Privacy policy
Last updated 30 July 2026
This explains what information the Exercise Prescription member hub holds about you, why, and what your rights are. It's written to be read, not skimmed past — if anything is unclear, ask.
The short version
- We keep the minimum we need to run your membership.
- We do not keep medical records in the hub — deliberately.
- We never sell your information, and there are no advertising trackers here.
- The only cookie we use is the one that keeps you signed in.
- You can ask to see, correct or delete your information at any time.
Who we are
The member hub is run by Exercise Prescription Limited (company number 13947123, registered in England and Wales; registered office: Basepoint Business Centre, Little High Street, Shoreham-by-Sea, BN43 5EG) — Tracey's company, operating from The Stray, South Cave, Hull, HU15 2AN. It is the “data controller”, the one responsible for looking after your information. If you have any question about your data, contact Tracey@exercise-prescription.co.uk.
What we hold about you
If you're a member, the hub holds:
- Your account: your name, email address, password (stored scrambled — we can't read it) and which membership you're on.
- Your activity in the hub: fitness goals and workout minutes you choose to record, videos you've watched, classes you've booked, and recipes or downloads you've favourited.
- Bookings: the dates and times of personal training sessions and consultations you book.
- Chat messages: what you type to the hub's chat assistants (see “The AI assistants” below).
- Payment status: whether your membership is paid up — but never your card number (see “Payments” below).
What we deliberately don't hold
Medical and clinical information is never stored in the hub. Many of our members live with health conditions, so this is a rule we designed in from the start, not an afterthought. Anything clinical you discuss with Tracey — health history, conditions, recovery notes — is held by Tracey separately, outside the hub, as part of her own client records. The hub also never sees or stores card numbers.
What we use your information for
To run your membership: signing you in, showing you the content your membership includes, running class bookings and personal training sessions, and keeping your fitness tracking working. That's it. We don't sell it, share it for marketing, or use it to build advertising profiles.
The companies that help us run the hub
Like almost every website, the hub is built on established services. Each one only receives what it needs to do its job:
- Supabase — holds the hub's database (your account and activity). Stored in [region — confirming with Supabase settings].
- Vercel — hosts the website itself.
- Vimeo — streams the workout videos.
- Zoom — runs the live classes and online PT sessions.
- Cal.com — handles session and consultation bookings (your name, email and appointment time).
- Anthropic — processes what you type to the chat assistants so they can reply.
- Stripe — will handle payments when card payment launches. Your card details will go directly to Stripe and never touch the hub.
Some of these companies are based in the United States. Where information leaves the UK, it's covered by the safeguards UK data-protection law requires (approved data-protection agreements with each provider).
The AI assistants
The hub includes chat assistants (like “Chat to Tracey”). What you type is sent to Anthropic, the company whose technology powers them, to generate the reply. These chats are for fitness and nutrition guidance — they're not medical advice, and it's best not to type detailed medical information into them. Anything important about your health belongs in a conversation with Tracey herself.
Cookies
One cookie, and it's the boring kind: it keeps you signed in. No advertising cookies, no tracking cookies, no third-party analytics. This is why there's no cookie pop-up on the hub — there's nothing to ask consent for.
How long we keep things
For as long as you have a membership. If you leave, or ask us to, we delete your account and the activity attached to it. Some payment records may need to be kept longer where tax law requires it.
Your rights
Under UK data-protection law (UK GDPR), you can ask us to:
- show you everything we hold about you,
- correct anything that's wrong,
- delete your information,
- or hand it over in a portable format.
Just ask — Tracey@exercise-prescription.co.uk. If you're ever unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes to this policy
If anything here changes meaningfully — a new service, a new use of your information — we'll update this page and let members know, not just quietly edit it.