Last updated: 8 September 2026
This page explains what personal information I collect through michaelawinsleycoaching.com and my advertising, why I collect it, how long I keep it, and what you can ask me to do with it. It is written to be read, not to be endured.
Who I am
I am Michaela Winsley, a sole trader trading as Michaela Winsley Fitness Coaching. I am the data controller for the information described on this page, which means I am the person responsible for it.
You can contact me about anything on this page at michaela.winsley@gmail.com.
What I collect
Information you give me directly:
- Your name, email address and phone number when you fill in a contact form, enquiry form or booking form on my site.
- Your name and email address when you sign up for my newsletter or a free resource.
- Your name and email address when you fill in a lead form attached to one of my Facebook or Instagram adverts.
- Details you choose to send me in a message, DM or email — including anything you tell me about your training, your goals or your health. You decide how much of that to share.
- Height, weight, age and activity level if you use the macro calculator on my site.
- Your billing details and order information if you buy something from my shop.
Information collected automatically:
- Standard technical information recorded by my web host when you visit — IP address, browser type, pages viewed, date and time.
- Information collected by the Meta pixel installed on my site, which tells Meta that a visit or action happened so my adverts can be measured and shown to relevant people.
- Cookies. Some are necessary for the site and shop to work at all. Others, like the Meta pixel, are used for advertising. See the cookies section below.
Why I use it, and my lawful basis
| What for | Lawful basis under UK GDPR |
|---|---|
| Replying to your enquiry and talking to you about coaching | Legitimate interests — you contacted me and expect a reply |
| Delivering coaching, programmes and retreats you have signed up for | Performance of a contract with you |
| Sending you emails about training, nutrition and my services | Consent — you asked to receive them, and you can stop at any time |
| Taking payment and keeping order records | Contract, and legal obligation for tax records |
| Advertising on Facebook and Instagram, and measuring whether it works | Consent for advertising cookies and tracking; legitimate interests in promoting my business |
| Keeping the site secure and working | Legitimate interests |
| Health information you volunteer — injuries, conditions, medication, pregnancy | Your explicit consent, so that I can coach you safely |
Where I rely on consent, you can withdraw it at any time, and withdrawing it does not affect anything done before you did.
Health information
Health details are treated as special category data under UK GDPR and I handle them accordingly. I only collect them when you volunteer them, I only use them to coach you safely, I do not share them with anyone, and you can ask me to delete them at any point. If you would rather not tell me something, that is your call — I will simply coach around what I do not know.
Who else sees your information
I do not sell your information, and I do not share it for anyone else’s marketing. I use a small number of service providers who process information on my behalf:
- Hostinger — hosts this website and its email, so anything submitted through the site passes through their servers.
- Meta Platforms (Facebook and Instagram) — runs my adverts, holds lead form responses until I download them, and operates the pixel on my site.
- Stripe — processes card payments for anything bought through my shop. Your full card details go to Stripe, not to me; I never see or store them.
- Typeform — used for some questionnaires and application forms.
- Google — my business email runs through Gmail, so messages you send me are stored there.
Newsletter and enquiry form submissions come straight to my inbox. I do not run them through a third-party mailing platform.
If you buy Pharmanex or Nu Skin products through a link I share, that purchase is made with Nu Skin directly and is covered by Nu Skin’s own privacy policy, not this one. I may be told that a referred order was placed.
I will also disclose information if the law requires it — for example to HMRC, or in response to a valid legal request.
Information leaving the UK
Some of the providers above are based in the United States or store data there. Where information is transferred outside the UK or the European Economic Area, it is protected by the safeguards those providers have in place — standard contractual clauses, the UK international data transfer addendum, or the UK and EU data privacy frameworks. I split my time between the UK and Spain, so your information may be accessed by me from either country.
How long I keep it
- Enquiries that do not become clients: up to 2 years, then deleted.
- Newsletter subscribers: until you unsubscribe or ask to be removed, then deleted within 30 days.
- Advert lead form responses: Meta holds these for up to 90 days; I download them and then keep them under the rules above.
- Coaching clients: for the length of our work together and 2 years afterwards, in case you come back.
- Health and training notes: deleted when we stop working together, unless you ask me to keep them.
- Orders, invoices and payment records: 6 years from the end of the relevant tax year, because HMRC requires it.
Cookies
This site uses cookies that are strictly necessary for it to function, including for the shop, basket and checkout. It also runs the Meta pixel, which sets advertising cookies used by Facebook and Instagram to measure my adverts and show them to relevant audiences.
When you first arrive you are asked whether to allow the advertising cookies. Nothing from Meta loads unless you say yes, and rejecting them costs you nothing on this site. You can change your answer at any time using the Cookie settings link in the footer. You can also block or delete cookies through your browser settings, and control how Meta uses your information for advertising in your Facebook or Instagram ad preferences. Blocking necessary cookies may stop parts of the site working.
Your rights
Under UK and EU data protection law you have the right to:
- ask for a copy of the personal information I hold about you;
- have inaccurate information corrected;
- ask me to delete your information;
- ask me to restrict how I use it;
- object to my using it, including for direct marketing — if you object to marketing, I will stop, always;
- ask for your information in a portable format;
- withdraw consent at any time.
To use any of these, email me at michaela.winsley@gmail.com. I will respond within one month. There is no charge.
Every marketing email I send has an unsubscribe link at the bottom. One click and you are off the list.
Complaints
If you are unhappy with how I have handled your information, please tell me first and I will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the EU, you can complain to your own national data protection authority instead.
Children
My coaching and this website are intended for adults. I do not knowingly collect information from anyone under 18. If you believe a child has given me their information, email me and I will delete it.
Security
This site runs over an encrypted connection, access to my accounts is protected by strong passwords and two-factor authentication where it is offered, and I keep the number of people who can see your information to one — me. No system is perfectly secure, but I take it seriously.
Changes to this policy
If I change how I handle personal information, I will update this page and change the date at the top. If the change is significant and I hold your email address, I will tell you.