Privacy Policy
1.Who we are
“Power & Steel” is the trading name of Krisztian Balint, a personal trainer based in Banbury, Oxfordshire, operating as a sole trader. This Privacy Policy explains how we handle information when you visit powerandsteel.com (“the Site”). For the purposes of UK data protection law, Krisztian Balint (trading as Power & Steel) is the data controller.
The Site is purely informational. There is no user registration, account creation, online purchase, or online payment on the Site.
2.Technical information we collect
We do not collect personal information through the Site itself — there are no contact forms or sign-up forms. Any contact you make with us happens outside the Site (see “WhatsApp” and “Contact” below).
When you visit the Site, our web server, hosting provider, and security systems may log limited technical information automatically, including:
- IP address
- Date and time of the visit
- The page or resource accessed
- Browser and device information
- General technical data related to server operation and security
Purpose: to keep the Site running correctly, to identify and fix technical issues, and to maintain the security of the Site and server.
Legal basis: our legitimate interests (UK GDPR Article 6(1)(f)).
Retention: for as long as necessary for these purposes, in line with our hosting provider’s and security provider’s standard log retention settings.
3.Security monitoring (Wordfence)
The Site uses Wordfence, a WordPress security plugin, to help protect the Site against unauthorised access attempts, automated attacks, malicious traffic, and other security threats.
As part of this, Wordfence may process IP addresses and other technical data specifically to identify and block suspicious or malicious activity.
Purpose: maintaining the security of the Site and the underlying IT system.
Legal basis: our legitimate interests (UK GDPR Article 6(1)(f)).
4.WhatsApp
The Site contains a link to WhatsApp, so you can contact Krisztian Balint directly. When you use this link, you leave the Site and interact with WhatsApp as a separate, third-party service. Any information you share via WhatsApp is governed by WhatsApp’s own privacy policy and terms, not by this Privacy Policy. The Site itself does not transmit any personal data to WhatsApp merely by displaying the link.
5.Google Maps
The Site may contain a link to Google Maps, to help you find our training location. This is a plain external link, not an embedded map — Google Maps only opens when you actively click the link. Any data processing that takes place once you reach Google Maps is governed by Google’s own privacy policy, not by this Privacy Policy.
6.Your rights and how we use this information
We use the technical information described above to:
- Keep the Site secure and functioning correctly
- Detect and prevent unauthorised access or malicious activity
- Comply with legal obligations, where applicable
Under the UK GDPR, we rely on the following legal bases for this processing:
- Legitimate interests (Article 6(1)(f)) — for keeping the Site secure and understanding general technical operation
- Consent — for any non-essential cookies (such as future analytics), where applicable. See our Cookie Policy
7.Data processors
We use the following third-party providers to operate and protect the Site. Each acts as a data processor and only processes technical data on our instructions, for the purposes described above:
| Processor | Role | Details |
|---|---|---|
| Webhosting UK COM Ltd (webhosting.uk.com) | Website hosting | Registered office: Studio 3.03, Regency House, Westminster Place, Nether Poppleton, York, YO26 6RW, United Kingdom |
| Wordfence | Website security / firewall | WordPress security plugin, used to detect and block malicious traffic |
We do not sell or rent any information collected through the Site, and we do not share it with third parties for their own marketing purposes.
8.Third-party links
The Site links to third-party platforms, including Instagram, YouTube, WhatsApp, and Google Maps. When you click through to these platforms, their own privacy policies apply. We are not responsible for how these third parties handle your information.
9.Your rights
Under the UK GDPR, you have the right to:
- Request access to any personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability, where applicable
To exercise any of these rights, contact us at personaltraining@powerandsteel.com.
10.Complaints
If you are unhappy with how we have handled your personal data, please contact us first at personaltraining@powerandsteel.com so we can try to resolve the issue directly. We will acknowledge your complaint and aim to respond within 45 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
11.Data security
We apply appropriate technical and organisational measures (including the security monitoring described above) to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.
12.Children
The Site is not directed at children, and we do not knowingly collect information from anyone under 16.
13.Changes to this policy
We may update this Privacy Policy from time to time, including if the Site’s functionality or the applicable law changes. Any changes will be posted on this page with an updated effective date.
14.Contact us
Power & Steel — Krisztian Balint (sole trader)
Banbury, Oxfordshire, UK
personaltraining@powerandsteel.com