1. Who we are
The Personal Trainer Business Blueprint ("the Blueprint", "we", "us") is a trading name of BCD Coaching Ltd, a company registered in England and Wales. We provide an online business course, learning platform and related tools for personal trainers, gyms and fitness operators.
For the purposes of UK data protection law we are the data controller for the personal information described in this policy. You can reach us at info@theptbusinessblueprint.com.
2. Information we collect
Information you give us
- Free tools. If you use the PT Income Gap Calculator or the Gym Owner's Retention Audit we collect your name and email address, and where you provide them your company and role, together with the figures you enter (for example client numbers, session prices, member numbers, membership fees, trainer numbers and tenure). We record your answers at the point you give us your email, so if you start and do not finish we may still hold the answers given up to that point.
- Your account. Name, email address and a securely hashed password. We never store your password in a readable form.
- Purchases. Billing name and email, the plan bought, and the order record. We do not receive or store your card details at any point.
- Your work on the course. Lesson progress, assessment submissions and the feedback your coach writes back, plus anything you type into the interactive business tools, such as your client avatar, pricing structure, content calendar, lead tracker and time plan.
- Business check-ins. If you use My Business, the monthly turnover, client numbers and notes you choose to record.
- Support and community. Messages you send to the help desk, support tickets and replies, and any posts, comments or likes you make in the member community.
- Bookings. If you book a one-to-one call, the slot booked, payment reference and the calendar invitation.
Information we collect automatically
- Technical and usage data such as your IP address, the date and time you last signed in, and how often you sign in. We use IP addresses to apply fair-use rate limits on our public forms and to protect against abuse.
- Notification subscriptions if you switch on browser notifications, which we need in order to send them.
- Analytics data if you consent to analytics cookies. See Cookies and tracking.
3. How we use your information
- To give you the course, the platform, the printed workbook and any other product you have bought.
- To create and administer your account, and to let you reset your password.
- To mark your assessments and give you written feedback, and to issue your certificate.
- To take payment and keep proper accounting records.
- To answer your questions through the help desk and support tickets.
- To send you service messages you need, such as your login details, marking notifications, booking confirmations and important changes to the course.
- To send you your own results from the free tools, which we tell you we will do at the point you enter your email address.
- To send you marketing about the Blueprint where you have agreed to receive it, or where you are an existing customer and we are telling you about similar products. You can opt out at any time.
- Where a gym or business has bought seats, to show the seat holder that trainer's course progress, the lesson they are on, when they last signed in, and any monthly business figures that trainer chooses to record. If your employer bought your seat, they can see this.
- To keep the platform secure, prevent abuse and fix faults.
4. Our lawful bases
| What we do | Lawful basis |
|---|---|
| Providing the course, platform and support you have bought | Performance of a contract |
| Taking payment and keeping accounting records | Contract, and legal obligation |
| Sending your free tool results to you | Legitimate interests, and your request |
| Marketing emails to people who opted in | Consent |
| Marketing about similar products to existing customers | Legitimate interests, with an opt-out in every message |
| Analytics cookies | Consent |
| Security, fraud prevention and rate limiting | Legitimate interests |
| Showing a gym its own trainers' progress on seats it paid for | Legitimate interests of the gym and of us in delivering a team product |
5. Who we share it with
We do not sell your personal information. We share it only with the service providers we need to run the Blueprint, each of which processes it on our instructions:
| Provider | What it does |
|---|---|
| Stripe | Takes and processes payments. Stripe handles your card details directly as a separate controller under its own privacy policy. |
| Our hosting provider | Hosts the platform and its database on servers in the United Kingdom. |
| Email providers | Deliver our service emails and, where you have opted in, our marketing emails. |
| Vimeo | Hosts and streams the course videos. |
| Where you book a one-to-one call, creates the calendar entry and video meeting link. Where you consent to analytics cookies, provides Google Analytics. | |
| Anthropic | Powers the instant answers in the platform help desk. The message you type is sent to the model to generate a reply. |
| CIMSPA | Where you complete the course, so your CPD can be recognised. |
We may also disclose information if we are required to by law, or to establish, exercise or defend legal claims. If our business is sold or reorganised, information may pass to the buyer under the same protections.
6. Cookies and tracking
We keep this deliberately light. We use two kinds of storage:
- Strictly necessary. A session cookie that keeps you signed in to the platform, and small items stored in your browser that remember things like your light or dark theme preference and save a draft of an assessment answer so you do not lose your work. These are required for the service to function and do not need your consent.
- Analytics, only with your consent. Google Analytics, which tells us how many people visit, which pages they read and how they found us. We do not load Google Analytics at all until you accept it in the cookie banner. If you decline, or ignore the banner, no analytics cookies are set.
We do not use advertising cookies, retargeting pixels or third-party ad networks. You can change your mind at any time by clearing your browser storage for this site, after which the banner will appear again.
7. International transfers
Our hosting and database are in the United Kingdom. Some of our providers, including Stripe, Google, Vimeo and Anthropic, may process information outside the UK, including in the United States. Where that happens we rely on UK adequacy regulations or on standard contractual clauses together with the UK International Data Transfer Addendum, so that your information keeps an equivalent level of protection.
8. How long we keep it
- Account and course records for as long as your account is open, and for up to two years after it closes so we can reinstate access, confirm your CPD and answer any query.
- Assessment submissions, feedback and certificates for up to six years, as evidence of the CPD awarded.
- Payment and accounting records for six full financial years, as UK tax law requires.
- Free tool enquiries for up to two years from your last interaction with us, unless you ask us to erase them sooner.
- Marketing consents and opt-outs for as long as we send marketing, plus a suppression record kept indefinitely so we do not contact you again by mistake.
- Support and help desk messages for up to two years.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- have inaccurate information corrected;
- ask us to erase your information, where we do not have an overriding reason to keep it;
- ask us to restrict how we use it, or object to us using it, including for direct marketing, which we will always honour;
- ask for your information in a portable, machine-readable format;
- withdraw consent at any time, where consent is what we rely on.
Email info@theptbusinessblueprint.com and we will respond within one month. There is no charge.
10. Security
The platform is served over HTTPS. Passwords are stored using a one-way hash and are never readable by us or by anyone else. Access to the administration area is restricted to named staff accounts, database credentials are held server-side only, and payment card details never touch our systems. No system is perfectly secure, but if a breach ever affected your rights we would tell you and the Information Commissioner's Office as the law requires.
11. Age limits
The Blueprint is a professional course sold to adults working in, or entering, the fitness industry. It is not intended for anyone under 18 and we do not knowingly collect information from children.
12. Changes to this policy
If we change how we handle your information we will update this page and change the date at the top. Where a change materially affects you, we will tell you by email.
13. Contact and complaints
For anything about this policy, or to exercise any of your rights, email info@theptbusinessblueprint.com.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.