Legal · Last updated June 2026
Privacy Notice
This notice explains what personal information Thomas Private & Co collects, why it is collected, and how it is protected. It is written to be plain, short and honest.
Who I am
Joel Thomas, trading as Thomas Private & Co, is the data controller for personal information collected through this website and in the course of training, sports massage and health and wellness management services. Contact: joelthomaspt@gmail.com.
What I collect
- Enquiry form: name, email, optional phone, the service you are enquiring about and your message.
- Direct contact: any information you choose to share by email, phone or message.
- Client records: for engaged clients, the training, health and lifestyle information needed to deliver the service, kept to the minimum required.
- Technical: the page the enquiry was sent from and your browser user agent, used only to diagnose form errors and prevent spam.
How I use it
- To respond to enquiries and arrange consultations.
- To deliver and manage the services you have engaged.
- To meet professional, insurance and legal obligations.
I do not sell, share or trade personal information. I do not use it for marketing.
Legal basis (UK GDPR)
Legitimate interests for responding to enquiries; contract for delivering services you have engaged; legal obligation where the law requires records to be kept; consent where you have actively provided it.
Sharing
Information is only shared where strictly required to deliver what you have asked for — for example, with a specialist you have asked me to refer you to through the Black Book, or with technical providers that host this website and store enquiry data on my behalf under written agreements. Specialists you are referred to act as independent data controllers and apply their own privacy notices.
How long I keep it
- Unsuccessful enquiries: up to 24 months, then deleted.
- Engaged clients: for the duration of the engagement and up to 7 years afterwards for insurance and legal record keeping.
Security and discretion
Client identities, locations, schedules and health information are never discussed publicly, never referenced and never used in marketing. Records are stored on access controlled systems. NDA available on request for engaged clients.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to processing of your personal information, and to data portability. To exercise any of these, email joelthomaspt@gmail.com. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
This service is not aimed at children. Personal training is offered to adults only.
Changes
If this notice changes, the updated date at the top will be revised.