Privacy Policy

1. Who We Are

FitPages is a fitness professional directory operated in the United Kingdom. Our website is getfitpages.com. For the purposes of data protection law, we are the data controller for personal data processed through this website.

If you have questions about how we handle your data, please contact us.

2. What Data We Collect

Directory profile data

We collect and display publicly available business information sourced from the Google Places API, including: business name, address, phone number, website, opening hours, Google ratings and review counts, business categories, and photos. This is publicly available business information, not personal data in most cases.

Account data (claimed profiles)

When you claim a profile, we collect: your email address (used for authentication and communication). You may also choose to add a description, specialties, and contact details to your profile.

Enquiry data

When a consumer submits an enquiry through a profile page, we collect: their name, email address, phone number (optional), and message. This data is stored to facilitate contact between consumers and professionals.

Claim request data

When you submit a claim request, we collect: your name, email address, phone number (optional), and any message you include.

Contact form data

When you submit a message through our contact form, we collect: your name, email address, message category, and message content. This is used solely to respond to your enquiry.

Analytics data

We use Vercel Analytics to collect anonymised usage data including page views and general traffic patterns. This data does not identify individual users.

For profile view tracking, we create a one-way hash of visitor IP addresses combined with a salt. The original IP address is never stored. The hash is used solely to prevent duplicate view counts on the same day.

3. How We Use Your Data

We use the data we collect to:

• Display fitness professional profiles in our directory
• Authenticate claimed profile owners and enable them to manage their listing
• Forward enquiries from consumers to fitness professionals
• Process claim requests and verify profile ownership
• Send transactional emails (claim approval, enquiry notifications)
• Respond to contact form submissions
• Provide profile view statistics to claimed profile owners
• Improve the service through anonymised analytics

We do not sell your personal data to third parties. We do not use your data for advertising or marketing purposes beyond transactional communications related to your use of FitPages.

4. Lawful Basis

We process personal data under the following lawful bases (UK GDPR):

• Legitimate interest - displaying publicly available business information in a directory format, and anonymised view tracking for service improvement
• Consent - when you submit an enquiry, claim request, contact form, or create an account
• Contract - processing necessary to provide the service to account holders

5. Data Sharing

We share data with the following third-party services to operate FitPages:

• Supabase (database and authentication) - stores profile data, account data, enquiries, and claims. Hosted in the EU (eu-west-2).
• Vercel (hosting and analytics) - serves the website and collects anonymised traffic analytics.
• Resend (email) - sends transactional emails including claim approvals, enquiry notifications, and contact form submissions.
• Google Places API - source of publicly available business data displayed in profiles.

We do not share personal data with any other third parties for marketing or commercial purposes.

6. Data Retention

• Directory profiles - retained for as long as the business is active. Professionals can request removal at any time.
• Account data - retained for as long as the account is active. Deleted upon account closure request.
• Enquiries and claim requests - retained for 2 years, then deleted.
• View tracking hashes - retained for 90 days, then automatically purged.
• Contact form submissions - retained for 1 year, then deleted.

7. Your Rights

Under UK data protection law, you have the right to:

• Access - request a copy of the personal data we hold about you
• Rectification - request correction of inaccurate data
• Erasure - request deletion of your personal data
• Restriction - request that we restrict processing of your data
• Portability - request your data in a structured, machine-readable format
• Objection - object to processing based on legitimate interest

To exercise any of these rights, please contact us. We will respond within 30 days.

If you are a fitness professional or business owner and wish to have your profile removed from FitPages, please contact us and we will process your request promptly.

8. Cookies

FitPages uses essential cookies for authentication (session management for logged-in users). We use Vercel Analytics which collects anonymised usage data without placing tracking cookies.

We do not use advertising cookies, third-party tracking cookies, or social media tracking pixels.

9. Children

FitPages is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via the website.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Contact

For any privacy-related questions, please contact us.