PRIVACY POLICY

Privacy Policy

Last updated: 05/02/2026

Who we are

Hold Fast is operated by Hold Fast Elite Ltd.

Our website address is: https://holdfastchallenge.com

If you have any questions about this policy or how we handle your data, you can contact us at:

[add contact email]

What personal data we collect and why

We only collect the personal data we need to run the website, process bookings and orders, and communicate with you.

Bookings, purchases and accounts

When you book a challenge day, purchase merchandise, or create an account on our website, we collect information such as:

Your name
Email address
Billing address
Phone number (if provided)
Order and booking details

This data is collected so we can:

Process payments and bookings
Communicate with you about your booking or order
Provide customer support
Meet legal and accounting requirements

Payments are processed securely by third-party payment providers (for example, Stripe or PayPal). We do not store your full card details on our servers.

WooCommerce & WooCommerce Bookings

We use WooCommerce and WooCommerce Bookings to manage product sales and challenge day bookings.

These systems store:

Your contact details
Booking dates and order history

This information is used only for fulfilling your booking or order and for record-keeping purposes.

Cookies

Our website uses cookies to ensure it functions properly.

These include:

Essential cookies required for site functionality (such as shopping cart and checkout)
Login cookies if you create an account
Session cookies to remember your actions during a visit

We do not use cookies for advertising, remarketing, or behavioural tracking.

You can control or delete cookies through your browser settings at any time.

Comments

If comments are enabled on the site and you leave a comment, we collect:

The data shown in the comment form
Your IP address and browser user agent string

This is done to help with spam detection.

An anonymised hash of your email address may be shared with the Gravatar service to display a profile image, if you use Gravatar.

Gravatar’s privacy policy: https://automattic.com/privacy/

Embedded content from other websites

Some pages may include embedded content (for example videos).

Embedded content behaves in the same way as if you visited the other website directly. These external websites may collect data about you, use cookies, or track your interaction with the embedded content.

Who we share your data with

We only share your data when necessary, for example:

Payment processors (to take payments securely)
Website hosting and technical providers
Spam detection services (if comments are enabled)

We do not sell or rent your personal data to third parties.

How long we retain your data

Booking and order information is retained for legal, tax, and administrative purposes
User account information is stored for as long as the account remains active
Comments and their metadata may be retained indefinitely

You can request deletion of your personal data where this does not conflict with legal obligations.

Your rights

Under UK data protection law, you have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate data
Request deletion of your personal data
Request a copy of your data in a portable format

To exercise these rights, please contact us using the details above.

Where your data is stored

Your data is stored securely on our website hosting servers and within trusted third-party services used to operate the site.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the website or legal requirements. Any updates will be posted on this page.