Privacy Notice

• Contact & booking details (name, email, phone, emergency contact) — to arrange sessions and communicate with you. Lawful basis: performance of our contract with you.
• Payment information (handled by Stripe — we receive limited data such as amounts, price IDs, receipts and a Stripe customer id; we do NOT store full card numbers). Lawful basis: performance of our contract and legal obligations (tax and accounting).
• PAR-Q health information (answers to the readiness questionnaire, medical notes you share with us, signed declaration). Lawful basis: your explicit consent collected in the PAR-Q form. You can withdraw it at any time by writing to us — see section 6.
• Booking data from Calendly (session times, cancellations, booking preference). Lawful basis: performance of our contract.
• Website use — minimal server logs required to run the site securely. Lawful basis: legitimate interests (security and diagnostics).

We use trusted service providers to run the business. Each is a data processor under our instructions:

• Stripe — payments, subscriptions and checkout consent capture. Stripe holds card details; we do not.
• Calendly — session scheduling and reminders.
• Supabase — our database, authentication and file storage.
• Resend — transactional email delivery (booking confirmations, enquiry notifications). Resend receives only the details needed to send the message.
• Private operational tracker (Google Sheet, "Relay") — Jayke uses a private Google Sheet as a personal client tracker. Only non-health data is synced there: your name, email, latest package, credits, expiry, booking status and Calendly identifiers. Your PAR-Q answers and other health information are never sent to Relay, to analytics or to email.

Some of our processors (Stripe, Calendly, Supabase, Resend, Google) store or process data outside the UK. Where they do, we rely on the UK's approved safeguards — International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses, along with additional technical measures such as encryption.

PAR-Q answers are stored in a separate secured table with restricted access. Only Jayke Izli and named administrators of Layer Wellness Limited can view them, and only for training and safety purposes. Health data is never included in the Relay tracker, in analytics or in email notifications; notification emails only reference a submission ID and the client's contact email, never their answers.

We keep your data for as long as we need it for the purposes above. In practice:

• PAR-Q answers and training notes: kept for as long as you are an active client and for a reasonable period afterwards for safety, dispute-handling and record-keeping.
• Payment records: kept for at least six years to meet UK tax and accounting obligations.
• Booking records: kept while relevant to your account, then deleted or anonymised.

When data is no longer needed, we delete or anonymise it.

Under UK GDPR you have the right to access, correct, or ask us to delete your data; to restrict or object to certain processing; to withdraw a consent you gave us (for example for PAR-Q health data); and to ask for a copy of your data in a portable format. Withdrawing consent doesn't affect processing we already carried out lawfully.

To exercise any of these rights, email izlipersonaltraining@outlook.com.

If you're not happy with how we've handled your data, we'd like a chance to fix it — please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.