Effective Date: 1st September 2025
Data Controller: Seamus Casey, SKC Fitness, Ballysadare, Co. Sligo | Email: caseyseamus@outlook.ie | Phone: 085-878-9493

At SKC Fitness we are committed to protecting your personal data and your child's data in line with GDPR and the Data Protection Act 2018.

1. WHAT WE COLLECT

• Parent/Guardian: Name, phone number, email address.

• Child: First name, surname, date of birth, age.

• Health Data: PAR-Q / Physical Activity Readiness Questionnaire including medical conditions, injuries, medications, and emergency contact details. This is special category data.

• Booking & Payment: Class attendance, payment method (cash on site, bank transfer, Revolut). We do not store card details.

• Media: Photos and videos taken during classes/camps.

• Website: Anonymous analytics via Squarespace.

2. WHY WE COLLECT IT & LEGAL BASIS

• To provide safe Strength & Conditioning training - Contract

• To ensure health & safety and assess suitability to train - Vital Interests & Legal Obligation (PAR-Q)

• To contact you about bookings - Legitimate Interest

• To post photos/videos - Consent (via PAR-Q checkbox). You can withdraw consent anytime.

• For website analytics - Legitimate Interest

3. PHOTOS & VIDEOS
We regularly take photos and short videos (including Reels/TikToks) during classes/camps for use on:
Instagram (@skc_fitness), Facebook, TikTok (@skc_fitness), our website skcfitness.ie, and printed/digital flyers.

• We will ONLY use images of your child if you tick YES to media consent on the PAR-Q/booking form.

• Consent is optional and not a condition of attendance.

• We never identify children by full name and never sell images to third parties.

• If you withdraw consent by emailing caseyseamus@outlook.ie, we will stop using new images and delete existing images/videos from our website and social media including TikTok within 30 days. Printed materials already distributed cannot be recalled.

4. HOW LONG WE KEEP DATA

• General booking info: 12 months after last attendance.

• PAR-Q / Health Forms: 7 years after last attendance, or until the child reaches 21 years of age, whichever is longer. This is required for insurance and legal defence for minors.

• Photos/videos with consent: Retained until consent is withdrawn.

• Enquiries not booked: 6 months.

5. WHO WE SHARE WITH
We do not sell your data. We share only where necessary:

• Squarespace (website host)

• Insurance provider if an incident occurs

• Revenue / legal authority if required by law

6. YOUR RIGHTS
You have the right to access, correct, restrict, or delete your data (except where we have a legal obligation to retain PAR-Q forms). To exercise rights, email caseyseamus@outlook.ie. You also have the right to complain to the Data Protection Commission (dataprotection.ie).

7. CHILDREN
Our services are for ages 10-16. All data for children is collected from a parent/legal guardian only. No child can book directly.

8. SECURITY
PAR-Q forms are stored securely in a locked location and/or password-protected digital file. Only Seamus Casey has access.

9. PAYMENTS
Cash is accepted on site. No cash details are stored.

Contact for all privacy matters: caseyseamus@outlook.ie