Last updated: 2 October 2026
Leigh Carter, trading as anybodygym, is responsible for personal information used through this website.
You can contact Leigh at info@anybodygym.co.uk or write to:
34 Gloucester Road
Peterborough
PE2 8BJ
This notice covers visitors to our public website and people enquiring about our services. Information collected for coaching, including health screening and progress records, is covered separately before it is collected.
When you use our contact form or contact us directly, we receive your name, email address, message subject and message, together with any other details you choose to provide.
We use this information to answer your questions and discuss or arrange an initial consultation.
We do not use your enquiry information for marketing lists or AI processing.
An enquiry does not commit you to buying coaching. Providing your details is voluntary, but we need a way to contact you to reply.
Please do not send detailed medical or other sensitive information through the website enquiry form. Leigh will explain the separate health-screening process where needed.
For general enquiries, our lawful basis is our legitimate interest in responding to people interested in our services.
Where you ask us to take steps towards a coaching agreement, we process the information needed to take those steps at your request.
We also rely on our legitimate interests in delivering and protecting the website for necessary technical processing, taking account of visitors’ privacy.
Where consent is required for optional cookies or similar technologies, we rely on your consent. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.
Our website is hosted by IONOS.
The website uses Contact Form 7 for contact enquiries. Enquiry messages are sent to info@anybodygym.co.uk. Leigh accesses the mailbox and has stated that enquiry messages are not knowingly copied into another system or made available to another person.
Technical information such as an IP address, browser details and the time of a request may be processed to deliver pages, operate the website and maintain website security.
The website’s public-facing pages currently indicate the use of cookies and third-party services. (anybodygym)
The website also currently loads Google Tag Manager resources. (anybodygym)
The website uses Google Fonts and supporting files from Cloudflare’s cdnjs service where those resources are requested by the website. These providers may receive technical request information, including an IP address, when your browser connects to their services.
Google’s privacy information is available from Google Privacy Policy and Cloudflare’s privacy information is available from Cloudflare Privacy Policy.
We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.
Website enquiries are received at info@anybodygym.co.uk and are accessed by Leigh.
The website uses Contact Form 7 to submit enquiry messages. We do not knowingly maintain a separate enquiry database or provide another person with access to enquiry messages.
Where hosting, email, website security, backups or other technical services process website information as part of providing the website, those providers may process information to the extent necessary to provide their services.
The website includes embedded YouTube video.
When the YouTube player loads or you interact with it, Google may receive technical information and may use cookies or similar technologies.
Where consent is required, optional YouTube technology will not be loaded until you provide the required consent.
Declining optional video technology may prevent an embedded YouTube player from working, but it does not prevent you from contacting us.
You can also manage cookies through your browser, although blocking necessary cookies may affect website functionality.
The website provides controls for managing optional cookies and similar technologies.
You can use the cookie controls displayed on the website to:
Accept optional cookies or technologies;
Decline optional cookies or technologies; and
Change or withdraw your consent later.
Technologies that require consent will remain blocked until the relevant consent has been given. Changing or withdrawing consent does not affect processing that was lawful before consent was withdrawn.
The website currently displays a cookie/third-party-services notice to visitors. (anybodygym)
The precise cookie-control interface and the technologies it controls should be checked against the final live configuration before this notice is treated as complete.
Cookies and similar technologies may be used for:
necessary website functionality;
security and technical operation;
embedded YouTube video functionality; and
other optional services where those services are enabled and the required consent has been obtained.
Where optional services are enabled, the relevant cookie or technology, provider, purpose, duration and consent requirement will be identified through the website’s cookie controls.
We do not use enquiry information for AI processing.
Links to WhatsApp, social media and Google-hosted forms or documents take you to services with their own privacy information. Following a link can disclose information to that provider.
Coaching forms also require separate information about how anybodygym uses the information submitted.
Enquiries that do not lead to coaching are deleted within 12 months of the last meaningful contact.
If you become a client, relevant information needed for coaching is covered by the separate client privacy notice. Initial enquiry messages that become client relationships may remain in the mailbox. A fixed deletion period for those client-related enquiry messages has not currently been specified.
We may keep a specific record longer where needed to meet a legal obligation or deal with an ongoing complaint or legal claim. We retain only what is needed for that purpose and review the need when the matter ends.
Website activity records are retained for the period required by the relevant technical, security or hosting service. Backup copies may continue to contain deleted information until the relevant backup is overwritten or expires in accordance with the applicable backup-retention process.
Some providers used to operate the website and its associated services may process information outside the UK.
The relevant providers and their applicable international-transfer safeguards depend on the final services and configuration used by the website, including the hosting, email, Google, Cloudflare, YouTube and other third-party services.
Where personal information is transferred outside the UK, the transfer will be made using an appropriate lawful transfer mechanism and safeguards required by applicable data-protection law.
Further information about the relevant safeguards can be obtained from the applicable provider’s privacy or data-protection information.
Depending on the circumstances, you can ask to:
access your personal information;
correct inaccurate or incomplete information;
request deletion;
request restriction of processing;
object to processing based on legitimate interests; or
request a portable copy of your information where that right applies.
These rights are not absolute and may depend on the circumstances and applicable legal requirements.
To exercise your rights, contact:
We may need to confirm your identity before responding to a request.
You can complain to the Information Commissioner’s Office (ICO) at:
Information Commissioner’s Office – Make a complaint
You do not have to contact us first, although we welcome the opportunity to address your concerns.
I would not publish the notice yet as “fully completed” because several details cannot be established from the public website alone.
You said the mailbox uses Microsoft email, but the exact service needs confirming:
Microsoft 365 / Exchange Online — if that is what the IONOS mailbox actually uses.
Don’t state Microsoft 365 until the mailbox/account configuration confirms it.
The notice currently says:
Enquiries are sent to
info@anybodygym.co.ukand Leigh accesses the mailbox.
But WordPress/Contact Form 7 needs checking to determine whether Flamingo, another plugin, database storage, logs or another system is storing copies.
If there is no additional storage, the final wording can say:
Contact Form 7 does not store enquiry messages separately on the website. Messages are sent to info@anybodygym.co.uk.
If Flamingo or another storage mechanism exists, it should be named.
This cannot safely be inferred from the public page.
Check Contact Form 7’s integrations for things such as:
Google reCAPTCHA
Cloudflare Turnstile
Akismet
another anti-spam service
The privacy notice should name whichever is actually enabled.
Based on what you’ve supplied, the intended statement appears to be:
Only Leigh accesses enquiry messages, apart from providers processing them to deliver the services described above.
But this should be checked against WordPress administrator accounts, hosting accounts and any maintenance/developer accounts.
This is the most important remaining technical check.
The live site currently says:
“This website uses cookies and third party services.” (anybodygym)
It also currently exposes Google Tag Manager resources. (anybodygym)
So I would not currently state:
“We do not use website analytics or advertising tracking”
unless the actual GTM configuration has been checked.
The final cookie list should be generated from the actual production site, including:
| Technology | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| Necessary cookies | Website/CMS | Website operation/security | Configuration dependent | Usually no |
| YouTube cookies | Google/YouTube | Embedded video | Configuration dependent | Yes where required |
| Google services | Only if actually configured | Configuration dependent | Depends on purpose | |
| Analytics | Only if installed | Measurement | Actual configuration | Yes where required |
| Advertising | Only if installed | Advertising/tracking | Actual configuration | Yes where required |
Your requirement that accept, decline and change-consent controls work and that consent-dependent technologies remain blocked until consent is important.
The live site currently displays a cookie notice, but the text-only inspection does not establish the exact consent-management platform or verify its blocking behaviour. (anybodygym)
Before launch, test it in a fresh/private browser:
Before consent
→ optional Google/YouTube/analytics requests blocked.
Accept
→ optional technologies permitted.
Decline
→ optional technologies remain blocked.
Change preferences
→ previous consent can be changed/withdrawn.
Refresh
→ the selected preference persists.
Your proposed wording should not invent a number such as 30, 60 or 90 days.
The actual IONOS/WordPress backup configuration needs to establish:
how frequently backups are created;
how long they are retained;
whether deleted enquiry emails/data remain in backups;
when those backups expire or are overwritten.
This also needs provider-specific verification rather than a generic claim.
The final version should identify the relevant providers and countries/regions based on their current data-processing arrangements, and state the applicable safeguard, such as an adequacy decision or appropriate contractual safeguards where applicable.
Your original text says:
“Our email provider is info@anybodygym.co.uk“
That is an email address, not an email provider.
It should be:
Our email address is info@anybodygym.co.uk. Our mailbox is provided through Microsoft’s email service [exact service to be confirmed].
The public site itself also currently displays the address/contact information for anybodygym. (anybodygym)
At anybodygym in Peterborough, our personal training services are designed to guide and empower individuals, offering them the expertise needed to successfully attain their health and fitness objectives. We achieve this through a holistic approach that encompasses nutrition, strength training, flexibility exercises, and cardiovascular fitness training.
34 Gloucester Road Peterborough PE2 8BJ
©2026.anybodygym Peterborough. All rights reserved