Privacy notice

Who is responsible

Calum Fraser, trading as Calum Fraser Fitness and The Legal Edge, Galway, Ireland, is the controller for information used to respond to enquiries about our coaching. Contact calumfraserfitness@gmail.com for privacy questions or to exercise your rights.

What this website collects

This marketing website has a firm brochure request form and does not include an advertising pixel or analytics script. Our hosting providers process connection information such as IP addresses, browser information and request times to deliver the site and protect it. If you email us, we receive your address, message and anything you choose to include.

Booking a strategy call opens Calendly. It may collect your name, email address, appointment information and answers you submit. The Blueprint opens a separate opt-in site that collects the details shown on its form, including contact information and consent choices. Read the notices on those services before submitting information. Please avoid sending blood results, genetic reports or other sensitive health information through a general enquiry.

Firm brochure requests

We collect the company, role, email address and phone number you submit to provide the requested brochure and respond about a potential firm programme. These details are saved in our Supabase-backed Legal Edge CRM and a follow-up task is created. This is handled directly; it does not require Zapier. Request identifiers and a daily hashed network identifier support retry handling and abuse prevention. The form does not enrol you in marketing email or SMS campaigns. The lawful basis is taking steps at your request before a potential contract (Article 6(1)(b) GDPR). Enquiry records are reviewed for deletion when no longer needed; limited request logs are reviewed for deletion after their security and retry purpose has passed.

Why we use information

We use enquiry and booking information to respond to your request, arrange a conversation and discuss a possible coaching service. Where you ask about entering a coaching agreement, the basis is taking steps at your request before a contract (Article 6(1)(b) GDPR). Routine business correspondence and site security rely on legitimate interests (Article 6(1)(f)): responding to enquiries and operating a reliable, secure service. You can object to processing based on legitimate interests.

Marketing by email or SMS must follow the choices made on the relevant opt-in form and applicable marketing rules. You can withdraw consent or unsubscribe at any time without affecting processing already carried out. Booking a call does not itself sign you up for marketing.

Who receives information

Providers involved in the requested service may process relevant information, including our website hosting providers (Sites and Cloudflare), Calendly for booking, and our email provider for correspondence. The linked Blueprint and CRM workflow uses Supabase, Zapier, Google Sheets and email services to handle submitted lead information. Access should be limited to people and providers who need it for the relevant purpose. We do not sell your information.

International processing

Some providers operate outside the European Economic Area. The location and safeguards depend on the provider and service used. You can ask us for details of the relevant destination and transfer arrangements before supplying information. A transfer must have an applicable GDPR safeguard, such as an adequacy decision or standard contractual clauses; this notice does not replace the obligation to verify those arrangements.

How long information is kept

Enquiry and appointment information is kept while your request is active and for as long as reasonably needed for related correspondence, resolving a dispute or meeting a legal obligation. Marketing information is kept while there is a valid basis for contacting you. A minimal suppression record may be retained after an opt-out to avoid contacting you again. Retention depends on the purpose and whether you become a client; ask us for the period applicable to your information.

Health information and firm programmes

Client coaching, wearable connections, lab testing and genetic information require a separate onboarding notice and appropriate consent where required, including a valid Article 9 condition for special-category data. A strategy-call booking is not consent to those activities. A firm pilot must explain what the employer receives before participants join; individual health records and private coaching conversations should not be disclosed to an employer as routine programme reporting.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information, object to processing, and withdraw consent. Contact us using the email above. We may need proportionate identity verification and will normally respond within one month. You may complain to the Irish Data Protection Commission, or your competent supervisory authority.

Cookies and external services

This site does not add advertising or analytics cookies. Essential security or access cookies may be used by the hosting platform. Following a link to LinkedIn, Calendly or the Blueprint takes you to that service, where its own cookies and privacy information apply. The coaching video is hosted locally on this site.

Changes and contact

We update this notice when the website or processing changes. The date above identifies this version. Contact us if you need an accessible copy or more detail before providing information.