Last updated: 26 September 2026

Lizzie Fluke respects the privacy of individuals who use the Lizzie Fluke website, purchase services or products, participate in performance, coaching, testing or rehabilitation services, subscribe to the Members Area, contact Lizzie Fluke, or otherwise provide personal data.

This Privacy Policy explains how personal data is collected, used, stored, protected and disclosed by Lizzie Fluke through:

• lizziefluke.com;
• the Lizzie Fluke shop;
• performance, coaching, testing and rehabilitation services;
• individual and team athlete services;
• digital products and resources;
• the Lizzie Fluke Members Area;
• communications and enquiries;
• email and other communications;
• events, workshops and professional activities;
• other services provided by Lizzie Fluke.

Lizzie Fluke provides services across the UK, MENA, Europe and internationally.

This Privacy Policy should be read together with the Lizzie Fluke Terms of Service.

Where services involve processing subject to the data-protection laws of another jurisdiction, additional requirements may apply. Information concerning processing subject to Saudi Arabia's Personal Data Protection Law (PDPL) is provided on the separate Personal Data Protection Law (PDPL) & SDAIA Requirements page.

For UK data-protection purposes, Lizzie Fluke is responsible for the personal data processed in connection with the services described in this Privacy Policy, where Lizzie Fluke determines the purposes and means of processing.

Business: Lizzie Fluke
Website: lizziefluke.com
Contact: Hello@lizziefluke.com

Where another organisation processes personal data on behalf of Lizzie Fluke, that organisation may act as a data processor or other service provider depending on the circumstances.

Where a club, federation, employer, team, organisation or other third party determines the purposes and means of processing personal data, that organisation may have separate controller responsibilities.

In some circumstances, responsibility for processing may be shared between organisations. The relevant contractual and data-protection arrangements will determine the respective responsibilities.

The personal data collected depends on how you interact with Lizzie Fluke and which services you use.

This may include:

• name;
• email address;
• telephone number;
• country and general location;
• organisation, club, federation or employer;
• professional role;
• account details;
• other information you choose to provide.

When you purchase a service, product or subscription, information may include:

• purchase history;
• products or services purchased;
• billing information;
• transaction information;
• subscription information;
• payment status.

Payment card details may be processed directly by the relevant payment provider rather than stored by Lizzie Fluke.

Where you use athlete or performance services, information may include:

• training information;
• testing results;
• performance measures;
• physical performance information;
• programme information;
• training history;
• rehabilitation information;
• injury information;
• return-to-training information;
• return-to-performance information;
• information relevant to the delivery and monitoring of the service.

Where relevant to a service, Lizzie Fluke may process information concerning:

• injuries;
• rehabilitation;
• medical restrictions;
• physical limitations;
• health conditions;
• treatment information;
• health screening;
• return-to-play or return-to-performance status;
• other health information necessary for the relevant service.

Health information is special category personal data under UK data-protection law and is subject to additional requirements and safeguards.

If you subscribe to the Lizzie Fluke Members Area, we may process:

• name;
• email address;
• account information;
• subscription status;
• payment and transaction information;
• content-access information;
• resources accessed;
• communications;
• technical information necessary to operate the membership service.

The Members Area provides structured learning, insight, frameworks, dashboards, how-to guides and practical resources.

We may retain information contained in:

• emails;
• enquiries;
• booking communications;
• service communications;
• feedback;
• correspondence;
• customer-support requests;
• other communications with Lizzie Fluke.

Where appropriate, Lizzie Fluke may collect photographs, video or other media.

This may occur during services, workshops, events, professional activities or content production.

Where identifiable media is used for promotional, educational or public-facing purposes, the appropriate lawful basis will be identified and consent will be obtained where consent is required.

When you use lizziefluke.com, technical information may be collected by the website and relevant technology providers, including:

• IP address;
• browser type;
• device information;
• operating system;
• pages visited;
• interaction information;
• referring website;
• approximate location derived from technical information;
• other information required to operate, secure and maintain the website.

Personal data may be collected:

• directly from you;
• when you purchase a product or service;
• when you create or use a Members Area account;
• when you complete an enquiry or booking form;
• during athlete assessment, testing or rehabilitation;
• during service delivery;
• through correspondence;
• through website forms;
• through payment or membership platforms;
• from your club, team, federation, employer, coach, parent or guardian where appropriate and lawful;
• from professional contacts or organisations involved in service delivery;
• from publicly available professional sources where appropriate.

Where personal data is obtained from another source, applicable transparency and privacy-information requirements will be observed.

Where required by law, privacy information will be provided within the applicable timeframe.

Personal data may be used to:

• provide purchased services;
• deliver athlete performance services;
• deliver rehabilitation services;
• conduct individual or team testing;
• develop and monitor performance programmes;
• communicate with athletes, teams and organisations;
• administer bookings;
• process payments;
• provide digital products;
• provide Members Area access;
• manage subscriptions;
• respond to enquiries;
• maintain appropriate service records;
• provide customer support;
• administer accounts;
• improve services and resources;
• maintain website and platform security;
• prevent fraud or misuse;
• comply with legal and regulatory obligations;
• establish, exercise or defend legal claims;
• manage professional and business relationships;
• send marketing communications where permitted by law.

We will not use personal data for purposes that are incompatible with the purpose for which it was collected unless permitted by applicable law.

Where we intend to use personal data for a new purpose, we will consider whether the processing is compatible with the original purpose and whether additional privacy information or another lawful basis is required.

Where UK data-protection law applies, Lizzie Fluke will process personal data in accordance with applicable UK data-protection legislation, including:

• the UK General Data Protection Regulation (UK GDPR);
• the Data Protection Act 2018;
• the Data (Use and Access) Act 2025 (DUAA);
• applicable provisions of the Privacy and Electronic Communications Regulations 2003 (PECR).

The DUAA amends aspects of the UK's data-protection framework and does not replace the UK GDPR or Data Protection Act 2018.

Lizzie Fluke will apply the data-protection principles and requirements applicable to the processing it undertakes, including requirements concerning lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, security and accountability.

Depending on the circumstances, Lizzie Fluke may process personal data under one or more of the following lawful bases.

Where processing is necessary to enter into or perform a contract with you.

This may include:

• processing purchases;
• administering bookings;
• delivering athlete services;
• providing rehabilitation services;
• providing Members Area access;
• managing subscriptions.

Where processing is necessary to comply with a legal obligation applicable to Lizzie Fluke.

Where processing is necessary for legitimate interests pursued by Lizzie Fluke or a third party, provided those interests are not overridden by the individual's interests, rights or freedoms.

Relevant legitimate interests may include:

• administering and improving services;
• maintaining appropriate business records;
• managing professional relationships;
• protecting website and account security;
• preventing misuse or fraud;
• responding to enquiries;
• establishing, exercising or defending legal claims.

Where legitimate interests are relied upon, Lizzie Fluke will consider the relevant balancing requirements.

Where consent is the appropriate lawful basis, consent will be requested clearly and, where required, separately from other terms or conditions.

Consent can be withdrawn at any time.

Withdrawal of consent does not affect processing that took place lawfully before consent was withdrawn.

Withdrawal of consent also does not necessarily require other processing to stop where another lawful basis applies.

Health information is special category personal data under the UK GDPR.

Where Lizzie Fluke processes health, injury or rehabilitation information, an appropriate Article 6 lawful basis and an applicable Article 9 condition for processing special category data will be identified.

Where required, additional conditions and safeguards under the Data Protection Act 2018 will also be considered.

The appropriate lawful basis and special category condition will depend on the particular service and circumstances of the processing.

Health information will only be collected and used where it is reasonably necessary for the relevant performance, testing, rehabilitation, coaching or related service, or where another lawful purpose applies.

Access to health information will be restricted to those who require access for the relevant service or lawful purpose.

Where processing of special category data is likely to result in a high risk to individuals, Lizzie Fluke will consider whether a Data Protection Impact Assessment or other additional measures are required.

Some services may be commissioned by a:

• club;
• federation;
• team;
• employer;
• sports organisation;
• parent or guardian;
• other authorised organisation.

Where personal data is provided by another organisation, Lizzie Fluke will process it according to the applicable contractual relationship and data-protection responsibilities.

Where the other organisation determines the purposes and means of processing, it may have separate controller responsibilities and its own privacy policy.

Where Lizzie Fluke receives athlete health or performance information from another organisation, the information will be processed only for relevant and lawful purposes.

Lizzie Fluke does not sell personal data.

Personal data may be shared where necessary and lawful with:

• payment providers;
• website and hosting providers;
• membership platforms;
• software and technology providers;
• email and communications providers;
• professional advisers;
• insurers;
• accountants;
• legal advisers;
• authorised coaches or performance personnel;
• medical or rehabilitation professionals;
• clubs, teams or federations involved in service delivery;
• parents or guardians where appropriate;
• public authorities;
• law-enforcement bodies;
• other organisations where disclosure is required or permitted by law.

Where a third party processes personal data on behalf of Lizzie Fluke, appropriate contractual and security arrangements will be used where required.

Personal data will only be shared to the extent reasonably necessary for the relevant purpose.

Lizzie Fluke provides services across MENA, Europe, the UK and internationally.

Some technology, payment, hosting, membership, communications or other service providers may process personal data outside the country in which you are located.

Where UK data-protection law applies, international transfers will be managed using an applicable lawful transfer mechanism and appropriate safeguards.

Depending on the circumstances, this may include:

• an adequacy decision or UK adequacy regulation;
• the UK International Data Transfer Agreement (IDTA);
• the UK Addendum to the EU Standard Contractual Clauses;
• another lawful transfer mechanism available under applicable UK law.

Where personal data is transferred internationally, Lizzie Fluke will consider the applicable legal requirements, the destination, the nature of the data, the risks associated with the transfer and the safeguards available.

Where processing is also subject to another jurisdiction's data-protection requirements, additional transfer requirements may apply.

For processing subject to Saudi Arabia's PDPL, see the separate Personal Data Protection Law (PDPL) & SDAIA Requirements page.

Lizzie Fluke will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

• the type of information;
• the service provided;
• the contractual relationship;
• legal requirements;
• accounting requirements;
• insurance requirements;
• safeguarding requirements;
• dispute resolution;
• the establishment, exercise or defence of legal claims;
• applicable regulatory requirements.

Different types of information may therefore be retained for different periods.

Where personal data is no longer required, it will be securely deleted, destroyed or anonymised where appropriate.

Lizzie Fluke takes appropriate technical and organisational measures to protect personal data against:

• unauthorised access;
• unlawful processing;
• accidental loss;
• destruction;
• damage;
• alteration;
• unauthorised disclosure.

Security measures may include appropriate access controls, authentication, secure systems, restricted access and other measures appropriate to the nature and risk of the processing.

No internet transmission, website or electronic storage system can be guaranteed to be completely secure.

If Lizzie Fluke becomes aware of a personal-data breach, the breach will be assessed and managed in accordance with applicable law.

Where notification to the ICO, another regulator, competent authority or affected individual is legally required, the required notification will be made within the applicable timeframe.

Where appropriate, Lizzie Fluke will also take steps to contain the incident, assess risks to affected individuals and implement measures to prevent recurrence.

Depending on the circumstances and applicable legal requirements, individuals may have rights including:

• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to data portability;
• the right to object;
• rights relating to certain automated decision-making and profiling.

Not every right applies in every circumstance.

For example, the right to erasure is not absolute, and the availability of data portability depends on the relevant lawful basis and processing conditions.

Where applicable, information about these rights will also be provided through just-in-time or other privacy information at the point personal data is collected.

To exercise a data-protection right or ask a privacy question, contact:

Email: Hello@lizziefluke.com

Please provide enough information to allow the relevant request to be identified and processed.

For security purposes, Lizzie Fluke may need to verify your identity before responding to certain requests.

Requests will be handled within the applicable statutory timeframe.

There may be circumstances where a request can be refused, restricted or subject to an applicable exemption under data-protection law.

Lizzie Fluke may send information about services, resources, publications, events, Members Area content or other professional activities where permitted by applicable law.

Where consent is required, marketing will only be sent following appropriate consent.

You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided or by contacting Lizzie Fluke.

Withdrawal of marketing consent will not affect other lawful processing.

The Lizzie Fluke website may use cookies and similar technologies.

These may be used for purposes including:

• website operation;
• security;
• account access;
• Members Area functionality;
• shopping and payment functions;
• analytics;
• preferences;
• other website functionality.

The use of cookies and similar technologies is subject to applicable requirements under PECR, as amended by the Data (Use and Access) Act 2025, and applicable data-protection law.

Where consent is legally required, appropriate consent will be requested before the relevant technology is used.

Where an applicable legal exception permits storage or access without consent, that exception may be relied upon.

Information about cookies and similar technologies may also be provided through the site's cookie settings or other relevant privacy information.

Lizzie Fluke does not currently make decisions about individuals that produce legal or similarly significant effects based solely on automated processing.

If this changes, the Privacy Policy will be updated and the information and safeguards required by applicable data-protection law will be provided before the relevant processing begins.

Where Lizzie Fluke provides services to children or young people, additional care will be taken in relation to the collection and use of their personal data.

Where appropriate and lawful, information may be provided to or obtained from a parent or guardian.

Where health or rehabilitation information concerning a child or young person is processed, appropriate safeguards will be applied.

Privacy information will be presented in clear and age-appropriate language where appropriate.

The Lizzie Fluke website may contain links to third-party websites, platforms or services.

Lizzie Fluke is not responsible for the privacy practices, security or content of third-party websites.

You should review the privacy policy of any third-party service before providing personal data to it.

This Privacy Policy may be updated from time to time to reflect:

• changes to Lizzie Fluke services;
• new products or digital services;
• changes to the Members Area;
• changes in technology;
• changes in data-processing activities;
• changes in international service delivery;
• changes in UK data-protection law;
• changes in regulatory requirements or guidance;
• changes in how personal data is processed.

The current version will be published on lizziefluke.com with its effective date.

Where a material change affects how personal data is processed, appropriate information will be provided before the new processing begins where required.

If you have concerns about how Lizzie Fluke has handled your personal data, please contact:

Hello@lizziefluke.com

You also have the right to raise a complaint with the relevant data-protection supervisory authority.

For individuals in the UK, the relevant supervisory authority is generally the:

Information Commissioner's Office (ICO)
Website: ico.org.uk

You may contact the ICO if you are dissatisfied with how your personal data has been handled or how a data-protection request has been dealt with.

Where processing is subject to another jurisdiction's data-protection law, you may also have rights to complain to the relevant supervisory authority in that jurisdiction.

For privacy questions, data-subject requests or questions concerning this Privacy Policy:

Lizzie Fluke
Email: Hello@lizziefluke.com
Website: lizziefluke.com

Privacy Policy last updated: 26 September 2026