Privacy Policy
Last updated 2 October 2026
This policy explains what personal information 23 Lean collects, why we collect it, and what choices you have. We keep it simple and only collect what we need to coach you well.
1. Who we are
23 Lean Physique Consultancy ("23 Lean", "we", "us") is an online coaching business run by Sharif Lawton, based in London, United Kingdom. We are the data controller for the personal information described in this policy.
Contact: [email protected]. If you need a postal address for a formal request, email us and we will provide one.
2. What we collect
- When you get in touch: your name, Instagram handle and anything you include in your message to us on Instagram, WhatsApp or email.
- When you become a client: your contact details, age, goals, training history, lifestyle and schedule, body measurements, progress photos and check-in answers.
- Health information you choose to share: for example injuries, medical conditions or medication that affect your training or nutrition. This is special category data and we treat it with extra care.
- Payment information: payments are handled by our payment provider. We see confirmation of payment, not your full card details.
- Website data: information about how you use our pages, such as pages viewed and buttons tapped, collected through cookies and similar tools (see section 8).
3. How we use it, and why we're allowed to
- To reply to your enquiry and tell you about coaching. Lawful basis: our legitimate interest in responding to people who contact us.
- To deliver your coaching, including your training, nutrition and lifestyle plans and check-ins. Lawful basis: to perform our contract with you.
- To use health information so your plan is safe and suitable. Lawful basis: your explicit consent, which you can withdraw at any time.
- To run our business, such as keeping records and accounts. Lawful basis: legal obligation and legitimate interests.
- To measure and improve our marketing, including advertising on Meta platforms. Lawful basis: your consent through our cookie settings.
- To send you updates or offers. Lawful basis: your consent. You can unsubscribe at any time.
4. Testimonials and progress photos
We only share your results, photos, name or words publicly with your permission. You can ask us to blur your face, use your first name only, or stop using your story at any time, and we will remove it from our website and future content.
5. Who we share it with
We never sell your information. We share it only with trusted providers who help us run 23 Lean, such as our website and client management platform (GoHighLevel), messaging and social platforms (Meta, Instagram and WhatsApp), video hosting (Vimeo), our payment provider and any coaching app we use to deliver your plan. Some of these providers store data outside the UK. Where they do, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or an adequacy decision.
6. How long we keep it
- Enquiries that don't lead to coaching: up to 12 months.
- Client records: for the length of your coaching and up to 6 years after it ends, for legal and tax purposes.
- Progress photos and health information: deleted when you ask, or when we no longer need them to coach you, unless you have agreed to their use as a testimonial.
7. Your rights
Under UK data protection law you can ask us to give you a copy of your information, correct it, delete it, limit how we use it, or move it to another provider. You can also object to how we use it and withdraw consent at any time. Email us and we will respond within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.
8. Cookies
Our pages use essential cookies so they work properly. With your consent, we also use analytics and advertising cookies, including the Meta Pixel, to understand which content helps people and to show our ads to the right audience. You can accept or decline these through the cookie banner, and change your mind at any time in your browser settings. Embedded videos from Vimeo may also set cookies when you play them.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.