UK. Where they do, the transfer is covered by appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

How long I keep it

Until you unsubscribe or ask me to delete it, whichever comes first. Unsubscribing removes you from the mailing list; asking for deletion removes your record entirely.

Your rights

Under UK GDPR you have the right to access your data, correct it, delete it, restrict or object to its use, receive a portable copy, and withdraw consent at any time. To use any of these, email me and I will action it without fuss.

If you think I have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. I would rather you told me first so I can put it right.

Cookies

This site sets no tracking or advertising cookies. Cloudflare may set a strictly necessary cookie to identify trusted traffic and block malicious requests.

Children

This site and its content are intended for adults. I do not knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes, the date at the top changes with it. Material changes affecting how I use your data will be emailed to subscribers.