Privacy Policy

Atomic Wellness Hub
Last updated: 03/09/2026

1. Who we are

Atomic Wellness Hub provides online nutrition and training support, personalised training programmes, nutrition guidance and educational content relating to nutrition, fitness and wellbeing.

Atomic Wellness Hub is operated by:

Michał Kieroński (Mike) – Personal Training Services
Email: mike@atomictrainer.com

Małgorzata Szumała-Kierońska – Nutrition Services
Email: nutritionscience.bygosia@gmail.com

Atomic Wellness Hub is not a separate legal entity. Depending on the service you enquire about or receive, Michał Kieroński and/or Małgorzata Szumała-Kierońska is responsible for the personal information used to respond to your enquiry and provide the relevant service.

Where you request combined nutrition and training support, information relevant to both parts of the service may be accessed and used by both of us where reasonably necessary to provide that service.

If you have any questions about how your personal information is used, please contact us using either of the email addresses above.

2. Personal information we may collect 

The information we collect depends on how you interact with us and which services you request.

We may collect:

• your name and surname;

• email address and other contact details you choose to provide;

• your age or date of birth where relevant to the service;

• information you provide through enquiry forms, intake questionnaires or other forms;

• information about your goals, lifestyle, nutrition and training;

• information about your exercise experience and access to training equipment;

• dietary preferences and requirements;

• body weight, measurements and other progress information;

• photographs or progress photographs where you choose to provide them;

• communications between you and Atomic Wellness Hub;

• information relating to services you have enquired about or purchased;

• transaction and payment-related information; and

• technical information generated when you use our website, where applicable, such as device, browser and website usage information.

We aim to collect only the personal information that is reasonably necessary for the purpose for which it is requested.

3. Health information and special category data 

If you become a client, some of our nutrition or training services may require you to provide health-related information. This may include information about:

• relevant medical conditions;

• current or previous injuries;

• allergies or intolerances;

• pregnancy or the postnatal period;

• medication where relevant to the safe or appropriate provision of a service; or

• other health information that may affect nutrition or training recommendations.

Health information is classed as special category personal data under UK data protection law and receives additional protection.

We only request health-related information where it is relevant to assessing whether we can safely and appropriately provide the service you have requested or to providing that service.

Where we rely on your explicit consent to process health-related information, you will be asked to provide that consent separately. You may withdraw your consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

If you withdraw consent and the relevant health information is necessary for us to provide a service safely and appropriately, we may be unable to continue providing some or all of that service.

If information you provide indicates that your needs fall outside our professional scope, we may recommend that you seek advice from an appropriately qualified healthcare professional.

Atomic Wellness Hub does not provide medical diagnosis or treatment, physiotherapy or clinical dietetic care.

4. How we collect your information

We may collect personal information when you:

• complete an enquiry, intake or client questionnaire;

• contact us through our website, by email or through another communication method;

• enquire about or purchase a service;

• provide information during the delivery of a nutrition or training service;

• send us progress information or photographs;

• purchase or request digital materials;

• subscribe to communications, where such an option is available; or

• use our website.

Most of the personal information we process is provided directly by you.

5. How and why we use your information 

We may use your personal information to:

• respond to your enquiry;

• understand your goals and what type of nutrition or training support may be appropriate;

• determine whether we are able to provide the service you have requested;

• prepare and deliver nutrition or training services;

• personalise nutrition recommendations or training programmes;

• monitor and discuss your progress where this forms part of the service;

• communicate with you about your enquiry or service;

• process transactions and maintain appropriate business records;

• provide purchased or requested digital materials;

• operate, maintain and improve our website and services;

• maintain the security and integrity of our website, systems and business records;

• meet legal, accounting, tax or regulatory obligations; and

• establish, exercise or defend legal claims where necessary.

We do not sell your personal information.

We will not publish or use progress photographs, testimonials or other information that identifies you for advertising, social media or other promotional purposes simply because you have provided that information as part of your service.

If we wish to use identifiable client material for promotional purposes, we will ask for separate permission.

6. Lawful bases for processing 

Under UK data protection law, we must have a lawful basis for processing personal information. The basis we rely on depends on why we are using the information.

We may rely on:

Contract or steps taken at your request before entering into a contract – where you contact us about a service, provide information so that we can assess your requirements, purchase a service or where processing is necessary to provide an agreed service.

Legal obligation – where processing or retention of information is necessary for us to comply with applicable legal, accounting, tax or regulatory requirements.

Legitimate interests – where processing is reasonably necessary to operate and protect our business, respond to communications, maintain appropriate records, improve our services or website, prevent misuse, or establish, exercise or defend legal claims, provided that our interests are not overridden by your rights and interests.

Consent – where we specifically ask for your consent for a particular use of your information and consent is the appropriate lawful basis.

Health information is special category personal data. Where we process health-related information on the basis of explicit consent, our additional condition for processing that information is Article 9(2)(a) of the UK GDPR – explicit consent.

Where processing is based on consent, you can withdraw that consent at any time.

7. Who we may share your information with 

We do not sell personal information or routinely disclose it to unrelated third parties.

We may, however, use trusted third-party service providers where reasonably necessary to operate our website and business, communicate with clients, process payments or deliver our services.

These may include providers of:

• website hosting and website services;

• online forms and document storage;

• email and communication services;

• cloud storage and productivity services;

• payment processing;

• website analytics;

• accounting or other professional services; and

• IT and security services.

Our service providers may include Google, through services such as Google Sites, Google Forms and other Google services, and Stripe for payment processing.

Depending on the service and processing involved, these providers may process information on our behalf or act as independent data controllers for particular activities.

We may also disclose personal information where required or permitted by law, where necessary to protect our legal rights, or in connection with legal proceedings.

We do not share your health information with healthcare professionals on your behalf unless this has been specifically agreed with you or disclosure is otherwise required or permitted by law.

8. Payments 

Where payments are processed through Stripe, payment information is handled by Stripe in accordance with its own privacy and security arrangements.

Atomic Wellness Hub does not receive or store your full payment card details when Stripe processes a transaction.

We may retain information relating to a transaction, such as the amount paid, payment date, service purchased and payment status, where required for providing the service and for appropriate business, accounting and tax records.

9. Cookies and website analytics 

Our website may use cookies and similar technologies necessary for its operation and, where enabled, analytics technologies that help us understand how visitors use the website.

Depending on the technologies used, analytics information may include:

• pages viewed;

• approximate location derived from technical information;

• device and browser information;

• interactions with the website; and

• time and duration of visits.

Where consent is required for non-essential cookies or similar tracking technologies, we will seek the appropriate consent before using them.

You may also be able to control or delete cookies through your browser settings.

Further information about the cookies and similar technologies used on our website is available in our Cookie Notice.

10. How long we keep your information 

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, regulatory, accounting or reporting requirements.

As a general approach:

• information relating to initial enquiries or intake forms that do not result in a client relationship will normally be deleted or anonymised within 12 months;

• client service records will normally be retained for up to 5 years after the end of the client relationship, unless there is a legitimate reason or legal requirement to retain particular information for a different period;

• health-related information will only be retained for as long as reasonably necessary for the relevant service, appropriate record-keeping, safety or legal purposes and will be periodically reviewed;

• financial, tax and transaction records will be retained for the period required by applicable law; and

• records of consent may be retained where necessary to demonstrate when, how and for what purpose consent was provided or withdrawn.

We may retain particular information for longer where necessary to establish, exercise or defend legal claims or where required by law.

When information is no longer required, we will take reasonable steps to delete or anonymise it.

11. International transfers 

Some of the third-party service providers we use may process or store personal information outside the United Kingdom.

Where a transfer of personal information outside the UK is subject to international data transfer restrictions, we will rely on an appropriate lawful transfer mechanism where required.

Depending on the circumstances, this may include UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another mechanism permitted by applicable data protection law.

Information about the arrangements used by individual third-party providers may also be available in their respective privacy policies.

12. Data security 

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful loss, alteration, destruction, disclosure, misuse or unauthorised access.

Access to personal information is limited to people and service providers who reasonably require access for the purposes described in this Privacy Policy.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

13. Your data protection rights  

Depending on the circumstances and the lawful basis on which your information is processed, you may have the right to:

• request access to personal information we hold about you;

• request correction of inaccurate or incomplete personal information;

• request deletion of your personal information;

• request restriction of the processing of your personal information;

• object to certain processing of your personal information;

• receive certain personal information in a portable format and/or request that it is transmitted to another organisation where applicable; and

• withdraw your consent at any time where processing is based on consent.

These rights are not absolute and some may only apply in particular circumstances.

Where we rely on legitimate interests as our lawful basis, you may have the right to object to that processing.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights or ask a question about your personal information, contact:

mike@atomictrainer.com

or

nutritionscience.bygosia@gmail.com

We may need to verify your identity before responding to a request.

14. Complaints   

If you have concerns about how we use your personal information, please contact us first so that we have an opportunity to address them.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

If EU data protection law applies to the processing of your personal information, you may also have the right to lodge a complaint with the relevant supervisory authority in your country.

15. Providing your information    

You are not generally under a statutory obligation to provide personal information to us.

However, certain information may be necessary for us to respond to an enquiry, determine whether we can appropriately provide a service, enter into an agreement with you or provide an agreed service safely.

If you choose not to provide information that is reasonably necessary for these purposes, we may be unable to offer or continue providing the relevant service.

16. Children's privacy

Our personalised nutrition and training services are intended for adults aged 18 or over, unless we have expressly agreed otherwise in advance and appropriate arrangements, including parental or guardian involvement where required, are in place.

Our website and enquiry forms are not intended to knowingly collect personal information from children without appropriate safeguards.

17. Changes to this Privacy Policy 

We may update this Privacy Policy from time to time to reflect changes to our services, how we process personal information, the third-party services we use or applicable legal requirements.

The latest version will be published on our website together with the date it was last updated.

Where a change materially affects how we use personal information already collected, we will take reasonable steps to bring the change to the attention of affected individuals where required.