Legal
Privacy notice
What information Just Trey collects, why, who else is involved, and what you can do about it.
Last updated 24 September 2026
1. Who is responsible for your information
Just Trey Personal Training is operated by Traycho Sengeliev as a self-employed sole trader, based in London, providing private personal training across selected areas of West London.
For the purposes of UK data protection law, Traycho Sengeliev, trading as Just Trey Personal Training, is the data controller for the personal information described in this notice.
Registered with the Information Commissioner's Office, registration number ZC255382.
How to reach us about your data
Email: [email protected]
Phone or WhatsApp: +44 7818 293048
2. What we collect, and when
When you use the contact form
The form asks for your name, email address, area or postcode, enquiry type, and which type of training interests you. Phone number and your message are optional.
The form is delivered by Web3Forms, which also records limited technical information with each submission— your IP address, a timestamp, and the page you submitted from — used to filter spam and abuse.
Please do not send medical or health details through the contact form. That information is collected separately, as described below.
When you contact us directly
If you message on WhatsApp, call, email, or message on Instagram, we hold whatever you choose to share inthat conversation. Those platforms operate under their own privacy terms, which we do not control.
When you become a client
Before training begins you complete a health screening questionnaire (PAR-Q) and a consent form. These cover your goals, training history, and any injuries, medical conditions or medication affecting what is safefor you to do. During training we keep notes on your programme and progress, and records relevant to your safety.
Health information is a special category of personal data under UK GDPR and is handled with additional care. It is collected directly from you, in person or on a form, and never through the website.
3. Why we use it, and our lawful basis
| What for | Lawful basis |
|---|---|
| Replying to your enquiry and arranging a session | Legitimate interests — responding to someone who has contacted us |
| Confirming we cover your area | Legitimate interests — assessing whether we can provide the service |
| Delivering coaching, managing bookings and payment | Performance of a contract with you |
| Health screening, so training is safe for you | Consent, and for health data specifically, your explicit consent |
| Keeping records for insurance, claims and accounting | Legal obligation, and legitimate interests in establishing or defending legal claims |
| Filtering spam and abusive submissions | Legitimate interests — keeping the service usable and secure |
Where we rely on consent, you can withdraw it at any time. Withdrawing consent for health information will usually mean training cannot safely continue, so we would discuss that with you first.
We do not use your information for automated decision-making or profiling, and we do not sell it to anyone.
4. Who else is involved
The list is deliberately short. The website is a plain static site with no advertising trackers and no social media pixels.
Web3Forms (Web3Creative)
Processes contact form submissions on our behalf under a data processing agreement. Web3Creative operatesfrom India and engages its own sub-processors, including Amazon Web Services for hosting and email delivery, Cloudflare for its content delivery network and firewall, Hetzner in the EU for application infrastructure, and CleanTalk and Akismet for spam filtering — the latter two receive your IP address and email address to assess whether a submission is spam.
As Web3Creative is outside the UK, transfers are covered by the Standard Contractual Clauses together with the UK International Data Transfer Addendum.
GitHub
Hosts the website. GitHub receives standard server request information when you visit, such as your IP address.
Insurers and professional advisers
If a claim or incident arises, relevant records may be shared with our insurer, Protectivity, and with legalor accounting advisers where necessary.
WhatsApp, Instagram, Trustpilot and email providers
If you choose to contact us or leave a review through these, your information is handled under their own privacy terms.
5. How long we keep it
Adult client records — 6 years. PAR-Qs, health screening forms, consent forms and relevant client safety records are retained securely for six years after the client relationship ends, unless a legal, regulatory, insurance or claims-related reason requires longer. Records relevant to an actual orpotential insurance claim will not be destroyed while they may still be required.
Children's records — until the child's 18th birthday, unless there is a legal, regulatory, insurance, safeguarding or claims-related reason requiring longer retention.
- Contact form submissions are stored by Web3Forms for up to three years and then deletedautomatically. Enquiries that do not lead to training are removed from our own records once the conversation has clearly ended.
- Financial records are kept as required for tax and accounting purposes.
- Messages on WhatsApp and Instagram remain in those apps until deleted.
6. How it is protected
The website is served over HTTPS, so anything you submit is encrypted in transit.
Web3Forms encrypts submissions in transit and at rest, restricts access to production systems on a least-privilege basis, and runs a web application firewall and rate limiting on its submission endpoints. If Web3Creative becomes aware of a personal data breach affecting our data, it is required to notify us within 72 hours.
Health questionnaires, consent forms and client notes are kept securely and are not shared with anyone without your consent, unless disclosure is required by law or necessary to protect someone's life.
7. Your rights
Under UK data protection law you have the right to:
- ask what personal information we hold about you, and get a copy
- have inaccurate information corrected
- ask us to delete information, where there is no overriding reason to keep it
- object to or restrict how we use it
- withdraw consent at any time, where we rely on consent
- ask for your information in a portable format
To exercise any of these, email [email protected]. We will respond within one month, at no charge.
Where records are held for insurance or claims purposes, we may need to retain them even after a deletionrequest — we will explain if that applies.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
8. Children and young people
We coach children and young people. Where a client is under 18, we deal with a parent or guardian, who provides health information and consent on the child's behalf and agrees arrangements for attendance.
The website contact form is intended for adults. If a young person submits it, we will contact a parent or guardian before going further.
9. Changes to this notice
If how we handle information changes — for example a different form provider, or website analytics being added — this notice will be updated and the date at the top changed. Material changes affectingexisting clients will be communicated directly.