Privacy Notice

Mark Preston Training Ltd, trading as The Second Ascent

Mark Preston Training Ltd is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Company

Mark Preston Training Ltd, trading as The Second Ascent

Contact email

Mark@the-second-ascent.co.uk

Data protection contact

Mark Preston

2. What information we collect

We collect and process the following types of personal information about you:

Personal identification information: name, address, date of birth and contact details (for example, email address and phone number).
Financial information: payment details where necessary. Card payments are handled by our payment provider Stripe, and we do not store your full card details.
Health information: information related to health conditions and medical history, with your explicit consent.
Usage data: information about your interactions with our website or platform, including IP address, browser type and browsing history.

3. How we use your information

We use your personal information for the following purposes:

To provide services and manage your account.
To process payments and deliver products or services.
To communicate with you, including responding to enquiries or providing updates.
To comply with legal obligations and protect our legal rights.
To analyse and improve our services and customer interactions.

4. Legal basis for processing

We process your personal information on the following legal grounds:

Consent: where you have given your explicit consent (for example, for receiving marketing communications).
Contract: where processing is necessary for the performance of a contract with you.
Legal obligation: to comply with applicable laws and regulations.
Legitimate interests: to pursue our legitimate business interests, provided that your interests and fundamental rights do not override those interests.

Health information. We process information about your health and medical history only with your explicit consent, under Article 9(2)(a) of the UK GDPR. We use it to plan training that is safe and suitable for you. You can withdraw this consent at any time, but we may then be unable to train you safely.

5. How we share your information

We may share your information with:

Service providers: third parties who help us provide, improve and maintain our services (for example, IT and payment processing services).
Business partners: with your explicit consent, or as necessary to deliver the service you requested.
Legal authorities: where required by law or in response to valid requests by public authorities.

6. Data retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal obligations, resolve disputes and enforce agreements. When the information is no longer required, we will securely delete or anonymise it.

We keep information for the following periods:

Information

How long we keep it

Client records, including health information

6 years after your last session

Financial and payment records

6 years from the end of the financial year they relate to

Enquiries from people who do not become clients

12 months from your last contact

Marketing contact details

Until you unsubscribe

7. Your data protection rights

You have the following rights under data protection law:

Right of access: you can request a copy of the personal information we hold about you.
Right to rectification: you can request that any incorrect or incomplete information is corrected.
Right to erasure: you can request the deletion of your personal information, in certain circumstances.
Right to restrict processing: you can request that we restrict the processing of your personal information, in certain circumstances.
Right to data portability: you can request the transfer of your information to another organisation, or directly to you.
Right to object: you can object to our processing of your information, in certain circumstances.
Right to withdraw consent: where processing is based on your consent, you can withdraw it at any time.

8. How to contact us

If you have any questions, concerns or complaints about this Privacy Notice or our handling of your personal information, please contact us:

Company

Mark Preston Training Ltd, trading as The Second Ascent

Mark@the-second-ascent.co.uk

Phone

07938 400063