Privacy Policy

1

Who we are

Lifestyle Revolution is a UK-based health and wellness platform operated as a personal business. We provide personalised health programmes, diary tools, specialist access, and wearable device integration to help members build sustainable, long-term wellbeing.

For all data protection matters, we are the data controller. You can contact us at:

Lifestyle Revolution
Email: mattsroper@me.com

We take your privacy seriously. This policy explains what personal data we collect, why we collect it, and what rights you have. We aim to be clear and honest — not to bury things in jargon.

2

What data we collect

We collect data in the following categories:

Category	Examples	Source
Identity	Name, age range	Registration / forms
Contact	Email address	Registration / forms
Health goals	Goals quiz, target outcomes	Onboarding / quiz
Health diary	Sleep, nutrition, stress levels, movement logs	In-platform diary entries
Device data	Steps, heart rate, sleep data from wearables	Terra API integration
Form submissions	Contact enquiries, ROI calculator inputs	Website forms
Technical	Browser type, approximate location, page visits	Cookies / server logs

Health data is special category data. Under UK GDPR, this receives the highest level of protection. We only process it with your explicit consent, which you give during onboarding. You can withdraw consent at any time.

3

Why we collect it & legal basis

We process your data for the following purposes:

To personalise your programme — matching your goals, history and wearable data to the right specialists, content and pillars. Lawful basis: legitimate interests / contract performance.
To deliver the Revolution Guarantee — tracking diary completion and check-in attendance to assess eligibility. Lawful basis: contract performance.
To communicate with you — sending programme updates, check-in reminders and support messages. Lawful basis: legitimate interests / contract.
To improve the platform — aggregate, anonymised analysis of how members use the platform. Lawful basis: legitimate interests.
For health diary and device data specifically — we process this only with your explicit consent as it constitutes special category health data under Article 9 UK GDPR.

We do not use your data for advertising, profiling for third-party marketing, or any purpose beyond what is listed here.

4

How long we keep it

We retain your personal data for as long as you are an active member, plus 2 years after you cancel. After this period, your data is deleted or anonymised.

Exceptions:

Financial records — kept for 7 years to comply with HMRC requirements.
Health data — deleted promptly upon your request or within 30 days of the standard retention period ending, whichever is earlier.
Email enquiries — kept for 12 months from last contact.

You may request deletion at any time, regardless of the above schedule. See Your Rights below.

5

Your rights

Under UK GDPR (Articles 15–22), you have the following rights:

Right of access (Art. 15) — request a copy of all data we hold about you.
Right to rectification (Art. 16) — ask us to correct inaccurate data.
Right to erasure (Art. 17) — "the right to be forgotten" — ask us to delete your data.
Right to restriction (Art. 18) — ask us to pause processing your data in certain circumstances.
Right to data portability (Art. 20) — receive your data in a machine-readable format.
Right to object (Art. 21) — object to processing based on legitimate interests.
Right to withdraw consent — particularly for health data. Withdrawing consent does not affect the lawfulness of prior processing.

To exercise any of these rights, email us at mattsroper@me.com. We aim to respond within 30 days. If you are unhappy with our response, you have the right to complain to the ICO (Information Commissioner's Office).

6

Who we share with

We do not sell, rent, or trade your personal data. We share data only with the following service providers, and only to the extent necessary:

Provider	Purpose	Data shared
Terra API	Wearable device data integration	Device / biometric data (with your consent)
Web3Forms	Form submission routing	Name, email, message content from forms

We require all third-party providers to maintain appropriate security standards and to process data only on our instructions. We do not permit them to use your data for their own purposes.

We may be required to disclose data to law enforcement or regulatory authorities if required by law. We will notify you where legally permitted to do so.

7

Cookies

We currently use functional cookies only. These are essential for the website to work and do not track you across other websites or collect data for advertising purposes.

We do not currently use:

Advertising or targeting cookies
Third-party analytics trackers
Social media tracking pixels

If this changes, we will update this policy and seek your consent before placing any non-essential cookies.

You can control cookies through your browser settings. Disabling functional cookies may affect how the site works.

8

ICO registration

Our ICO registration is currently pending. We are in the process of completing registration with the Information Commissioner's Office as required under the UK Data Protection Act 2018. This page will be updated once registration is confirmed.

9

Contact us

For any privacy-related questions, requests, or concerns: