Privacy
Updated 9 November 2026
Who runs Cryf
Cryf is run by Ben Gillespie, a personal trainer, at Paper Mill Rd, Cardiff CF11 8DH. He is responsible for your data.
What we keep
Your name, email, phone, birthday, notes and photo, with your bookings, workouts and payments.
We use these to run your bookings and training and to take payment. Your trainer can see them.
Notes and workouts can include health information, such as an injury. We use it only to train you safely.
Other clients can find you by your first name, last initial and photo when they add someone to a session. If someone adds you, they see the same.
Why we can use it
- Bookings, training and payments: we need it to give you what you've booked.
- Reminders and keeping the site secure: our legitimate interest in running the business safely.
- Payment records: tax law requires them.
- Google Calendar: your consent, which you can take back at any time.
How long we keep it
- Your account, bookings and workouts: until you ask us to delete them.
- Payment records: as long as tax law requires, even after the rest is deleted.
Who else handles your data
- Stripe takes payments and holds your card and bank details. We keep only your card type, your sort code and the last 4 digits of your card and account numbers.
- Brevo sends emails and Twilio sends texts.
- Cloudflare hosts the site.
- Google, only if you connect your calendar or pay with Google Pay.
- Apple, only if you pay with Apple Pay.
Some of these companies handle data outside the UK, under their data protection agreements.
Cookies
We use cookies only to keep you signed in and make the site work. There's no advertising or analytics. Stripe sets its own cookies when you pay, to prevent fraud.
Google Calendar
Connecting Google Calendar is optional. You do it in Settings, and you can use Cryf without it.
What we get
- Your Google email address, shown to you in Settings so you can see which account is connected.
- Permission to make a calendar called Cryf in your Google account, and to manage that calendar and its events.
We can't see your other calendars or their events.
How we use it
We use this only to keep your bookings in the Cryf calendar. Each event has the booking's name and time, the address for a session, and a link back to the booking.
We don't sell Google data, share it with anyone else, use it for advertising or use it to train AI.
Cryf's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we store
Your Google email address, the tokens that let us update the calendar, the calendar's ID and a copy of each event we sent. They're stored with Cloudflare. Your trainer can't see them.
Disconnecting
Press Disconnect in Settings and we remove the Cryf calendar from your Google account, give up our permission and delete all of this. You can also remove our access from your Google account.
Apple Calendar
Connecting Apple Calendar makes a private link to your bookings that your calendar app checks for changes. Anyone with the link can see your bookings. Press Disconnect in Settings and the link stops working.
Your rights
You can ask to see, correct, delete or move what we hold about you, or object to how we use it. Email us and we'll answer within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office.
Contact
bgillespiecardiff@gmail.com