GDPR & your data

Your rights, in plain English

The right to be informed

You’re entitled to know what I do with your data before you give it to me. That’s what the Privacy Policy is for, and why the enquiry form asks you to tick a box rather than assuming.

The right of access

You can ask me for a copy of everything I hold about you. This is called a Subject Access Request. It’s free, and I’ll respond within one month.

The right to rectification

If something I hold about you is wrong or out of date, tell me and I’ll correct it.

The right to erasure

You can ask me to delete your data. I’ll do it, unless I’m legally required to keep it — financial records must be kept for 6 years for HMRC, and training and health records for 7 years for insurance purposes. I’ll always tell you if that applies.

The right to restrict processing

You can ask me to keep your data but stop using it — for example while we sort out a dispute about accuracy.

The right to data portability

You can ask for your data in a common format so you can take it elsewhere — to another coach, for instance.

The right to object

You can object to me using your data where I’ve relied on legitimate interests.

Rights around automated decisions

I don’t use automated decision-making or profiling. Every training plan is written by me, personally.

How to make a request

Email hello@rvlactive.com with what you’d like. You don’t need to use any particular wording or fill in a form. I may ask you to confirm your identity so I don’t hand your data to someone else.

I’ll respond within one month. If your request is unusually complex I may need longer, and I’ll tell you why within that first month.

Withdrawing consent

Where I’ve relied on your consent — for example, the tick box on the enquiry form — you can withdraw it at any time by emailing me. Withdrawing consent doesn’t affect anything done before you withdrew it.

Health and special category data

Information about injuries, illnesses and physical conditions carries extra protection under UK GDPR. I collect it only where it’s needed to train you safely, I ask for your explicit consent, and I keep it separate from general enquiry records. You can ask me to delete it at any point — though if you do, I may not be able to keep coaching you safely, and I’ll be honest with you about that.

Data breaches

If a breach happened that put your rights at risk, I would report it to the Information Commissioner’s Office within 72 hours and tell you directly without undue delay.

Complaints

Please come to me first — most things are quickly sorted. If you’re still unhappy, you can complain to the Information Commissioner’s Office:

• ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

Last updated: August 2026.