Privacy Notice
FASTER Health and Fitness Ltd — fasterfunction.com
Last updated: 21 July 2026
This notice explains how FASTER Health and Fitness Ltd (“FASTER”, “we”, “us”) collects and uses your personal data when you use fasterfunction.com and our learning services. We are the data controller.
Company number: 04985624
Registered office: The Office, Gothic House, Barker Gate, Nottingham, NG1 1JU
ICO registration: in progress — number to follow
Data protection contact: john@fasterfunction.com
1. What we collect
Account data — your name, email address, password (stored only as a secure hash), and if you sign in with Google or Apple, the identifier and email those services share with us.
Learner records — the courses you enrol on, lessons completed, quiz and assessment submissions, assessor feedback and marks, and certificates awarded. We also record time spent in the learning portal, which forms part of the evidence of guided learning required for your qualification.
Health data — our courses involve physical activity. Before you take part in practical training, we ask you to share relevant health information (for example via a pre-exercise readiness questionnaire) so that our assessors can check it is safe for you to train and adapt requirements where needed. Health data is “special category” data under UK GDPR, and we hold it to a higher standard: it is collected only with your explicit consent, seen only by the assessors and staff who need it to keep you safe, and never used for marketing or shared with third parties except where the law requires it. If you choose not to share this information, we may not be able to let you take part in the practical elements of a course, as we could not confirm it is safe for you to do so.
Payment data — payments are processed by Stripe. We receive confirmation of payment, the amount, and the last four digits of your card for reference. We never see or store your full card details.
Communications — emails between you and us, and records of transactional and course-related emails we send you via our email provider, Brevo.
Technical data — limited server logs (IP address, browser type, pages requested) kept for security monitoring and abuse prevention.
2. Why we use it, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Providing your account, courses, assessments and certificates | Performance of a contract |
| Recording study time and assessment evidence for your qualification | Performance of a contract / legal obligation (awarding requirements) |
| Assessing health information so you can train safely | Explicit consent (Article 9(2)(a) UK GDPR) |
| Taking and administering payments | Performance of a contract |
| Sending service emails (receipts, assessment results, account notices) | Performance of a contract |
| Sending marketing emails about FASTER courses | Consent — you can unsubscribe at any time |
| Security monitoring, fraud prevention and abuse detection | Legitimate interests |
| Retaining records of qualifications awarded | Legal obligation / legitimate interests |
3. Who we share it with
We do not sell your data. We share it only with service providers who process it on our instructions:
- Cloudflare — hosts the Site, our database, file storage and course video (data resident in the UK/EU).
- Stripe — payment processing.
- Brevo — transactional and marketing email.
- Google / Apple — only if you choose to sign in with those services.
- Awarding and quality-assurance bodies — where required to verify or quality-assure your qualification.
We may also disclose data where the law requires it.
4. Where your data is stored
Your data is stored in the UK/EU. Where a provider processes data outside the UK, we rely on UK adequacy decisions or the UK International Data Transfer Addendum to standard contractual clauses.
5. How long we keep it
- Active learner records — for as long as your account is open and you are studying with us.
- Certificates and records of qualifications awarded — retained long-term as the legal record of your qualification, even if you close your account.
- Imported or dormant student data — reviewed at twelve months; erased if there is no continuing reason to hold it.
- Health data — kept only while it is needed to support your safe participation and as evidence of our safety checks for the course concerned, then deleted. You can withdraw your consent at any time, though this may prevent participation in remaining practical elements.
- Payment records — retained for six years to meet accounting and tax obligations.
- Server logs — retained for a short rolling period for security purposes.
6. Your rights
Under UK GDPR you have the right to access your data, correct it, ask us to erase it, restrict or object to certain processing, and receive a copy in a portable format. You can withdraw consent to marketing at any time via the unsubscribe link or by contacting us.
If you ask us to erase your data, we will delete or anonymise your personal data. One exception applies: records of certificates and qualifications awarded are retained as the legal record of the qualification, as permitted under UK GDPR.
To exercise any right, contact john@fasterfunction.com. We respond within one month.
7. Security and breaches
Access to your data is role-restricted, connections are encrypted, and admin access is protected by additional authentication. If a personal data breach occurs that risks your rights, we will notify the Information Commissioner’s Office within 72 hours as required, and notify you directly where the risk to you is high.
8. Cookies
We use essential cookies only. See our Cookie Policy.
9. Complaints
We would like the chance to resolve any concern first — contact john@fasterfunction.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
10. Changes to this notice
We may update this notice from time to time. Material changes will be flagged on the Site or by email, and the “last updated” date will change.
