1. Who we are
Ace Lifestyle Ltd (company number 10281695, registered in England & Wales) operates this website and provides nutrition coaching and personal training services. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for any personal information you share with us.
You can contact us at info@ace-lifestyle.com for any privacy or data-protection question.
2. What information we collect
We collect the following types of personal information:
- Information you give us: name, email address, phone number, and anything you share in the enquiry form or intake questionnaire (including health and fitness details).
- Information from your use of our services: check-in notes, progress photos (only if you share them), training and nutrition data you upload.
- Information collected automatically: basic browser and device data (IP address, browser type, pages visited) via analytics cookies. See our Cookie Policy for detail.
3. Why we collect it and our lawful basis
We use your personal data for these purposes:
- To provide our coaching services (lawful basis: contract performance) - designing your plan, running check-ins, delivering workouts and nutrition guidance.
- To communicate with you about your programme, booking or enquiry (lawful basis: contract / legitimate interests).
- To send marketing emails about our programmes, community, and tips (lawful basis: consent - you can unsubscribe at any time).
- To comply with legal and regulatory obligations (lawful basis: legal obligation).
- To improve our website and services using aggregated analytics (lawful basis: legitimate interests).
4. Health data
To build your plan safely, we sometimes collect health information (injuries, pregnancy, medical conditions, medications). This is special-category data under UK GDPR and we rely on your explicit consent to process it. You can withdraw that consent at any time - though doing so may mean we can't continue coaching you safely.
5. Sharing your information
We don't sell your data. We share it only with service providers that help us run our business:
- Kit (formerly ConvertKit): email marketing platform that holds your subscription, sends our newsletters and programme follow-ups
- Resend: transactional email service we use to deliver booking confirmations, downloads and questionnaire receipts
- Vercel: website hosting and edge infrastructure (USA, with Standard Contractual Clauses for international transfer)
- Google Analytics 4: aggregate, consent-gated website analytics
- Microsoft Clarity: aggregate, consent-gated user-experience analytics (no personally identifiable session replay)
- Skool: community platform where the ace community lives (optional, only if you join)
- Payment providers: Stripe (online card payments via our booking platforms). We never see or store your full card details
- Professional advisers: accountants and legal counsel, where required by law
All processors are contractually required to handle your data in line with UK GDPR.
6. How long we keep your data
We keep your data for as long as you're an active client, plus up to 7 years after your last programme ends (for tax, accounting and insurance purposes). Marketing consent is kept only for as long as you remain subscribed.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Ask us to delete your data (where legally possible)
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time
To exercise any of these rights, email info@ace-lifestyle.com. We'll respond within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. International transfers
Some of our service providers are based outside the UK/EEA (mainly the US). When they are, we make sure transfers are protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent standard contractual clauses.
9. Security
We use industry-standard measures to keep your data secure, including encrypted connections, access controls and regular reviews. No online service is 100% secure, but we take security seriously.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top tells you when. If we make material changes, we'll notify active clients by email.