Privacy Policy
Last updated: 15 October 2026.
1. Who we are
brandnew PT provides branding and social media management for personal trainers and fitness coaches. Anthony Summers, trading as brandnew PT, is the data controller for the website enquiries and business administration described here.
Business address: 15 Nelsons Gardens, Southampton, SO30 2NE, United Kingdom.
For privacy questions or requests, use our contact form, mark your message “Privacy”, or write to the address above. You do not need to include sensitive information in the form.
2. Information we collect
- Enquiries: your name, email address, mobile number, business name, optional Instagram handle, package of interest and message.
- Client administration: correspondence, agreed services, approvals, billing and transaction records, and branding assets you provide.
- Payments: Stripe processes payment details on its own checkout. We may receive contact and billing details, transaction references, payment status and subscription information. Our website does not collect or store full card numbers or card security codes.
- Technical information: our hosting and form providers may process IP addresses, browser information, timestamps and security logs to deliver and protect the service.
We receive information directly from you and, where relevant, from Stripe and the providers supporting our website. Required enquiry fields are marked on the form. The form cannot be submitted without them; the mobile number is used for follow-up about your enquiry, not as permission for marketing calls. Please avoid sending health information, identity documents, passwords or card details in your message.
3. Why we use information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Respond to an individual’s request for a quote and prepare or provide their agreed services. | Steps requested before a contract, or performance of a contract with that individual. |
| Communicate with people representing business clients, handle general enquiries and maintain service records. | Legitimate interests in managing business relationships and responding to requests. |
| Protect the website, prevent spam and fraud, and handle complaints or legal claims. | Legitimate interests in service security and protecting our rights. |
| Maintain records required by tax, accounting or other applicable law. | Compliance with a legal obligation. |
| Publish identifiable portfolio content where we seek your permission. | Consent, where relied upon, recorded separately from your enquiry. |
We consider the impact on individuals when relying on legitimate interests. Reading or acknowledging this policy is not consent to marketing. We do not add enquiry contacts to a newsletter or marketing list through this form.
4. Who receives information
We use Formspree to receive and process enquiries, Google Gmail to handle email correspondence, Stripe for payments and subscriptions, and ChatGPT Sites and its hosting infrastructure to deliver the website. Providers receive the information needed for their role. Stripe may also act as a separate controller for purposes such as fraud prevention and legal compliance.
We may share relevant records with professional advisers or authorities where necessary for advice, legal obligations or claims. We do not sell personal information. Identifiable portfolio examples are handled separately; submitting an enquiry does not authorise publication.
Provider information: Formspree privacy policy, Google privacy policy, Stripe privacy policy and OpenAI privacy policy.
5. International processing
Some providers operate internationally, so information may be processed outside the UK, including in the United States. Where UK transfer restrictions apply, an appropriate transfer mechanism is required, such as applicable adequacy regulations or approved contractual safeguards. The mechanism depends on the provider, service and contract. Contact us for information about the safeguards applicable to your data. Information is not restricted to storage or processing within the UK.
6. How long we keep information
We apply the following retention schedule:
- Enquiries that do not become client work: up to 12 months after the last substantive contact, then delete unless there is a documented reason to retain them.
- Contracts, approvals, invoices and essential payment records: normally six years after the client relationship ends, or longer where a specific legal requirement applies.
- Working content and supplied media: review within 90 days of completion or the end of the service; delete copies no longer needed, subject to agreed handover, portfolio permission or a documented legal reason.
- Security and technical logs: limited to the provider’s applicable retention settings and what is necessary for security and troubleshooting.
Records needed for an ongoing dispute or legal obligation may be held for longer. Provider-held copies and backups may follow separate deletion cycles. This schedule applies to Formspree submissions and email records as well as local files.
7. Your rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests. Where consent is used, you can withdraw it without affecting processing that was lawful before withdrawal. These rights are subject to legal conditions and exceptions; for example, some records may need to be retained by law.
Contact us using the details above. We may need proportionate information to verify your identity. We normally respond within one month, subject to legally permitted extensions. Requests are normally free of charge.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/. You can contact us first so we can try to resolve your concern, but this does not limit your right to complain.
8. Cookies, security and automated decisions
We have not added advertising pixels, optional analytics or social media tracking embeds to this website. The Instagram picture is a static concept image, not an Instagram embed. Necessary hosting, authentication or security technologies may be used. Stripe and other external services apply their own policies when you visit them.
We aim to limit access and collection to what is needed. No online service can guarantee absolute security. Do not send sensitive information through the enquiry form. We do not make solely automated decisions with legal or similarly significant effects about enquiry contacts through this website.
9. Client content and changes to this policy
This notice covers our own enquiries and business administration. If we handle personal information about your clients or followers on your instructions while managing your social media, the respective responsibilities, permissions and processing terms must be agreed separately before access is provided.
We update this notice when our services or data practices change. The date at the top shows the latest revision.