Privacy Policy

Last updated:

This Privacy Policy describes how Strongexpel, operating at strongexpel.world, collects, uses, stores, and protects personal data when you visit our website, enquire about our office wellness programs, or enrol in any of our wellness programs for office workers including the Desk Reset Program, Posture and Movement Bundle, and Full Workplace Wellness Plan.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable United Kingdom data protection legislation. By using our website or purchasing our wellness programs, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is Strongexpel, located at Work.Life Bermondsey, 5 Tanner St, London SE1 3LE, United Kingdom. For any privacy-related enquiries, you may contact us at message@strongexpel.world or by telephone at +447973197374.

2. Personal Data We Collect

We collect personal data that you voluntarily provide when interacting with Strongexpel, including but not limited to the following categories:

• Identity data: your full name as provided on contact forms or program enrolment documents.
• Contact data: your email address, telephone number, and postal address when supplied.
• Communication data: the content of messages you send through our contact form, email correspondence, or phone conversations regarding our wellness programs.
• Program data: information about which wellness program you have selected, your workplace environment, physical activity preferences, and progress tracking information collected during program participation.
• Technical data: your IP address, browser type, device information, operating system, referral source, pages visited, and time spent on strongexpel.world, collected automatically through cookies and similar technologies as described in our Cookies Policy.
• Consent data: records of your consent to data processing, marketing communications, and cookie usage.
• Payment data: transaction references and billing information processed through our secure payment providers when you purchase a wellness program. We do not store full credit or debit card numbers on our servers.

3. How We Use Your Data

Strongexpel processes your personal data for the following purposes, each supported by a lawful basis under UK GDPR:

• To respond to your enquiries about our Desk Reset Program, Posture and Movement Bundle, Full Workplace Wellness Plan, or other services offered at strongexpel.world (lawful basis: legitimate interest and pre-contractual steps).
• To process and fulfil your enrolment in any wellness program, including scheduling sessions, delivering program materials, and providing advisor support (lawful basis: performance of a contract).
• To track your progress within a wellness program and personalise your experience based on your workplace environment and stated goals (lawful basis: performance of a contract and legitimate interest).
• To process payments and issue receipts for program purchases (lawful basis: performance of a contract and legal obligation).
• To send service-related communications such as session reminders, program updates, and account notifications (lawful basis: performance of a contract).
• To improve our website, programs, and customer experience through analytics and feedback analysis (lawful basis: legitimate interest).
• To comply with legal obligations, including tax reporting and responding to lawful requests from authorities (lawful basis: legal obligation).
• To send marketing communications about new wellness programs or offers, only where you have provided explicit consent (lawful basis: consent).

4. Data Sharing and Third Parties

We do not sell your personal data to third parties. Strongexpel may share your data with the following categories of recipients where necessary to deliver our wellness programs and operate our website:

• Payment processors who handle secure transaction processing for program purchases.
• Cloud hosting providers that store our website data and program delivery platforms within the United Kingdom or the European Economic Area.
• Email service providers used to send program communications and respond to your enquiries.
• Analytics providers that help us understand website usage patterns, subject to appropriate data processing agreements.
• Professional advisers including accountants and legal counsel bound by confidentiality obligations.
• Regulatory or law enforcement bodies when required by applicable law or court order.

All third-party processors are required to implement appropriate technical and organisational measures to protect your data and process it only for specified purposes under written data processing agreements compliant with UK GDPR requirements.

5. International Data Transfers

Your personal data is primarily processed within the United Kingdom. Where data is transferred outside the UK, Strongexpel ensures appropriate safeguards are in place, including Standard Contractual Clauses approved by the Information Commissioner's Office, adequacy decisions, or other mechanisms recognised under UK data protection law. You may request details of the safeguards applied to any specific transfer by contacting us at message@strongexpel.world.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Contact form submissions and general enquiries: up to twenty-four months from the date of last communication.
• Program enrolment and participation records: for the duration of your program plus six years thereafter for accounting and legal compliance purposes.
• Payment and transaction records: seven years in accordance with UK tax and financial record-keeping requirements.
• Marketing consent records: until you withdraw consent plus twelve months for audit purposes.
• Technical and analytics data: up to twenty-six months from the date of collection.
• Cookie data: as specified in our Cookies Policy.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with you.

7. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data held by Strongexpel:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete personal data.
• Right to erasure: request deletion of your personal data where there is no compelling reason for continued processing.
• Right to restrict processing: request limitation of processing in certain circumstances.
• Right to data portability: receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
• Right to lodge a complaint: file a complaint with the Information Commissioner's Office at ico.org.uk if you believe your data protection rights have been violated.

To exercise any of these rights, contact us at message@strongexpel.world. We will respond within one calendar month of receiving your request, which may be extended by two additional months for complex requests with prior notification.

8. Data Security

Strongexpel implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission via HTTPS, access controls limiting data access to authorised personnel, regular security assessments, and secure storage practices. While we strive to protect your personal data, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our wellness programs and website at strongexpel.world are designed for adult office workers and are not directed at individuals under the age of eighteen. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under eighteen without parental consent, we will take steps to delete that information promptly.

10. Automated Decision-Making and Profiling

Strongexpel does not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals. Program recommendations provided by our wellness advisors involve human review and professional judgement based on the information you provide.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our wellness programs, data processing practices, or legal requirements. Updated versions will be posted on this page with a revised date. We encourage you to review this Privacy Policy periodically. Material changes affecting how we process your personal data will be communicated via email or a prominent notice on our website where appropriate.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact Strongexpel at:

Work.Life Bermondsey, 5 Tanner St, London SE1 3LE, United Kingdom

Phone: +447973197374

Email: message@strongexpel.world