PRIVACY POLICY
Last updated: August 2026
1. ABOUT THIS PRIVACY POLICY
Samsta Fitness Ltd, company number 16801864, trading as Samsta Fitness ("Samsta Fitness", "we", "us" or "our"), respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit www.samstafitness.com, contact us, register for one of our services, participate in the 7-Day Free Trial, purchase Online Coaching, use our fitness application or otherwise interact with Samsta Fitness.
It also explains your rights under applicable data protection law.
Samsta Fitness Ltd is the data controller responsible for the personal data described in this Privacy Policy.
This Privacy Policy should be read alongside our Website Terms and Conditions and, where applicable, our Online Coaching Terms and Conditions.
2. DATA PROTECTION LAW
We process personal data in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 ("PECR"), in each case as amended from time to time.
Where you are located outside the United Kingdom, additional data protection rights may apply to you under the laws of your country or territory.
3. INFORMATION WE MAY COLLECT ABOUT YOU
The personal information we collect depends on how you interact with Samsta Fitness.
We may collect identity and contact information such as your name, email address, telephone number, age or date of birth and other contact details you provide to us.
Where you enquire about, book or purchase a service, we may collect information relating to your enquiry, consultation, booking, chosen service, membership, payments, billing history and communications with us.
When you use our website, we may collect technical information such as your IP address, browser type, device type, operating system, pages visited, referring website, approximate location derived from your IP address and information about how you interact with the Website.
Where you participate in fitness coaching or another personalised fitness service, we may collect information such as your fitness goals, training experience, exercise preferences, exercise history, programme activity, progress, body weight, measurements, photographs and other information that you choose to provide as part of your coaching.
We may also collect records of communications between you and Samsta Fitness, including emails, messages, forms, coaching communications, support requests and feedback.
Where you provide a testimonial, review, photograph, video or other content for promotional purposes, we may process that information in accordance with the permission you have given us.
4. HEALTH AND SPECIAL CATEGORY DATA
Providing personalised fitness coaching may require us to collect information relating to your health.
This may include information about injuries, medical conditions, pregnancy, physical limitations, medication, previous health issues or other circumstances relevant to your ability to participate safely in exercise or follow fitness or nutritional guidance.
Health information is treated as special category personal data and receives additional protection under data protection law.
We will only collect health information that is relevant and reasonably necessary for providing our services safely and appropriately.
Where required, we will ask for your explicit consent to process health information for the purpose of providing your requested fitness or coaching services.
Where explicit consent is relied upon, you may withdraw that consent at any time. Withdrawal of consent will not affect processing which was lawful before your consent was withdrawn.
However, if particular health information is reasonably necessary for us to provide a service safely, withdrawing consent may mean that we are unable to continue providing some or all of that service.
We do not provide medical diagnosis or treatment and will not use health information for purposes unrelated to providing, administering or safely managing your fitness service unless we have another lawful basis for doing so.
5. HOW WE COLLECT YOUR INFORMATION
We primarily collect information directly from you.
This may happen when you complete a form on our Website, contact us, book a consultation, register for an account, enter the 7-Day Free Trial, purchase a service, complete a health or fitness questionnaire, use our fitness application, communicate with your coach, request support or otherwise provide information to Samsta Fitness.
We may also collect certain information automatically when you use our Website through cookies and similar technologies.
In some circumstances, we may receive information from service providers that assist us with operating our business, such as payment processors, booking systems, website platforms or fitness application providers.
6. HOW AND WHY WE USE YOUR PERSONAL DATA
We may use your personal information to respond to enquiries and communicate with you about our services.
Where you become a customer, we use your information to create and administer your account, provide the service you have purchased, deliver coaching, create and manage training programmes, monitor progress, provide support, manage your membership and communicate with you about your service.
We may use payment and transaction information to process purchases, administer recurring payments where applicable, maintain appropriate financial records and deal with refunds, disputes or failed payments.
We may process health and fitness information where necessary to personalise your coaching, understand relevant limitations and provide your fitness service as safely and appropriately as reasonably possible.
We may use Website information and analytics to maintain, secure and improve our Website, understand how visitors use it, identify technical problems and improve our services and customer experience.
We may use your contact information for marketing where we have an appropriate lawful basis to do so, as explained further below.
We may also process information where reasonably necessary to prevent fraud, protect our legal rights, resolve disputes, comply with legal obligations or respond to lawful requests from regulators or public authorities.
7. OUR LAWFUL BASES FOR PROCESSING
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on performance of a contract where processing is necessary to provide a service you have requested or fulfil our agreement with you.
We may rely on legitimate interests where processing is reasonably necessary for operating, protecting or improving Samsta Fitness and those interests are not overridden by your rights and interests. Examples may include responding to certain enquiries, maintaining business records, improving services, preventing fraud and protecting our systems.
We may rely on a legal obligation where we are required to process or retain information to comply with applicable law, tax requirements, accounting obligations, regulatory requirements or lawful requests.
We may rely on consent where you have freely given permission for a particular use of your information, including certain marketing activities, cookies or processing of special category information where appropriate.
Where we rely on consent, you may withdraw it at any time.
For special category health information, we will also identify an appropriate condition under Article 9 of the UK GDPR. Where appropriate for our services, this may include your explicit consent.
8. PAYMENTS
Payments made for Samsta Fitness services may be processed through third-party payment providers, including payment processors such as Stripe.
Depending on the payment method selected at checkout, additional payment providers or financial institutions may also process your information.
Payment providers may collect information such as your card details, bank information, billing address, transaction information and fraud-prevention information directly from you.
Samsta Fitness does not generally receive or store your complete debit or credit card details when payments are processed by an external payment provider.
We may receive limited information relating to the transaction, such as your name, contact details, payment status, payment method type, amount paid, subscription information and transaction history where necessary to administer your purchase.
Payment providers process certain information in accordance with their own privacy policies and legal obligations.
9. FITNESS APPLICATION AND ONLINE COACHING PLATFORMS
Where you register for the 7-Day Free Trial, Online Coaching or another service delivered through a fitness application or online coaching platform, information necessary to operate that service may be processed through the relevant technology provider.
This may include your name, email address, account information, training programmes, workouts, progress information, measurements, photographs, messages, fitness information and other information that you choose to enter into the application.
We only share information that is reasonably necessary for providing and administering the relevant service.
Third-party technology providers may also process information under their own contractual, security and privacy obligations.
10. WHO WE MAY SHARE YOUR INFORMATION WITH
We do not sell your personal data.
We may share personal information with carefully selected service providers where reasonably necessary to operate Samsta Fitness and provide our services.
These may include our Website and hosting providers, fitness application and coaching platform providers, payment processors, customer relationship management systems, email and communications providers, booking and scheduling providers, cloud storage providers, analytics providers, advertising platforms, IT and security providers, accountants, professional advisers and other suppliers that assist us in operating our business.
Where these organisations process information on our behalf, we require appropriate data protection arrangements to be in place.
Some providers may also act as independent data controllers for particular processing activities, such as payment processing. Where this applies, their own privacy policies may also govern how they use your information.
We may also disclose personal information where required by law, in connection with legal proceedings, to enforce or protect our legal rights, to investigate suspected fraud or where lawfully requested by a court, regulator, law-enforcement agency or other competent authority.
11. INTERNATIONAL TRANSFERS
Some of the service providers we use may store or process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure that the transfer is made in accordance with applicable UK data protection law.
Depending on the destination and provider, this may involve relying on UK adequacy regulations or using appropriate contractual and other safeguards recognised under UK data protection law.
Where appropriate safeguards are required, these may include recognised international data transfer agreements, contractual provisions or other approved mechanisms.
12. HOW LONG WE KEEP YOUR INFORMATION
We do not keep personal information for longer than reasonably necessary for the purposes for which it was collected.
The exact retention period depends on the type of information and why we hold it.
When determining an appropriate retention period, we consider the duration of our relationship with you, the nature and sensitivity of the information, why it was collected, whether it is still required to provide our services, applicable legal and accounting requirements, potential disputes and relevant limitation periods.
Some financial and transactional records may need to be retained after your relationship with Samsta Fitness has ended in order to comply with tax, accounting or other legal obligations.
Health and fitness information will only be retained for as long as reasonably necessary for the purposes for which it was collected, taking account of our legal obligations and any legitimate need to maintain appropriate records.
Where information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.
13. MARKETING COMMUNICATIONS
We may send you information about Samsta Fitness services, offers, content or other relevant updates where permitted by law.
Where consent is required for electronic marketing, we will ask for your consent.
In certain circumstances, applicable electronic marketing rules may allow us to contact existing customers about our own similar products or services where the relevant legal requirements are satisfied.
Where this applies, you will be given an appropriate opportunity to opt out when your details are collected and in subsequent marketing communications.
Agreeing to our Website Terms, Online Coaching Terms or purchasing a service does not by itself constitute consent to optional marketing where separate consent is legally required.
You can unsubscribe from marketing emails at any time by using the unsubscribe option included in the communication or by contacting us.
Opting out of marketing will not prevent us from sending service-related communications that are reasonably necessary to administer a service you have purchased, such as account, payment, coaching or important service notifications.
14. TESTIMONIALS, PHOTOGRAPHS AND CLIENT TRANSFORMATIONS
We may invite customers to provide testimonials, reviews, photographs, videos or details of their results.
We will not use identifiable client photographs, transformations, testimonials or similar material for public marketing without an appropriate lawful basis and, where required, your consent or permission.
Where we rely on consent, you may withdraw that consent for future use by contacting us.
Withdrawal of consent does not affect uses that were lawful before consent was withdrawn and may not always require us to retrieve material that has already been lawfully published or distributed where this is no longer reasonably possible.
15. COOKIES AND SIMILAR TECHNOLOGIES
Our Website may use cookies and similar technologies.
Some cookies are necessary for the Website to operate properly, maintain security, remember essential selections or provide services that you have requested.
Other cookies may be used for analytics, advertising, remarketing, measuring Website performance or understanding how visitors interact with the Website.
Where consent is legally required, non-essential cookies and similar technologies will only be used after you have made an appropriate choice through our cookie controls.
You can use the cookie controls available on our Website to manage your preferences.
Changing or withdrawing your cookie consent will not affect the lawfulness of processing that took place before your preference was changed.
You may also be able to manage cookies through your browser or device settings, although blocking certain necessary technologies may affect how parts of the Website operate.
16. ANALYTICS AND ADVERTISING
Subject to your cookie choices and applicable law, we may use analytics and advertising services to understand Website traffic, measure the effectiveness of our marketing and show relevant advertising to previous Website visitors.
This may include services provided by organisations such as Google where those services are enabled on our Website.
These providers may use cookies or similar technologies to process information about your device and Website activity.
Where required, these technologies will only be activated after appropriate consent has been obtained through our Website's cookie controls.
You can change your preferences through the cookie controls available on the Website.
17. THIRD-PARTY WEBSITES
Our Website may contain links to third-party websites, applications or services.
Clicking a third-party link or enabling a third-party service may allow that organisation to collect or process information about you.
We do not control the privacy practices of independent third parties and are not responsible for their privacy notices or the way they process information.
We recommend reviewing the privacy information provided by any third-party service that you choose to use.
18. DATA SECURITY
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
Access to personal information is limited where reasonably appropriate to people and service providers who require it for legitimate business purposes.
Where third-party providers process personal information on our behalf, we take reasonable steps to use providers that maintain appropriate security measures.
No online service or method of electronic storage can be guaranteed to be completely secure. However, we take the protection of personal information seriously and will respond appropriately if we become aware of a personal data breach.
19. YOUR DATA PROTECTION RIGHTS
Depending on the circumstances and the lawful basis on which we process your information, you may have rights under UK data protection law.
These may include the right to request access to the personal information we hold about you, request correction of inaccurate or incomplete information, request deletion of your information in certain circumstances, request restriction of processing, object to certain processing and receive certain information in a portable format.
You also have the right to withdraw consent at any time where we rely on consent.
You have an absolute right to object to the use of your personal information for direct marketing.
Not all rights apply in every circumstance. For example, we may sometimes need to retain particular information where we have a legal obligation or another lawful reason to do so.
We will explain this to you where relevant.
20. MAKING A DATA REQUEST
If you wish to request access to, correction of or deletion of personal information that we hold about you, or exercise another data protection right, you can contact us at:
Please include enough information for us to identify you and understand your request.
We may need to request reasonable information to confirm your identity before responding. This is intended to prevent personal information being disclosed to someone who is not entitled to receive it.
We will respond without undue delay and generally within one month of receiving a valid request.
In certain circumstances, the law allows additional time for complex or numerous requests. If this applies, we will inform you as required.
You will not normally be charged a fee for exercising your data protection rights. However, the law allows us to take appropriate action in certain circumstances involving manifestly unfounded or excessive requests.
21. DELETION REQUESTS
You may request deletion of personal information by contacting:
We will consider your request in accordance with applicable data protection law.
The right to deletion is not absolute.
We may need to retain particular information where necessary to comply with legal, accounting or regulatory obligations, establish or defend legal claims, prevent fraud or where another lawful reason for retention applies.
Where we cannot delete particular information, we will explain the reason where required by law.
22. WITHDRAWING CONSENT
Where we rely upon your consent to process personal information, you can withdraw that consent at any time.
You can contact:
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
If consent relates to information that is necessary for us to safely provide a particular requested service, withdrawing consent may affect our ability to continue providing that service.
23. CHILDREN AND YOUNG PEOPLE
Our paid services are generally intended for adults.
Where we agree to provide a service to a person aged 16 or 17, appropriate parental or guardian involvement or consent may be required in accordance with our service terms and applicable law.
We do not knowingly seek to collect unnecessary personal information from children.
If you believe that a child has provided us with personal information inappropriately, please contact us so that we can investigate.
24. COMPLAINTS ABOUT YOUR PERSONAL DATA
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we have an opportunity to investigate and resolve the issue.
You can contact us at:
You also have the right to complain to the Information Commissioner's Office ("ICO"), the UK's independent data protection regulator.
Making a complaint to us does not affect your right to contact the ICO.
25. INTERNATIONAL CUSTOMERS
Samsta Fitness provides services to customers in the United Kingdom and internationally.
Our processing of personal data is primarily governed by applicable UK data protection law.
However, depending on where you live, you may also have additional privacy rights under local data protection legislation.
Nothing in this Privacy Policy is intended to remove rights that applicable law does not allow you to waive.
26. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our Website, services, technology, service providers, business practices or applicable law.
When we make changes, the updated Privacy Policy will be published on this Website and the "Last updated" date will be changed accordingly.
Where a change is particularly significant and applicable law requires additional notice, we will take reasonable steps to notify affected individuals.
27. CONTACTING SAMSTA FITNESS
Samsta Fitness Ltd
Company number: 16801864
Trading as: Samsta Fitness
Website: www.samstafitness.com
Email: support@samstafitness.com
Data protection enquiries and requests: support@samstafitness.com
If you have any questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact us using the details above.