Version template-2026-11-02 · published 2 November 2026
Privacy Policy
Draft for legal review. Not yet in force. Bracketed items must be completed before publication.
This policy explains how Javier ("we", "us") collects and uses your personal information when you are a member of our studio, use our app, or visit https://javier.trainerlane.com.
Note for studios: you may edit sections 1 to 12 to suit your business, and you must complete every bracketed item. The section headed "Platform clauses (required)" must stay in your published policy, unchanged in substance. This template is a starting point, not legal advice.
1. Who we are
1.1 Javier is the controller of your personal information: we decide how and why it is used.
1.2 Contact us about privacy at [STUDIO TO COMPLETE: contact email]. [STUDIO TO COMPLETE: postal address, and company details if you are a company.]
2. Our app provider, TrainerLane
2.1 Our app, member portal and website are provided using software from TrainerLane. TrainerLane processes your information on our behalf, as our processor, under a data processing agreement, and only on our instructions.
2.2 TrainerLane uses its own service providers (sub-processors) for hosting, storage, email and video, listed in TrainerLane's privacy policy at trainerlane.com/legal/privacy.
2.3 Your TrainerLane login (email, password and security settings) can be used with other studios on TrainerLane. TrainerLane is responsible for that login information under its own privacy policy.
3. What we collect
| Category | Examples |
|---|---|
| Account | Name, email address, sign-in details |
| Profile | Photo, date of birth, goals, equipment you have |
| Training logs | Workouts completed, sets, reps, weights, program progress |
| Check-ins | Your answers to our regular check-in questions |
| Nutrition | Food logs, nutrition plans and targets |
| Body measurements | Weight, measurements and similar numbers you record |
| Progress photos | Photos you upload to track progress — only with your separate consent |
| Health information | Injuries, medical conditions, limitations and health questionnaire answers — only with your separate consent |
| Messages | Messages between you and our coaches |
| Payments | Membership option, subscription status and payment history. Card details are handled by Stripe, not stored by us |
| App and device | Device type, app version, and logs needed to keep the app working and secure |
| Acceptance records | Which version of our terms, this policy and each consent you accepted, and when |
[STUDIO TO COMPLETE: add anything else you collect, e.g. in-person session attendance.]
4. Health information and progress photos
4.1 Health information is special category data. We only hold it, and your progress photos, with your explicit consent, which you give separately for each in the app. The consent tells you which version you agreed to.
4.2 You can withdraw either consent at any time in the app [STUDIO TO COMPLETE: describe where, e.g. Settings > Privacy]. Withdrawing permanently deletes the related information. Once you withdraw health consent, our staff can no longer record health information about you.
4.3 We use health information only to coach you safely — for example, to check your program against your injuries. It is never sent to AI tools, shown on public pages, or included in emails or notifications.
4.4 If you tell a coach about an injury in person, they may record it so they can coach you safely; the app shows you everything recorded about you, and you can delete it.
5. Why we use your information
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Providing your membership and coaching | Contract |
| Taking payments and keeping financial records | Contract; legal obligation |
| Messaging you about your membership and training | Contract; legitimate interests |
| Using your health information to coach you safely | Explicit consent (Art. 9(2)(a)) |
| Holding your progress photos | Consent |
| Keeping records of what you agreed to | Legitimate interests (showing what was agreed) |
| Keeping the app secure and improving our services | Legitimate interests |
| Sending you marketing | Consent, which you can withdraw at any time [STUDIO TO COMPLETE: delete if you do not send marketing] |
| Meeting legal requirements | Legal obligation |
6. Who we share it with
6.1 Our staff — our coaches and team can see your member record, including health information, so they can coach you.
6.2 TrainerLane and its sub-processors, who provide our app (see section 2).
6.3 Stripe, which processes your payments for us.
6.4 Others where required — professional advisers, insurers, or authorities when the law requires it.
6.5 [STUDIO TO COMPLETE: any other recipients, e.g. your accountant or marketing tools.]
6.6 We do not sell your personal information.
7. International transfers
TrainerLane and its sub-processors may process your information outside the UK and EEA, including in the United States. Where they do, legally recognised safeguards such as Standard Contractual Clauses, the UK International Data Transfer Addendum, or adequacy decisions are used.
8. How long we keep it
| Information | How long |
|---|---|
| Member record | While you are a member, and [STUDIO TO COMPLETE: e.g. 12 months] after your membership ends, unless you close your account sooner |
| Resolved injuries | Automatically deleted 24 months after they are resolved |
| Health information | Deleted when you withdraw consent or close your account |
| Progress photos | Deleted when you withdraw consent or close your account |
| Payment records | [STUDIO TO COMPLETE: e.g. 6 years, for tax law] |
| Acceptance records | 6 years after your account is closed, as evidence of what you agreed to |
9. Your rights
9.1 UK and EU. You have the right to access, correct and delete your information, to restrict or object to its use, to receive a portable copy, and to withdraw consent at any time. You can complain to the Information Commissioner's Office (ico.org.uk) in the UK, or your local data protection authority in the EU.
9.2 US states. Depending on where you live, you may have rights to know, access, correct and delete your information, to obtain a copy, and to opt out of sale or targeted advertising. Consumer health data laws, such as Washington's My Health My Data Act, give you the right to withdraw consent and have your health data deleted. We will not treat you differently for using your rights.
9.3 How to use them. Much of this you can do yourself in the app: see and export your data, correct it, delete your health information, and close your account. For anything else, email [STUDIO TO COMPLETE: contact email]. We will reply within one month (or 45 days where US law applies).
10. Children
Our services are only for people aged 18 or over. We do not knowingly collect information about anyone under 18.
11. Security
Your information is protected by encryption, access controls and other measures provided by TrainerLane and by us. Please keep your login details safe.
12. Changes to this policy
If we make a material change, we will ask you to accept the new version in the app, as described in the Platform clauses below.
Platform clauses (required)
Studios must keep this section in their published policy.
P1. TrainerLane is our processor. Our app is provided using software from [TRAINERLANE LEGAL ENTITY] ("TrainerLane"). TrainerLane processes your personal information on behalf of Javier, as our processor, under a data processing agreement. TrainerLane's own privacy policy, including its list of sub-processors, is at trainerlane.com/legal/privacy. TrainerLane is responsible, as controller, for your TrainerLane login, which you may also use with other studios. If you send a request about your member record to TrainerLane, TrainerLane will pass it to us.
P2. Health information consent. We only hold information about your health (injuries, medical conditions, limitations and health questionnaire answers) with your separate, explicit consent, given in the app. You can withdraw it at any time in the app, and the information is then permanently deleted. Health information is never sent to AI tools.
P3. Progress photo consent. We only hold progress photos with your separate consent, given in the app. You can withdraw it at any time, and your photos are then permanently deleted.
P4. Closing your account. You can close your account yourself in the app at any time. Closing your account deletes your health information.
P5. Retention of acceptance records. We keep a record of which version of our terms, this policy and each consent you accepted for 6 years after your account is closed, as evidence.
P6. Changes. If we make a material change to this policy, you will have 14 days to accept the new version in the app. After that, you will not be able to add or change anything in the app until you accept, but you can always read, export and delete your data, and close your account.