Your data and privacy on REPs

As the UK register for fitness professionals, we maintain a secure directory that helps clients find qualified trainers. Trust in our platform relies on absolute transparency regarding how we handle your personal data. Whether you are a registered personal trainer uploading qualification certificates or a client searching for a local instructor, we protect your information with strict technical and organisational safeguards. We do not sell your data, nor do we compromise on security, ensuring our community remains safe and private at all times.
Information we collect from fitness professionals
To maintain professional registration and verify your credentials on REPs, we require specific verification data. This includes your full legal name, professional contact details, proof of identity, national insurance number, and officially accredited training qualifications. We also verify your active public liability insurance and professional indemnity coverage to confirm your safe operating status. We process this information to ensure every fitness professional on our register meets the stringent standards expected by the public and industry employers. We store registration documents on highly secure, encrypted servers managed within the United Kingdom, ensuring full compliance with the UK General Data Protection Regulation and the Data Protection Act 2018.
How we process and protect client information
- We collect basic contact information, such as your full name and verified email address, when you use our platform to enquire about a specific fitness professional.
- Postal codes entered during your search for local trainers are processed solely to calculate geographic proximity and are never saved to a permanent user profile database.
- Any messages sent to trainers via our platform are fully encrypted in transit to protect your personal fitness goals and private health history from unauthorised third-party access.
- We do not store your physical credit card details or financial data on our servers, relying instead on secure, PCI-compliant payment gateways to complete all system transactions.
- Your browsing history and directory interactions are anonymised to help us refine platform performance without compiling individual behavioural profiles or targeted advertising profiles.
What we never share with third parties
We maintain a strict and uncompromising policy against monetising your personal information. REPs will never sell, rent, or lease your private data to third-party marketing companies, health insurance providers, or commercial gym chains. Fitness professionals only display the public business information they explicitly choose to show on their directory profile, such as verified achievements, specialised training, and work locations. Private documents, including copies of government identification, home addresses, and qualification certificates used to complete registration checks, remain private. Our platform security teams constantly monitor these databases to detect and prevent unauthorised access, ensuring your professional records remain strictly confidential.
Your rights and accessing your data
Under UK data protection laws, you retain full ownership and control over your personal data on REPs. Professionals and clients alike have the legal right to request a complete copy of the information we hold about them by submitting a formal subject access request to our compliance team. You can also request that we correct any administrative inaccuracies or completely erase your personal data from our directory databases. While we are legally required to retain certain financial transaction details and core verification records for statutory tax and auditing purposes, we will promptly delete all non-essential marketing preferences, active accounts, and directory profiles upon your request.
"Data protection is not an administrative afterthought; it is the foundation upon which public trust in the fitness sector is built."
The REPs Standards Team
Standards & Verification
The REPs Standards Team is responsible for the verification framework, complaints process and the public register.


