How Pure Defiance collects, uses, stores and protects your personal information.
This Privacy Policy explains how Pure Defiance collects, uses, stores and protects personal information when you use our website, purchase products, book coaching, attend Bootcamp or otherwise interact with the business.
Pure Defiance is committed to processing personal information fairly, lawfully and transparently in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations and other applicable UK law.
Pure Defiance does not sell or rent your personal information to advertisers or unrelated third parties.
Marketing is optional. You can unsubscribe or object to direct marketing at any time.
Payments are processed through trusted providers such as Stripe and PayPal.
Personal information is handled in accordance with applicable UK data-protection legislation.
The organisation responsible for your personal information.
Pure Defiance is operated by Brett Cooke, trading as Pure Defiance, and is the Data Controller responsible for the personal information described in this Privacy Policy.
As Data Controller, Pure Defiance determines how and why your personal information is processed.
Information collected depends on how you interact with Pure Defiance.
We only collect personal information that is reasonably necessary for the purposes explained in this Privacy Policy.
Depending on your relationship with Pure Defiance, the information we collect may include:
Information may be supplied directly, collected automatically or received from service providers.
We collect most personal information directly from you when you interact with Pure Defiance.
We may also receive limited information from third parties involved in processing an order, payment, booking or website interaction.
UK GDPR requires a lawful basis for each use of personal information.
The lawful basis used depends on the purpose for which the information is processed.
We process information where it is necessary to take steps at your request before entering into a contract or to fulfil a contract with you. This includes processing orders, arranging delivery, managing bookings and providing coaching services.
We process information where necessary to comply with legal duties, including accounting, tax, consumer-protection, fraud-prevention, insurance and regulatory requirements.
We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights. This may include maintaining records, responding to enquiries, improving services, securing the website, preventing fraud and defending legal claims.
We rely on consent where required, including for certain marketing communications, optional cookies and some uses of health information. You may withdraw consent at any time, although withdrawal does not affect processing that was lawful before consent was withdrawn.
Additional protection applies to health information used for coaching and exercise safety.
Information about your health is special category personal data under UK data-protection law.
We may need to process health information to assess whether coaching or exercise participation appears appropriate, adapt sessions, respond to disclosed risks and maintain appropriate safety and insurance records.
Where special category data is processed, Pure Defiance identifies both an Article 6 lawful basis and an applicable Article 9 condition. This will commonly include your explicit consent. In limited circumstances, another lawful condition may apply, such as establishing, exercising or defending legal claims or protecting vital interests where permitted by law.
Health information is only accessed by people who reasonably need it for the relevant purpose and is not used for unrelated marketing.
Do not provide more health information than is reasonably required. Tell your coach promptly if relevant health or medical information changes.
Personal information is used to operate the business and provide requested products and services.
Pure Defiance does not sell or rent your personal information to advertisers or unrelated third parties.
Payments are handled by trusted third-party payment providers.
Payments made through the website are processed by payment providers that may include Stripe and PayPal.
Pure Defiance does not receive or store your complete debit or credit card number. We may receive limited information such as payment status, payment reference, card type, the last digits of a card and information needed to manage refunds or payment enquiries.
Payment providers process personal information under their own privacy notices and security arrangements. They may also carry out fraud-prevention, identity or risk checks where appropriate.
Marketing is optional and every message provides a way to opt out.
Marketing communications may include information about products, coaching services, Bootcamp, promotions and Pure Defiance news.
We may send electronic marketing where you have provided consent or where the customer soft opt-in under the Privacy and Electronic Communications Regulations applies.
Where we rely on the customer soft opt-in, your contact details must have been obtained during a sale or genuine negotiation for a sale, the marketing must relate to similar products or services, and you must have been given a clear opportunity to opt out when your details were collected and in every subsequent message.
You can unsubscribe at any time using the link included in a marketing email or by contacting Pure Defiance.
Unsubscribing from marketing does not prevent necessary service messages about an order, payment, booking, account or coaching service.
Information is shared only where reasonably necessary.
We may share limited personal information with carefully selected organisations that help us operate Pure Defiance or meet legal obligations.
Service providers acting on our instructions are expected to process information only for agreed purposes and protect it appropriately. Some organisations, including payment providers and couriers, may also act as independent Data Controllers for parts of their processing.
Some service providers may process information outside the United Kingdom.
Where personal information is transferred outside the United Kingdom, we take reasonable steps to ensure that an appropriate legal transfer mechanism is in place.
Safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful mechanism recognised under UK data-protection law.
Additional technical, contractual or organisational safeguards may also be used where appropriate.
Technical and organisational measures are used to reduce privacy and security risks.
Pure Defiance takes appropriate measures to protect personal information against accidental loss, misuse, unauthorised access, alteration, disclosure or destruction.
No internet transmission or electronic storage system can be guaranteed to be completely secure. Customers should use strong passwords and keep account credentials confidential.
Information is retained only for as long as reasonably necessary.
Retention periods depend on the type of information, why it was collected and any legal, accounting, insurance or dispute-resolution requirements.
Order, payment and accounting records are normally retained for the period required by applicable tax and business-record laws.
Coaching, booking and health-screening information is retained only for as long as reasonably needed to provide the service, manage safety, meet insurance or legal requirements and respond to possible claims.
Marketing information is retained until you unsubscribe, withdraw consent, object or the information is no longer needed, subject to keeping a limited suppression record so that your preference can be respected.
When information is no longer required, it is securely deleted, anonymised or placed beyond normal operational use where appropriate.
UK data-protection law gives individuals a number of rights.
Depending on the circumstances and lawful basis involved, you may have the right to:
These rights are not absolute and exemptions may apply. We may need to verify your identity before responding.
We normally respond without undue delay and within one month, although the period may be extended where permitted for particularly complex or numerous requests.
Cookies support website operation, preferences, security and analytics.
Our website uses cookies and similar technologies to operate essential features, remember preferences, support checkout and account functions, improve security and understand website use.
Where consent is required, non-essential cookies are used only in accordance with your cookie choices.
Further information about the cookies used and how to manage your preferences is provided in our Cookies Policy.
Technology may help payment providers assess transaction risk.
Pure Defiance does not normally make decisions about customers solely by automated means where the decision produces legal effects or similarly significant effects.
Payment, account or security providers may use automated systems to assess fraud, identity or transaction risk. Their processing is governed by their own privacy information and may result in a payment being delayed, declined or subject to additional authentication.
Contact us if you believe an automated security or payment decision has affected an order and you would like us to review the available information.
Additional care applies where services involve someone under 18.
The Pure Defiance online store is intended for customers aged 18 or over.
Coaching and Bootcamp services may be available from age 16, subject to the applicable service terms, health screening and any parental or guardian consent requirements.
We do not knowingly collect more information about children or young people than is reasonably necessary for the relevant service, safety requirement or legal obligation.
Incidents are investigated, recorded and reported where required.
If a personal data breach occurs, we will investigate the incident and take reasonable steps to contain it, reduce harm and prevent recurrence.
Where a breach is likely to result in a risk to people's rights and freedoms, we will notify the Information Commissioner's Office without undue delay and, where feasible, within 72 hours of becoming aware of it.
Where a breach is likely to create a high risk to affected individuals, we will also inform those individuals without undue delay where required by law.
The policy may be updated as the business, law or services develop.
We may update this Privacy Policy to reflect changes in legislation, regulatory guidance, business practices, suppliers, products or services.
The latest version will be published on this page with the revised date displayed at the top.
Where a change materially affects how existing personal information is used, additional notice will be provided where reasonably required.
Contact Pure Defiance first or raise a concern with the ICO.
If you are unhappy with how Pure Defiance uses your personal information, please contact us first so that we can investigate and try to resolve the concern.
You also have the right to complain to the Information Commissioner's Office, the United Kingdom's independent data-protection regulator.
Visit the ICO complaints service
You may also find current contact options and guidance on the ICO website.
Questions, rights requests and privacy concerns.
Contact Pure Defiance if you have a question about this Privacy Policy, want to exercise a data-protection right or are concerned about how your information has been handled.
Email: info@puredefiance.co.uk
Please include enough information for us to understand your request, but do not send unnecessary sensitive information by ordinary email.
Contact Pure Defiance to ask about this policy, exercise a data-protection right or raise a concern about how your personal information has been handled.
Email Pure Defiance