Privacy notice
How The Workshop collects and uses personal information, in plain English. Last updated 19 October 2026.
Who we are
The Workshop is a strength and conditioning and personal training business in Cobham, Surrey. It is run by THE WORKSHOP FITNESS LTD (company number 17346171, registered in England and Wales), trading as The Workshop Strength and Development. Our registered office is 3 Cold Norton Farm, Ockham Lane, Cobham, Surrey KT11 1LW. We are the "controller" of your personal data. That means we decide how it is used and we are responsible for looking after it.
Questions about your data: email theworkshop01@outlook.com or call 07495 465 232.
What we collect through this website
| Enquiry form | Your name, email, phone (optional), school or club (optional), what your enquiry is about and your message. |
|---|---|
| Call-back form | Your name, phone number and the best time to call. |
| Coach early-access form | Your name, email, business, rough client and coach numbers, your sport and what software you use now. |
| WhatsApp, phone and email | Whatever you choose to send us. WhatsApp is run by Meta under its own privacy policy. |
Please don't put medical details in a website form. We ask health questions properly, with your consent, when you start with us.
What we collect if you train with us
| Contact details | Name, email, phone, and parent or guardian details for under-18s |
|---|---|
| Basic profile | Date of birth, sport, team or squad, position |
| Health information | Health questionnaire (PAR-Q+) answers, injuries, medical conditions and medication you tell us about |
| Screening and testing | Movement screen results, jump, sprint, strength and fitness test results, body measurements |
| Training records | Programmes, sessions, weights and reps, check-ins and coaching notes |
| Photos and video | Technique clips, only if you agree |
| Bookings and payments | Sessions, invoices and payments. Card payments are handled by Stripe. We never see your full card details. |
Why we use it, and the legal reason
| Replying to your enquiry or call-back request | Our legitimate interest in answering you, and taking steps you ask for before an agreement |
|---|---|
| Coaching, programmes, bookings and invoices | Needed for our agreement with you (contract) |
| Health, screening and injury information | Your explicit consent, or a parent's for under-16s. We ask for it separately and you can withdraw it at any time. |
| Photos and video | Your consent, or a parent's. We ask separately for coaching use and for use on this website or social media. |
| Financial records | Legal obligation (tax law) |
| Keeping people safe and passing on safeguarding concerns | Legitimate interests and our safeguarding duties |
| Occasional news and offers | Only if you opt in. You can unsubscribe at any time. |
Children and young people
- For under-16s, a parent or guardian gives consent and is our main contact.
- For 16 and 17-year-olds, we ask for the young person's agreement and a parent's.
- We don't use children's information for marketing or profiling.
- Photos or video of a child only appear on this website or our social media with a parent's written consent. A parent can ask us to take them down at any time, and we will.
Schools and clubs
When we work with a school or club, the school or club usually controls its pupils' or players' data and we act on its instructions. The details are set out in a written agreement with each school or club.
Who we share it with
We never sell your data. We only share it with:
- Suppliers who run our systems, under contracts that protect your data: Netlify (this website and its forms), Microsoft (our email and calendar), Supabase (our coaching software database, stored in London), Stripe (payments), Resend (emails sent by our software) and WhatsApp, if you message us there.
- Your school or club, where we coach you through them and you or your parent have agreed.
- Authorities, where the law requires it or someone is at risk.
Outside the UK
Some of these suppliers are based in the USA. Where your data leaves the UK, it is protected by the UK–US data bridge or the government-approved contract clauses.
How long we keep it
- Enquiries that don't lead to training: deleted within 12 months.
- Clients: while we coach you, then for 3 years after your last session.
- Under-18s: until they turn 21, or 3 years after the last session, whichever is later.
- Invoices and payment records: 6 years, as tax law requires.
- Photos and video: deleted when consent is withdrawn.
How we protect it
Data is encrypted when stored and when sent. Our accounts use two-step login, and only Rob can see client records.
Your rights
You can ask to see a copy of your data, correct it, delete it, restrict or object to how we use it, move it to another provider, or withdraw consent at any time. Parents can do this for younger children. Email theworkshop01@outlook.com and we will reply within one month.
Cookies
This website does not use cookies, analytics or advertising trackers, and it doesn't build a profile of you. Our fonts and images are stored on our own site, so viewing a page doesn't send your details to anyone else. Links to Instagram, WhatsApp and our coaching software take you to those services, which have their own cookie and privacy policies.
Complaints
Please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes
If we change this notice, we will update the date at the top of this page.