Privacy notice
Last updated 8 September 2026.
The short version
Brand's Gym keeps your training records so your coach can do his job: your weigh-ins, measurements, any progress photos you choose to upload, the programme set for you, your session logs and your weekly check-ins. Only Conner Brand and the person who runs the server can see them. Nothing is sold, nothing is advertised to you, and nothing is shared with anyone else.
You can download everything we hold about you, or delete your account outright, from your account page. No email, no waiting.
Who is responsible
The data controller is TODO — Conner Brand / the gym’s registered company nameplaceholder. For anything about your data, contact hello@readyup.co.uk. ICO registration: TODO — not yet registeredplaceholder.
What is collected, and why
| What | Why |
|---|---|
| Name, email address, phone number | To create your account, log you in, and let your coach contact you |
| Date of birth, height | Context for programming and for reading your measurements sensibly |
| Weigh-ins, goal weight, body measurements | The tracking you signed up for — your progress over time |
| Injuries, conditions and medication | So you are not given exercises that could hurt you. This is health information — see the section below |
| Progress photos (optional) | Visual comparison over time. Entirely opt-in; leave it switched off and the section stays empty |
| Emergency contact name and number | So someone can be reached if you are hurt while training |
| Programme, session logs, weekly check-ins and replies | Coaching: what you were asked to do, what you did, and how it went |
| Your password | Stored only as a bcrypt hash. Nobody — including your coach — can read it or set it for you |
| Login records (time, device, address) | Security: so an unexpected login can be spotted, and sessions revoked |
| Your IP address in the server logs | Standard web-server logging, kept 14 days, then deleted |
Health information gets special treatment
The injuries and medication field, and any progress photos, are what the law calls special category data. That means they need your explicit consent, not just a legitimate reason — which is why the health field is optional, why photos have their own separate tick-box, and why you can withdraw either at any time by clearing the field or unticking the box on your profile.
Withdrawing consent does not delete what you already uploaded — use the delete controls for that, which remove the record and the underlying file.
Who sees it
- Conner Brand, as your coach — he can see everything you record
- Dan Dewey, as the person who runs the server, for maintenance and support
- Microsoft 365, if and when email is switched on, to deliver invites and check-in replies
That is the complete list. No analytics company, no advertiser, no other client, and no AI training.
Third-party content on the public pages
- Instagram (Meta) — gallery posts embedded on the home page load from Instagram and can set their cookies. The member area embeds nothing.
Cookies
One cookie, and only once you log in: a random session token that keeps you signed in. It is HTTP-only, sent only over HTTPS, and lasts 30 days. There is no analytics, no tracking and no advertising cookie anywhere on this site, which is why you are not being nagged by a consent banner.
How long things are kept
- Your training records: until you delete your account, or your coach archives it
- Server access logs (including IP): 14 days
- Encrypted backups: 21 days — so a deletion can take up to 21 days to disappear from every copy
- Unused invite links: 14 days, then they stop working
- Expired login sessions: cleared automatically
Where it lives
On a private server in the United Kingdom, not a public cloud account. Progress photos are stored outside the website itself and can only be fetched by you or your coach while signed in — they are not files anyone can stumble across with the right guess. Backups are encrypted and held on a separate machine.
Your rights
You can ask for a copy of your data, correct it, delete it, or withdraw consent — and for the first two you do not have to ask at all, because your account page does both instantly. You can also complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can fix it.
Children
Accounts are created by the coach, for coaching clients. If a client is under 18, a parent or guardian should set the account up with them and is welcome to see everything in it.