What I do with
your information.

Who is responsible

Matteo Magagnin, a sole trader based in London, is the data controller for the information described here. You can reach me at matteomagagnin89@gmail.com about anything on this page.

What I collect

When you get in touch: your name, email address, and whatever you choose to tell me about your goals.

If you book training: contact details, your training history, a baseline assessment including body composition and movement screening, and the records of your sessions.

If you book a test: all of the above, plus a health screening questionnaire, your resting blood pressure, body composition, and the physiological data the test produces — your expired air measurements, heart rate and, for the lactate package, blood lactate values.

If you pay online: Stripe processes the payment. I see that a payment was made and who made it. I never see or hold your card details.

Health information is treated differently

Your health screening answers and test results are special category data under UK data protection law, which means they get stronger protection than an email address does. I rely on your explicit consent to hold and use them, which I ask for separately and in writing before any testing takes place.

You can withdraw that consent at any time. If you do, I will stop consent-based processing and respond to your deletion request, subject to any applicable legal retention requirements. Without the necessary health information I may be unable to safely train or test you.

Why I hold it

• To deliver what you have paid for — writing your programme, running your test, producing your report.
• To keep you safe — the health screen exists so I know whether a maximal test is appropriate for you, or whether you should see your GP first.
• To compare results over time — a re-test only means something next to the first one.
• Because I have to — tax and accounting records have their own legal retention periods.

Who else sees it

Very few people, and never for marketing.

• Laboratory facilities providers — if a provider needs booking or laboratory information, I explain who they are and what information is needed before booking.
• Stripe — processes payments and holds the payment record.
• My email provider — because our correspondence sits in an inbox.
• Your own coach, GP or anyone else — only if you ask me to, and only what you ask me to send.

I do not sell your data. I do not share it with advertisers. I do not use it to train anything.

How long I keep it

My current practice is to retain client records for ongoing coaching and comparison of results until a client requests deletion. You can make that request by email at any time. Records needed for legal or accounting purposes may need to be kept separately. Enquiries that never become bookings are deleted within twelve months. A documented retention schedule is being reviewed; records should not be kept longer than needed for their purpose.

This website and your enquiry

The website code includes no analytics, advertising pixels or cookies. Fonts and images are served with the site. The hosting platform may process IP addresses, access logs and authentication data to serve and protect the website; private previews require platform sign-in.

The enquiry builder works in your browser. It does not upload or save your draft to this website. When you choose Gmail, Outlook or your email app, your draft is passed to that provider so you can review and send it. A copy button copies the draft to your clipboard. Do not include medical history or sensitive health information in an initial enquiry.

When you send an email, your chosen email provider and my email provider process the message. Your contact details and enquiry are used to respond to your request and discuss the service you have asked about. There is no automated decision-making or mailing-list signup.

External links to Instagram, LinkedIn, research papers and email services take you to those providers, whose privacy terms apply. Where a provider processes information outside the UK, its own terms and safeguards apply. Contact me with any questions about the providers used for your booking.

Your rights

Under UK data protection law you can ask me to:

• Show you what I hold about you, and give you a copy.
• Correct anything that is wrong.
• Delete it.
• Send it to you, or to someone else, in a portable format.
• Stop or limit what I do with it.
• Withdraw consent for anything you previously agreed to.

Email me and I will respond within one month. There is no charge for any of this.

If you think I have handled your information badly, please tell me first so I can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk, and you do not need my permission to do so.

Changes to this notice

If this notice changes in a way that affects you, I will tell the people it affects rather than quietly updating the page.