Ceefit

Privacy Policy

Last updated: 17 September 2026

This policy explains what personal information Ceefit collects, why, and what rights you have over it. Because our coaching involves your health information, we treat that data with particular care and only ever with your explicit consent.

1. Who we are

Ceefit (“we”, “us”, “our”) provides online fitness and nutrition coaching, with a focus on women in perimenopause and menopause. For the purposes of the UK GDPR and the Data Protection Act 2018, the data controller is:

CeeFit Ltd, a company registered in England and Wales (company number 17350493).
Registered office: Office 7339, 58 Peregrine Road, Hainault, Ilford, Essex, IG6 3SZ, United Kingdom.
Coaching is led by Caroline Oliver (“Cee”).
Contact for privacy matters: hello@ceefit.co.uk

We are registered with the Information Commissioner’s Office (ICO); our registration reference is ZC243696.

2. The information we collect

When you join the waitlist

Your name and email address, and any preferences you tell us (for example which programme interests you). We also record when and how you joined.

When you complete the intake questionnaire

To build a safe, personalised programme we collect: your name, email, phone number, date of birth, gender, nationality/location, height and weight, training experience and availability, your goals and motivations, dietary requirements, allergies and food preferences.

Health information (special category data). The intake asks about medical conditions, medications, injuries and a physical-activity-readiness (PAR-Q) screen, and — if you consent — assessment photographs. This is “special category” data under the UK GDPR. We collect and use it only with your explicit consent, solely to assess whether coaching is appropriate for you, to decide whether GP clearance is needed, and to design your training and nutrition safely. You can withdraw this consent at any time (see section 7).

When you become a paying client

Your subscription tier and billing status. We do not see or store your full card details — card payments are handled by our payment processor, Stripe, who send us only a confirmation of payment and limited billing metadata.

When you use the site

Standard technical information: IP address, device and browser type, and pages viewed, gathered through cookies and similar technologies (see section 5).

3. How we use your information, and our legal basis

What we doLegal basis (UK GDPR)
Manage the waitlist and tell you when we openConsent
Assess suitability and build/deliver your coaching programmePerformance of a contract; and, for health data, your explicit consent
Take payment and manage your subscriptionPerformance of a contract
Send service messages (reminders, programme updates)Performance of a contract
Measure and improve the website and our marketingConsent (for analytics/advertising cookies)
Keep records we’re legally required to keep, and protect against fraud/misuseLegal obligation; legitimate interests

4. Who we share it with

We do not sell your personal information. We share it only with the service providers who help us run Ceefit, each acting as our processor under contract:

ProviderWhat they do
Google (Firebase)Secure hosting, sign-in, and database for your account and programme
NetlifyHosting of our public website
StripeCard payment processing and subscription billing
ResendSending our service and account emails
Anthropic (Claude)AI assistance used by your coach to help draft your programme. Your coach reviews every programme before it reaches you.
Google Analytics & Meta (Facebook) PixelWebsite analytics and advertising measurement (only if you accept these cookies)
Your coach uses AI tools to help prepare training and nutrition plans. We take care to limit the personal information shared for this purpose, and a qualified human coach reviews every plan. If you would prefer your data not be processed by AI tools, contact us and we will discuss alternatives.

We may also disclose information if required by law, or to establish, exercise or defend legal claims.

5. Cookies and tracking

We use a small number of essential cookies to make the site and your account work. With your consent, we also use analytics and advertising cookies — including Google Analytics and the Meta (Facebook) Pixel — to understand how our site is used and to measure our advertising. You can accept or decline non-essential cookies, and you can change your choice at any time in your browser settings. Declining non-essential cookies will not stop you using the site.

The Meta Pixel and Google Analytics may set their own cookies and receive limited information about your visit. See Meta’s and Google’s own privacy notices for how they use it.

6. International transfers

Some of our providers (for example Stripe, Google, Netlify, Resend, Anthropic and Meta) process data outside the UK, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK’s International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

7. Your rights

Under the UK GDPR you have the right to: access the personal data we hold about you; have it corrected or completed; have it erased; restrict or object to our processing; receive your data in a portable format; and, where we rely on consent (including for your health data and for cookies), to withdraw that consent at any time without affecting processing already carried out.

To exercise any of these, contact us at hello@ceefit.co.uk. We will respond within one month. You also have the right to complain to the ICO (ico.org.uk), though we’d appreciate the chance to put things right first.

8. How long we keep it

We keep your account and coaching records for as long as you are a client and for a reasonable period afterwards, and longer where the law requires (for example, financial records for up to seven years). Waitlist details are kept until you ask us to remove them or we close the waitlist. Assessment photographs are kept only as long as needed for your programme, and deleted on request.

9. Security

Access to your data is restricted, transmitted over encrypted connections, and protected by authentication and access controls. No online service can be guaranteed perfectly secure, but we take appropriate technical and organisational measures to protect your information, and we will notify you and the ICO of any breach where we are required to.

10. Children

Ceefit is intended for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we’ll change the “last updated” date above, and for significant changes we’ll let you know directly.

12. Contact

Questions about this policy or your data? Email hello@ceefit.co.uk.