This Privacy Policy explains how Zenith Scientific Ltd collects, uses, stores, and protects personal data collected through zenithscientific.co.uk and through our coaching services.
Data controller
Zenith Scientific Ltd is the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered office is 66 Paul Street, London EC2A 4NA. Our company number is 17148646. For data protection enquiries, contact us through the contact form on our website.
Data we collect
We collect the following categories of personal data:
– Account and order data: name, email address, billing address, delivery address, order history.
– Payment data: handled by our payment processors. We do not store full card numbers on our systems.
– Coaching intake data: training history, equipment access, schedule, health and injury history, goals, nutrition pattern, and recovery markers, as supplied by you in the intake form.
– Programme delivery data: training log entries, check-in notes, and coach correspondence held against your client record.
– Marketing data: email address and consent status if you have opted in to marketing communications.
– Website usage data: cookies and analytics data described in our Cookie Policy.
Lawful basis
We process your personal data on the following lawful bases:
– Contract: to fulfil your programme order, deliver coaching, and ship kit.
– Legal obligation: to retain financial records for HMRC and Companies House requirements.
– Consent: for marketing emails, where you have actively opted in.
– Legitimate interests: for service improvement, fraud prevention, and analytics, where these do not override your rights.
We process health and injury data under UK GDPR Article 9(2)(a) (explicit consent). An appropriate policy document under Data Protection Act 2018 Schedule 1 is maintained and available on request. For health and injury data supplied through the intake form, we rely on your explicit consent, freely given when you submit the form. You may withdraw this consent at any time by contacting us, although doing so may end the active coaching engagement, since we cannot programme safely without that information.
Retention
Order and financial records are retained for seven years to meet HMRC requirements. Coaching intake and programme delivery data are retained for the duration of your engagement plus three years, after which they are anonymised or deleted. Marketing data is retained until you unsubscribe, after which your record is suppressed rather than re-marketed.
Third-party processors
At launch, we operate with no third-party payment processors, email marketing platforms, or third-party analytics. Order details and contact data are handled directly by Zenith Scientific Ltd. Outbound shipping is dispatched via a UK courier confirmed in your shipping notification email. Website hosting is provided by our infrastructure operator under a UK GDPR-aligned data processing agreement.
When we introduce a payment processor, an email service provider, or third-party analytics, this Privacy Policy will be updated to name each processor with their lawful basis, retention period, and any international transfer safeguards. Material changes will be notified to existing customers by email.
Each processor is bound by data processing terms aligned with UK GDPR. We do not sell personal data, and we do not transfer personal data outside the UK or EEA except where the third-party processor’s standard contractual terms allow lawful transfer.
Your rights
Under UK GDPR you have the right to access your personal data, to request correction, to request erasure (subject to legal retention requirements), to restrict or object to processing, and to data portability. You also have the right to withdraw consent for any processing based on consent. To exercise any of these rights, contact us through the website. We respond within thirty days.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would prefer the chance to resolve any concern with you first.
International transfers
Personal data is processed and stored within the United Kingdom. We do not currently transfer personal data outside the UK or EEA. If a future processor requires international transfer, that transfer will rely on one of: the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, the UK-US Data Bridge, or another lawful transfer mechanism named in this Privacy Policy at that time.
Last updated: 7 May 2026