Who runs NoFadFit
NoFadFit is operated by Chris Cachia, sole trader, based in Banbury, Oxfordshire, United Kingdom. He is the data controller for the information described here.
Contact: chris@nofadfit.net
NoFadFit, PureGym Banbury, Banbury Cross Retail Park, Lockheed Close, Banbury OX16 1LX
Who this applies to
This policy covers:
- People who apply for coaching via the application form on nofadfit.net
- Active coaching clients
- People who use the NoFadFit app
- People who contact NoFadFit by email
You must be 18 or over to hold an account on the NoFadFit app.
What information is collected
When you apply for coaching, the application form collects:
Contact details
- Name
- Email address
- Phone number (if provided)
- Location (city/region)
Training and goals
- Training history
- Current activity level
- Goals
- Availability
Health information (special category data under UK GDPR)
- Injuries, past and current
- Pre-existing medical conditions
- Medications relevant to training
- Pregnancy status (where applicable)
- PAR-Q+ readiness screening answers
Health information is only collected because it's required to design a training programme that's safe for you. Without it, programming you properly isn't possible.
Once you're a client
- Your training programme and any nutrition guidance written for you
- Body composition measurements where taken — weight, body fat, muscle mass, BMI, visceral fat, RMR
- Coaching notes about your training, including injuries and how you respond to exercise
Measurements and injury notes are health information too, and are treated the same way as your screening answers.
If you use the NoFadFit app
- Your email address, used to sign you in
- The devices you sign in from
- What you record in each session — weights, reps, times, and any notes you add yourself
- A record of which version of these terms you agreed to, and when
The app also holds the programme written for you, so you can read it and log against it.
How it's used
Your information is used only to:
- Review your application
- Decide whether NoFadFit is the right fit for you (and you for it)
- Design and adjust your training and nutrition programme
- Communicate with you during coaching
- Deliver your programme through the app and show you what you've logged
Your information is never sold, shared with advertisers, or used for marketing without your separate consent.
Where it's stored
- Application and screening form data is collected via Tally (tally.so), a GDPR-compliant form provider. Tally stores submissions on its servers.
- Submissions are emailed to the coach's private email address.
- Coaching notes are held privately and are accessible only to Chris Cachia.
- App data — your programme, your logs, and your consent record — is held in a database hosted by Cloudflare in Western Europe.
- The app also keeps your programme and what you log on your own phone, so it works without signal. That copy is cleared when you sign out or your account closes.
- No data is stored on shared drives or third-party CRMs.
Lawful basis for processing
NoFadFit relies on the following lawful bases under UK GDPR:
- Standard personal data: legitimate interest (delivering the coaching service you've applied for) and contract (where coaching is active).
- Health and special category data: explicit consent under Article 9(2)(a). You tick a consent box on the application form before submitting, and again in the app before you start using it. You can withdraw consent at any time by emailing the address above.
- Records kept after you leave: establishing, exercising or defending legal claims, under Article 9(2)(f).
- Business and tax records: legal obligation.
If you withdraw consent to health information being held, coaching you safely is no longer possible, so the coaching arrangement would end.
How long it's kept
- Unsuccessful applications: deleted within 6 months.
- Your app account: deleted within a week of you stopping coaching, or paused if you plan to return.
- Your programmes, training logs, screening answers and consent record: kept for 6 years after coaching ends.
Six years is how long a claim can be brought, and those records are how it would be answered. They're held separately from the live system, reachable only by Chris Cachia, and deleted automatically once the six years are up.
You can request earlier deletion at any time (see Your Rights below).
Who else sees it
These services handle your information on NoFadFit's instructions only. None of them use it for their own purposes.
- Tally — runs the application and screening forms. European Union.
- Cloudflare — hosts the app and its database, and routes NoFadFit email. Western Europe.
- Resend — sends the app's sign-in codes. Ireland.
- Google — the email inbox where form submissions and client email arrive. May be processed outside the UK, under the safeguards UK law requires for international transfers.
No other third parties have access to your information. It would only be shared further if the law required it, or to establish or defend a legal claim.
Keeping it safe
Everything sent between the app and its server is encrypted.
The coach account is protected by a passkey on top of an emailed code, so an email address on its own isn't enough to reach anyone's information. The app is built so that it only ever sends a client their own information, and that is tested.
Cookies and website tracking
nofadfit.net does not currently use analytics, advertising cookies, or tracking pixels. The site sets only essential cookies required for functionality (e.g. Cloudflare bot protection, font loading, and the application form embed).
The app sets one cookie, which keeps you signed in on that device. It isn't used for tracking.
If analytics are added in future, a cookie consent banner will be added at the same time.
Your rights
Under UK GDPR, you have the right to:
- Access the information held about you
- Have inaccurate information corrected
- Have your information deleted (right to erasure)
- Restrict or object to how your information is used
- Receive your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113
To exercise any of these rights, email chris@nofadfit.net. There's no charge.
Requests are normally answered within 14 days, and always within a month.
If you're unhappy with how your information has been handled, you can complain to the ICO. Please come to me first so I can put it right.
Changes to this policy
If this policy changes, the "Last updated" date at the top will change. Major changes will be notified to active clients by email, and the app will ask you to read and agree to the new version before you carry on using it.
Questions
Email chris@nofadfit.net.