1. Who is responsible
Joanna Dymerska is a sole trader trading as Alpha Body and is responsible for the personal information used to answer enquiries and arrange her coaching and sports massage services. Contact contact@alphabody.uk about this notice or your information. Messages to this address are forwarded to the Alpha Body Gmail mailbox.
Current website: you can send an enquiry, verify your email with an access code, book a free consultation or an agreed session with active client access, and view upcoming appointments, including weekly sessions arranged with Joanna. This notice describes those functions and the connected business email and calendar services.
2. Information and purposes
The enquiry form collects your name, email address, chosen service and message, plus a telephone number if you choose to provide one. It sends your enquiry to Alpha Body’s business mailbox so Joanna can reply, discuss services and agree arrangements. If you email or use a linked social platform, Joanna receives the contact details, message and any attachments you choose to send.
Online booking uses your name, verified email address, mobile number, chosen service, date, time and venue. Paid-session bookings also record your cash or Monzo preference. The website checks published availability and calendar busy periods, records the booking request and claim to the time, and links the booking to your verified customer identity so you can check or cancel it.
Joanna keeps a client record with your name, email address, supplied mobile number, invitation delivery status and client access status. Verifying the invited email links that record to your customer identity; active client access is required to make a new paid booking. These contact details may prefill the booking form.
Weekly appointments agreed with Joanna are recorded with the client reference, service, venue, repeating dates and times, and calendar identifiers. Changes and individual cancellations are recorded so you can view and cancel your upcoming appointments through client access.
Cloudflare’s application database stores these client, booking, weekly appointment and verification records. Enquiry security and delivery records contain hashes of the email address, IP address and request, together with submission status and a delivery reference where available. The enquiry form’s name, contact details and message are not stored as readable form content in that database; the full enquiry is delivered to the business mailbox.
Hosting and security providers process technical request information, such as IP addresses, browser information and access logs, to deliver and protect the website. The website does not ask visitors to complete a public health questionnaire.
Please avoid sending detailed medical records, financial details or sensitive documents in an initial enquiry. If health information is needed to assess suitability for a service, Joanna will discuss an appropriate assessment process and explain its use separately before collecting it.
Client reviews
All Alpha Body clients can submit a review after confirming their email with an access code, including clients who have never booked online. The application database stores your verified email link, review text, first name, rating, optional age and service, publication consent, submission and update times, status and moderation decisions. Your email is private and is available to Joanna for checking the client relationship; it does not appear in the public review.
Publication requires your explicit consent to publish the text, rating and first name, together with age and service only if you provide them. Joanna manually checks authenticity and personal information before approving publication. Confirming an email alone does not prove that someone is a client. Reviews of any rating from 1 to 5 can be submitted; a low rating is not a rejection reason.
You can return through “Write a review” or the client-area review link and confirm the same email to read, replace or withdraw your review. Replacing it returns it to pending review. Withdrawing removes it from the public feed immediately; it does not automatically erase the stored record. The application retains review records and moderation information to administer consent, prevent duplicate submissions and resolve disputes, for as long as needed for those purposes. Contact Joanna to request a review of retention or deletion. Review fields are held in the current browser tab while you work and are not saved to browser storage. No automatic requests for reviews are sent by email.
3. Reasons for using information
Enquiries about working together and arrangements for an agreed service are handled to take steps at your request before a contract, or to perform that contract. Necessary website security and administration rely on legitimate interests in running a safe service. Records required by law are handled to meet those obligations.
You choose whether to contact Joanna. Without enough information to reply or agree a suitable appointment, she may be unable to progress your enquiry. This website does not use your enquiry as consent to receive promotional email.
The website automatically checks available times, email verification and booking status to carry out your request. Joanna handles questions about suitability and individual service arrangements.
4. Google email and calendar
Alpha Body uses Gmail for business correspondence and Google Calendar to manage appointments. Only authorised owner accounts connect these services to the website. Visitors do not need to grant access to their own Gmail inbox or calendar to send an enquiry or book.
The calendar connection can read the connected calendars’ names, access permissions, time-zone information and busy periods, and create, check, update or cancel appointment events. An event or calendar invitation contains the agreed appointment information, your full name, verified email address and supplied telephone number. Your name also appears in the appointment title so Joanna can identify the booking. Calendar access is used for appointment administration, not to display a coach’s private diary publicly.
The separate Gmail connection verifies the connected business sender and sends client access invitations, email access codes, website enquiries and branded booking confirmation or cancellation messages. Replies are directed to contact@alphabody.uk
It does not have permission to read the inbox. Confirmed bookings also use Google Calendar events and invitations, which have Google’s own presentation. A separate delivery record keeps the booking reference, message type, delivery status, timestamps and any provider message identifier to prevent duplicate branded messages; it does not copy the message body or contact details into that record. Automatic reminders, SMS and WhatsApp messages are not enabled.
Google account authorisation credentials are held server-side, with stored grant secrets encrypted. They are not included in the public page. Authorising owners can withdraw the app’s access through their Google Account settings.
Google data is used for these stated service functions. It is not sold, used for advertising profiles or used to train general-purpose AI models. Use and sharing of Google API data follow the Google API Services User Data Policy, including its Limited Use requirements.
6. Cookies, storage and retention
This version does not include advertising trackers or visitor analytics. Hosting, security and owner sign-in services may use essential cookies or similar storage.
Customer email access uses a six-digit code valid for 10 minutes and an essential verification cookie. After verification, an essential Secure, HttpOnly cookie keeps your customer session available for up to 12 hours. If you explicitly choose “Remember me”, the session lasts up to 30 days. Signing out ends the session; avoid remembering access on a shared device.
Browser local storage keeps a random booking request reference and the selected appointment details so an interrupted booking can be checked. This recovery record contains no name, email address, mobile number, access code or sign-in token. You must verify the booking email again if your session has ended. The enquiry form uses browser tab storage only to remember submission status and avoid duplicate sends; it does not save the form fields or message there.
Enquiry correspondence is retained while answering your enquiry and for necessary follow-up. Agreed appointment, payment and service records may need to be retained longer for administration, legal obligations or a potential claim. Relevance, the end of the relationship, applicable record-keeping duties and any live dispute determine how long a record is needed.
Contact Joanna if you want a particular record reviewed or deleted. Information that must be retained for a valid legal reason may not be deleted immediately.
7. Your choices and rights
You may ask for access to your personal information, correction, deletion, restriction or, where applicable, a portable copy. Rights depend on the information and the reason for its use. Where processing relies on your consent, you may withdraw that consent without affecting earlier lawful use.
Right to object: you may object to processing based on legitimate interests. Explain your circumstances when contacting Joanna.
Email contact@alphabody.uk to make a request or raise a privacy concern. Reasonable identity checks may be needed before disclosing personal records.
You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not have to contact Alpha Body before approaching the ICO.
8. Changes to this notice
This notice describes the current enquiry form, customer email access, client records, online booking, weekly appointments and owner integrations. The website does not collect online payments or health intake, and does not send automated reminders. This notice will be reviewed before those features or other new uses of information are introduced. The date above identifies this version.