Legal · Last updated October 2026
Privacy Notice
This notice explains what personal information Thomas Private & Co collects, why it is collected, and how it is protected. It is written to be plain, short and honest.
Who I am
Joel Thomas, trading as Thomas Private & Co, is the data controller for personal information collected through this website and in the course of its services: Private Training (including sports massage), Remote Coaching & Wearable Monitoring, and Health & Wellness Concierge. Contact: joelthomaspt@gmail.com.
What I collect
- Enquiry form: name, email, optional phone, the service you are enquiring about and your message.
- Direct contact: any information you choose to share by email, phone or message.
- Client records: for engaged clients, the training, health and lifestyle information needed to deliver the service, kept to the minimum required.
- Wearable health metrics: for Remote Coaching & Wearable Monitoring clients only, the metrics you choose to share from your wearable device, such as heart rate variability, sleep, recovery, activity and stress. These are used only to inform your training, recovery and lifestyle recommendations.
- Concierge information: for Health & Wellness Concierge clients, the details needed to arrange introductions and appointments with independent professionals on your behalf.
- Technical: the page the enquiry was sent from and your browser user agent, used only to diagnose form errors and prevent spam.
How I use it
- To respond to enquiries and arrange consultations.
- To deliver and manage the services you have engaged.
- To meet professional, insurance and legal obligations.
I do not sell or trade personal information, and I do not use it for marketing. It is only shared in the limited circumstances described under Sharing below.
Health information
Health-related information, including wearable health metrics, is special category data under UK GDPR. It is only processed where you have given explicit consent, which is requested before any such information is collected, and you can withdraw that consent at any time. Please do not include detailed medical information in the website enquiry form.
Legal basis (UK GDPR)
Legitimate interests for responding to enquiries; contract for delivering services you have engaged; legal obligation where the law requires records to be kept; consent where you have actively provided it.
Sharing
Information is only shared where strictly required to deliver what you have asked for, for example, with an independent professional from Our Trusted Network you have asked me to introduce you to, and only with your permission, or with technical providers that host this website and store enquiry data on my behalf under written agreements. Independent professionals you are introduced to act as independent data controllers and apply their own privacy notices.
How long I keep it
- Unsuccessful enquiries: up to 24 months, then deleted.
- Engaged clients: for the duration of the engagement and up to 7 years afterwards for insurance and legal record keeping.
Security and discretion
Client identities, locations, schedules and health information are never discussed publicly, never referenced and never used in marketing. Records are stored on access controlled systems. NDA available on request for engaged clients.
Your rights
Under UK GDPR you have the right to access, correct, delete, restrict or object to processing of your personal information, and to data portability. To exercise any of these, email joelthomaspt@gmail.com. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
This service is not aimed at children. Personal training is offered to adults only.
Changes
If this notice changes, the updated date at the top will be revised.