1. Data Controller
GH Hadi trading as LockedWithHadi
UK
WhatsApp: 07886 200078
Instagram: @lockedwithhadi
We are the Data Controller for UK GDPR purposes.
2. What We Collect
We collect only what we need to coach you safely:
- Identity & Contact: Full legal name, email, phone, DOB, emergency contact name & phone
- Health Data (Special Category Art.9): PAR-Q answers, medical conditions, injuries, medications, allergies
- Photos & Videos: Progress photos / videos, check-in photos (front / side / back), training videos you send
- Body & Training Data: Weight, measurements, training logs, nutrition adherence, WhatsApp messages
- Signature: Your drawn signature and signed agreement PDF
- Payment Confirmation: We see that you paid via Stripe, but we NEVER see or store card details — handled by Stripe
- Technical: IP, device, time you signed, source (lockedwithhadi.com)
3. Why & Lawful Basis (UK GDPR)
- Contract: To provide 1-1 coaching you pay for (£199 / 4 weeks) — training plan, nutrition, check-ins, WhatsApp support
- Explicit Consent (Art.9(2)(a)): For health data and photos / videos — you tick the GDPR box in agreement. You can withdraw anytime.
- Legitimate Interests: Progress tracking, improving coaching, keeping you safe
- Legal Obligation: Keep records for insurance / HMRC for 6 years
4. How We Store It
- Netlify Forms — encrypted storage, password protected
- WhatsApp — end-to-end encrypted
- Private coach storage — access only by Hadi
- Stripe — payment data held by Stripe (PCI compliant)
- We never sell your data. Only shared if legally required or with Stripe for payments.
5. Photos — Important
Your progress photos / videos are NEVER shared publicly without your separate written consent via WhatsApp. If you agree to be a testimonial, we will ask you separately and you can say no. You can request deletion anytime.
6. How Long We Keep It
6 years after coaching ends for insurance / legal, then deleted. Check-in photos kept during coaching then archived. You can request earlier deletion where legally allowed.
7. Your Rights (UK GDPR)
- Access — ask what data we hold
- Rectification — correct it
- Erasure — request deletion
- Restriction & Objection
- Portability — get your data
- Withdraw consent — for health data & photos, anytime via WhatsApp: 07886 200078
- Complain to ICO: ico.org.uk
8. Cookies & Website
Our site uses minimal cookies. Netlify may use essential cookies for forms. Stripe uses cookies for payments.
9. Security
We use HTTPS, encrypted forms, and private storage. WhatsApp is E2E encrypted.
10. Contact
For any privacy request, message on WhatsApp: 07886 200078 — we reply within 7 days.
By signing our Private Client Agreement you confirm you read this and give explicit consent under UK GDPR Art.9 for health data & photos / videos for coaching.