GDPR Policy 

Last updated: 18/1/2026

1. Purpose

This GDPR Policy outlines how t/a 'Strength at 60' and 'Strength at Sixty' complies with the UK General Data Protection Regulation and ensures lawful, fair, and transparent handling of personal data.

2. Scope

This policy applies to all personal data processed by t/a 'Strength at 60' and 'Strength at Sixty', including data relating to clients, customers, suppliers, and website users.

3. Data Protection Principles

We adhere to the following principles:

• Lawfulness, fairness, and transparency 
• Purpose limitation 
• Data minimisation 
• Accuracy 
• Storage limitation 
• Integrity and confidentiality 
• Accountability
   

4. Responsibilities

The business owner/director is responsible for GDPR compliance.
All contractors or staff must follow this policy.

5. Data Handling Procedures

• Data is collected only for specific, legitimate purposes 
• Only necessary data is collected 
• Data is kept accurate and up to date 
• Access is restricted to authorised persons 
• Data is securely stored and transmitted
   

6. Consent Management

Where consent is required:

• Consent is freely given, specific, informed, and unambiguous 
• Records of consent are maintained 
• Individuals can withdraw consent easily
   

7. Data Subject Rights

We have procedures in place to respond to:

• Subject Access Requests (SARs) 
• Data rectification or erasure requests 
• Objections to processing
   

All requests are handled within statutory timeframes.

8. Data Breaches

In the event of a data breach:

• The breach will be assessed immediately 
• The ICO will be notified within 72 hours if required 
• Affected individuals will be informed where necessary 
• Breaches are documented and reviewed
   

9. Third-Party Processors

We only work with processors that provide adequate GDPR assurances.
Data Processing Agreements are in place where required.

10. Training and Awareness

Anyone handling personal data is expected to understand basic GDPR responsibilities.

11. Policy Review

This policy is reviewed annually or when legal or operational changes occur.