Last updated: 18 September 2026
1. About this Privacy Policy
Bangles & Barbells is a fitness and strength programme designed to support women through different stages of life and provide accessible, appropriate and inclusive strength-training experiences.
Bangles & Barbells is operated by Lisa Patel and Guljeet Purdue, who are self-employed individuals working together in partnership to deliver Bangles & Barbells programmes and services.
This Privacy Policy explains how we collect, use, store and share personal information when you:
visit our website;
register your interest in Bangles & Barbells;
purchase a Bangles & Barbells product or programme;
complete a Participant & PAR-Q Form;
participate in a Bangles & Barbells workshop or programme;
communicate with us;
consent to marketing or third-party contact; or
otherwise interact with Bangles & Barbells.
Our website is hosted and operated using Podia, which provides the website and online business platform we use.
We are committed to handling your personal information responsibly and in accordance with applicable UK data protection and privacy law.
Our contact details are:
Bangles & Barbells
Lisa Patel and Guljeet Purdue
Unit 173062, PO Box 6945
London
W1A 6US
Email: info@banglesandbarbells.co.uk
2. Who is responsible for your personal information?
Bangles & Barbells, operated by Lisa Patel and Guljeet Purdue, is responsible for determining how and why we collect and use personal information for our own products, programmes and services.
Where we use third-party service providers to process information on our behalf, we remain responsible for determining the purposes for which your information is collected and used.
Some third-party providers may also process personal information in their own capacity for purposes connected with their own services. Their own privacy policies will apply to that processing.
3. What information we collect
The information we collect depends on how you interact with Bangles & Barbells.
This may include:
Contact and identification information
full name;
email address;
date of birth;
contact details; and
information you provide when communicating with us.
Purchase and transaction information
When you purchase a Bangles & Barbells product or programme, we may receive information about the transaction, such as:
the product or programme purchased;
date of purchase;
payment status;
transaction reference; and
information needed to administer your purchase.
Payment card details are processed by our payment provider, Stripe. We do not normally receive or store your full payment card details.
Participant and PAR-Q information
If you participate in a Bangles & Barbells workshop or programme, we may collect information through our Participant & PAR-Q Form.
This may include:
information about your general health;
heart conditions or blood pressure;
chest pain or discomfort;
dizziness or loss of consciousness;
medical conditions;
prescribed medication where relevant to exercise;
injuries;
ongoing pain;
physical limitations;
surgery;
pregnancy;
breastfeeding;
recent childbirth;
medical or healthcare advice relating to physical activity; and
information about anything else that may affect your ability to exercise safely.
Women's health information
Because Bangles & Barbells is designed specifically around women's strength training, you may also choose to provide information relating to:
menstrual cycle changes;
perimenopause;
menopause;
menstrual or reproductive health conditions;
symptoms that may affect exercise; and
hormonal or reproductive health considerations.
Examples of conditions that participants may choose to disclose include endometriosis, adenomyosis, PCOS, fibroids or PMDD.
Providing this information is optional.
We collect this information to help us understand relevant training considerations and provide an appropriate exercise experience.
We do not use women's health information for marketing purposes.
Photography and video
We may take photographs or videos during Bangles & Barbells activities.
We will ask separately whether you consent to photographs or videos of you being used for promotional purposes.
You do not have to provide consent for promotional use in order to participate in Bangles & Barbells.
Marketing preferences
We may collect information about whether you have opted in or opted out of:
Bangles & Barbells marketing;
photography and promotional use;
contact from a named partner venue; and
other specific communications for which we request your consent.
4. How we use your information
We use personal information for purposes including:
Providing our products and programmes
We may use your information to:
process and administer purchases;
register you for a workshop or programme;
communicate with you about your booking;
provide information about the programme;
manage attendance;
communicate changes or important information;
deliver and administer Bangles & Barbells services; and
provide customer support.
Participant safety and exercise screening
Information provided through the Participant & PAR-Q Form may be used to:
assess whether there are any issues that need to be considered before participation;
identify appropriate exercise modifications;
understand relevant injuries, limitations or health considerations;
contact you if we need further information;
ask you to seek appropriate medical advice where necessary; and
support the safe delivery of the programme.
Completion of a PAR-Q does not automatically guarantee participation.
Where your answers raise concerns, we may contact you before the programme and may, where appropriate, ask you to provide further information or obtain medical advice before participating.
Women's health and training
Where you voluntarily provide women's health information, we may use it to help us:
understand your training needs;
consider appropriate modifications;
understand how different stages of women's health may affect training; and
provide relevant education or exercise guidance during the programme.
This information is not used to make marketing decisions about you.
5. Health and special category information
Some information collected through our Participant & PAR-Q Form may constitute special category personal data under UK data protection law, including information concerning health.
We only collect health information that is relevant to assessing participation, supporting exercise safety and delivering an appropriate programme.
Where we ask you to provide health information, we will explain why it is being collected and how it will be used.
Our Participant & PAR-Q Form includes a specific acknowledgement and consent relating to the collection and processing of health information.
Health information will only be accessible to those who need it for legitimate Bangles & Barbells purposes, such as participant screening, safety and programme delivery.
We do not use health information for advertising or marketing.
We do not share your PAR-Q, medical information, injuries, medication information or women's health information with partner venues for their marketing purposes.
Where a venue needs limited participant information for operational purposes such as access, attendance or health and safety, we will only provide information that is reasonably necessary for that purpose.
6. Our lawful bases for processing personal information
We process personal information using the lawful basis that is appropriate for the particular purpose.
Depending on the circumstances, this may include:
Contract
We may process information where it is necessary to provide a product, programme or service that you have purchased or requested.
This can include processing your booking, communicating with you about the programme and administering your participation.
Legitimate interests
We may process information where this is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.
Our legitimate interests may include:
administering and improving our programmes;
communicating with customers about their participation;
managing our business;
maintaining appropriate records;
preventing misuse or fraud;
maintaining appropriate health and safety processes; and
understanding how our programmes are used and improving them.
Where we rely on legitimate interests, we consider whether the processing is necessary and whether your rights and interests are adequately protected.
Legal obligations
We may process personal information where necessary to comply with a legal or regulatory obligation.
Consent
Where we rely on consent, we will ask you to provide a clear and positive indication of your consent.
This may include consent for:
certain marketing communications;
photography or video for promotional purposes;
processing certain health information where consent is the applicable lawful basis; or
sharing your name and email address with a specifically named partner venue for that venue's own marketing.
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew it.
7. Marketing communications from Bangles & Barbells
We may contact you about Bangles & Barbells products, programmes, workshops, events and services.
Where consent is required, we will ask you to actively opt in.
Where permitted by applicable electronic marketing rules, we may also contact existing customers about our own similar products or services where the relevant conditions for this type of marketing are met and you have been given a clear opportunity to opt out.
You can unsubscribe from Bangles & Barbells marketing communications at any time.
Every marketing communication will provide an appropriate way to stop receiving further marketing communications.
Your decision about marketing communications does not affect your ability to purchase or participate in Bangles & Barbells products or programmes, except where a particular communication is necessary to administer your booking or participation.
8. Partner venues and third-party opportunities
Bangles & Barbells works with gyms, studios and other venues to facilitate certain in-person programmes.
The venue may need access to limited participant information, such as your name, where this is necessary for purposes such as:
venue access;
attendance;
health and safety;
administration of the programme; or
other operational requirements directly connected with the delivery of the session.
The venue provides the location or facilities for the programme and does not provide or assume responsibility for the Bangles & Barbells product, programme or coaching.
In some cases, we may work with a venue because it provides services that may allow participants to continue their fitness journey after completing a Bangles & Barbells programme.
Venue marketing
If we would like a specific venue to contact you about its own memberships, classes, facilities, products or services, we will provide a separate and specific opportunity for you to consent to this.
The consent will identify the relevant venue by name.
For example, the consent may ask:
"Would you like [VENUE NAME] to contact you about its memberships, classes, facilities or other relevant services?"
If you select Yes, you consent to Bangles & Barbells sharing the information specified at the point of consent, such as your name and email address, with that named venue for that purpose.
We will not treat:
your consent to Bangles & Barbells marketing;
your participation in a Bangles & Barbells programme; or
your completion of a PAR-Q
as consent to receive marketing from a venue.
Your health information will not be shared with a venue for marketing purposes.
You can withdraw your consent to venue marketing at any time by contacting the venue or Bangles & Barbells.
9. Podia — our website and online platform
Our website is hosted and operated using Podia, a website and online business platform provided by Podia Labs, Inc.
Podia provides the technology used to host our website and may process personal information on our behalf where this is necessary to provide its services to us.
This may include information associated with your use of our website, account or interactions with features provided through the Podia platform.
Where Podia processes personal information on our behalf, it does so as a service provider/processor in accordance with the applicable arrangements between Podia and Bangles & Barbells.
Podia may also process certain personal information in its own capacity in connection with its operation, security, support and provision of its platform and services.
Podia's own Privacy Policy therefore applies to processing for which Podia is acting as the controller.
Podia provides its own Privacy Policy explaining how it handles personal information in connection with its services. We encourage you to review it where relevant.
Podia also provides a Data Processing Addendum for customers who act as controllers of personal information subject to applicable data protection requirements.
We do not rely on Podia's Privacy Policy as a replacement for this Privacy Policy. This Privacy Policy explains how Bangles & Barbells collects and uses your information in connection with our own products, programmes and services.
Where another third party processes your information for its own purposes, its own privacy policy may also apply.
10. Information shared with other service providers
We use selected third-party service providers to help us operate Bangles & Barbells.
These may include:
Stripe
Stripe processes payments made for Bangles & Barbells products and programmes.
Payment information is processed in accordance with Stripe's own privacy and security practices.
We do not normally receive or store your full payment card details.
Typeform
We use Typeform to collect information through forms, including our Participant & PAR-Q Form.
This may include sensitive health information where participants choose or are required to provide it.
Typeform processes this information on our behalf in accordance with the applicable service arrangements and security measures.
MailerLite
We use MailerLite to manage email communications, marketing contacts and mailing lists.
Your information may be transferred to MailerLite where this is necessary to provide the relevant communication or marketing service.
Zapier
We may use Zapier to automate the movement of information between systems.
Where Zapier is used, only information necessary for the relevant automation should be transferred.
Partner venues
We may share limited participant information with the venue hosting a programme where this is necessary for operational purposes such as access, attendance, administration or health and safety.
Where you have specifically opted in to a named venue's marketing, we may also share the information covered by that consent, such as your name and email address.
We do not share your PAR-Q or health information with venues for marketing purposes.
Other service providers
We may also use other trusted service providers where necessary to operate our business, provide our services, maintain our website, communicate with customers, process information or meet our legal obligations.
Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security arrangements are in place.
11. Information we may receive from other sources
We normally collect personal information directly from you.
In some circumstances, we may receive limited information from:
a partner venue;
a booking or payment platform;
a service provider;
an individual making a booking on your behalf; or
another source where this is lawful and necessary for the relevant purpose.
Where we receive personal information from another source, we will handle it in accordance with applicable data protection requirements.
12. Cookies and website technologies
Our website is operated using Podia and may use cookies and similar technologies provided by Podia and/or other services or integrations that we enable.
Some cookies may be necessary for the website or services to function.
Other cookies or technologies may be used for purposes such as:
remembering preferences;
understanding how visitors use the website;
improving website performance;
measuring the effectiveness of our communications; or
other analytics or marketing purposes.
The precise cookies and technologies used may change as our website and services develop.
Where consent is required for non-essential cookies or similar technologies, we will request consent in accordance with applicable law.
You can also manage certain cookie settings through your browser or any cookie-management tools provided on the website.
Podia may also process information through cookies and similar technologies as part of operating its own platform. Further information about Podia's own use of tracking technologies can be found in Podia's Privacy Policy.
13. Data retention
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, insurance, dispute-resolution and reporting requirements.
Different types of information may be retained for different periods.
In determining how long information should be retained, we consider:
the purpose for which it was collected;
whether we continue to have an ongoing relationship with you;
whether the information is needed to provide or evidence a service;
legal, accounting or regulatory requirements;
insurance requirements;
potential disputes or claims; and
whether the information can be securely deleted or anonymised.
Health and PAR-Q information will not be retained indefinitely and will be reviewed in accordance with our data retention practices.
When personal information is no longer required, we will securely delete it or anonymise it where appropriate.
14. How we protect your information
We take reasonable technical and organisational measures to protect personal information against:
unauthorised access;
loss;
misuse;
alteration;
disclosure; and
destruction.
Access to personal information is limited to people and service providers who need it for legitimate business or programme purposes.
No method of transmitting or storing information online can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable steps to protect the information we hold.
15. International transfers
Some of the service providers we use may process or store personal information outside the UK.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place where required.
Depending on the circumstances, this may include:
a UK adequacy regulation or applicable adequacy decision;
appropriate contractual safeguards;
an applicable international data-transfer mechanism; or
another lawful transfer mechanism.
Podia states that its services and service providers may involve processing or hosting personal information in the United States and other countries. Where Podia processes personal information on our behalf, the applicable data-processing arrangements and transfer safeguards will apply.
Further information about applicable safeguards may be available from the relevant service provider or from us on request.
16. Your data protection rights
Depending on the circumstances and the lawful basis for processing, you may have rights under UK data protection law, including:
the right to access your personal information;
the right to have inaccurate information corrected;
the right to request deletion of personal information in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to certain processing;
the right to data portability in certain circumstances; and
the right to withdraw consent where processing is based on consent.
You may also have specific rights relating to direct marketing.
Where we rely on consent, you can withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew it.
You can make a request by contacting:
We may need to verify your identity before responding to certain requests.
We will normally respond within the timeframe required by applicable data protection law.
17. Direct marketing and your right to object
You have the right to object to the processing of your personal information for direct marketing purposes.
If you no longer want to receive Bangles & Barbells marketing communications, you can unsubscribe using the option provided in our communications or contact us directly.
If you have separately consented to a named partner venue contacting you, you can also withdraw that consent by contacting the venue or Bangles & Barbells.
Your decision not to receive marketing will not affect your access to services you have purchased or your participation in a Bangles & Barbells programme.
18. Children and age restrictions
Bangles & Barbells programmes covered by this Privacy Policy are currently available only to people aged 16 and over.
We do not knowingly invite people under 16 to register for or participate in these programmes.
Our website may be accessible to people of different ages, but our programme participation requirements remain 16+.
If we become aware that we have collected personal information from someone under 16 in connection with a programme where they were not eligible to participate, we will take appropriate steps to address this.
19. Automated decision-making and profiling
We do not currently make decisions about participants based solely on automated processing or profiling that produce legal or similarly significant effects.
Where this changes, we will update this Privacy Policy and provide any information required by applicable data protection law.
20. Complaints
If you have a concern about how we have handled your personal information, please contact us first:
We will aim to understand and resolve your concern.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).
Information about making a complaint is available through the ICO's website.
21. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
changes to our products or services;
changes to how we process personal information;
changes to the technology or service providers we use;
changes to applicable law or regulatory requirements; or
other changes to our business.
We will update the "Last updated" date at the top of this Privacy Policy when changes are made.
Where a change materially affects how we use personal information, we will take appropriate steps to bring the change to your attention before starting the new processing where required.
22. Contact us
If you have any questions about this Privacy Policy, how we use your information, or how to exercise your data protection rights, please contact us.
Bangles & Barbells
Lisa Patel and Guljeet Purdue
Unit 173062, PO Box 6945
London
W1A 6US