Privacy Policy

TH Hub ("we", "us", "our") operates the website thhub.co.uk and the TH Hub mobile application. We provide personal training and nutrition coaching services.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, TH Hub is the data controller responsible for your personal data.

If you have any questions about this privacy policy or how we handle your data, please contact us through thhub.co.uk.

We collect and process the following categories of personal data:

Account Information

• Full name
• Email address
• Account password (encrypted)
• Account role (client or coach)

Health & Fitness Data (Special Category Data)

• Body weight and weight history
• Progress photographs (front, side, back)
• Weekly check-in data including sleep quality, energy levels, stress levels, appetite, recovery, and gym performance
• Weight loss/gain goals and target dates

Nutrition & Activity Data

• Daily food logs (food names, calories, macronutrients)
• Meal plan adherence and completion data
• Water intake tracking
• Cardio activity logs (type, duration, steps)
• Workout completion and exercise tracking

Communications

• Messages exchanged between you and your coach

Technical Data

• Device tokens for push notifications (mobile app only, with your consent)
• Cookies and similar technologies (see our Cookie Policy)

We use your personal data for the following purposes:

• Providing our coaching service: creating and managing your account, delivering personalised meal plans and workout programmes, tracking your progress, and facilitating communication with your coach.
• Improving our service: understanding how our platform is used to improve features and user experience.
• Service communications: sending check-in reminders and important updates about your account.

We process your personal data under the following legal bases as defined in the UK GDPR:

• Contract performance (Article 6(1)(b)): Processing is necessary to provide you with our coaching service, including managing your account, delivering meal plans and workout programmes, and facilitating coach-client communication.
• Legitimate interests (Article 6(1)(f)): We have a legitimate interest in improving our services and ensuring the security of our platform.
• Explicit consent (Article 9(2)(a) — special category data): Health-related data (weight, progress photos, wellness check-in information) is classified as special category data under UK GDPR. We process this data based on your explicit consent, which you provide when you voluntarily submit this information through the platform. You may withdraw consent at any time by contacting us or deleting the relevant data from your account.

We do not sell, rent, or trade your personal data to any third parties.

Your data may be shared with:

• Your assigned coach: Your coach can view your nutrition logs, workout progress, check-in data, progress photos, goals, and messages in order to provide you with coaching services.
• Firebase (Google Cloud):We use Google Firebase to host our application, authenticate users, store data, and store uploaded images. Firebase processes data in accordance with Google Cloud's data processing terms. Data may be transferred to and processed in countries outside the UK, with appropriate safeguards in place.

We retain your personal data for as long as your account is active and you are using our services. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it for longer.

Anonymised or aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of all personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure:You can request deletion of your personal data ("right to be forgotten").
• Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
• Right to object: You can object to processing based on legitimate interests.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us through thhub.co.uk. We will respond to your request within one month.

Payments for our coaching services are handled offline via bank transfer or cash. We do not collect, process, or store any payment card details through our website or app.

We take appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted password storage
• Role-based access controls (clients can only access their own data)
• Secure cloud infrastructure provided by Google Firebase

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child under 18, please contact us immediately.

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: www.ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.