Privacy Policy
Version 1.0
Last updated: 1 November 2026
This Privacy Policy explains how we collect, use, share and protect your personal data when you visit www.sabreenly.com, contact us, sign up to our mailing lists, buy from us, list your business, take part in coaching or coach training, register interest in research, or send us a video diary or testimonial.
1. Who we are
SABREENLY is a trading name of Global Muslim Weight Management Group Ltd, a company registered in England and Wales (company number 16056628). Our registered office is Northgate House, Northgate, Nottingham, NG7 7BQ.
Global Muslim Weight Management Group Ltd is the controller of the personal data described in this policy. This means we decide how and why your data is used, and we are responsible for it. We are registered with the Information Commissioner's Office (ICO) under registration number ZB894463.
In this policy, "SABREENLY", "we", "us" and "our" mean Global Muslim Weight Management Group Ltd.
2. How to contact us about your data
Our Data Protection Lead is responsible for questions about this policy and about how we handle personal data. You can contact the Data Protection Lead:
- using our data protection contact form; or
- by post: Data Protection Lead, Global Muslim Weight Management Group Ltd, Northgate House, Northgate, Nottingham, NG7 7BQ; or
- by email to [email protected], marked "Data Protection".
3. The personal data we collect
We only collect the data we need for each purpose. Depending on how you use SABREENLY, this may include:
| Type of data | Examples | When we collect it |
|---|---|---|
| Identity and contact details | Name, email address, phone or WhatsApp number, country | Contact, newsletter, research, coaching and coach training forms; orders |
| Organisation details | Organisation name, job title, business address, website, professional registration numbers | Business enquiries, provider and gym listings, advertising enquiries |
| Order and payment details | Products or services bought, billing address, order history. Card details are handled by Stripe and are not stored by us | When you pay us through our site, for example for advertising, directory listings or downloads. Coaching is never paid for through our site. It is paid directly to your coach |
| Communications | Messages you send us, complaints, feedback and our replies | When you contact us |
| Marketing preferences | Whether you have agreed to receive emails, and which lists you have joined | Sign-up forms |
| Health information | Weight, health goals, medical conditions, wellbeing information you choose to share | Coaching enquiries and bookings, research interest forms, video diaries and testimonials |
| Religious belief | Information that shows or suggests you are Muslim, or your religious practices | This may be revealed by your use of our faith-based services and content |
| Images and voice | Photos, videos and voice recordings | Video diaries and testimonials you choose to submit |
| Coach training and coach information | Qualifications, experience, training progress, assessment results, insurance details, and a self-declaration about unspent criminal convictions | Coach training enrolment, certification, and when certified independent coaches ask to be listed on SABREENLY |
| Technical and usage data | IP address, browser and device type, pages viewed, and how you use the site | When you visit the site (see our Cookie Policy) |
Special category data. Health information and information about religious belief are "special category data" under data protection law. Information about criminal convictions is "criminal offence data". We give these extra protection, as explained in section 5.
Where we get your data. Most of the data we hold comes directly from you. We may also receive limited data from Stripe (confirmation that a payment has been made), from Cloudflare and Matomo (technical and usage data), and from businesses that list on our directory (their own contact details).
4. How we use your data and our lawful basis
Data protection law requires us to have a lawful basis for each way we use your data. The table below sets these out.
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiries and messages | Legitimate interests (responding to people who contact us) |
| Processing payments for advertising, listings, downloads and other purchases, and sending order emails | Contract |
| Keeping financial and tax records | Legal obligation |
| Sending our newsletter and marketing emails | Consent. You can unsubscribe at any time |
| Helping you find a coach and passing your enquiry to the coach you choose | Contract, and explicit consent for health information |
| Running coach training, assessments and certification | Contract |
| Checking the suitability of trainee coaches before certification, including the criminal convictions self-declaration | Legitimate interests (protecting clients), with explicit consent for the declaration |
| Registering your interest in research and passing it to a research team, if you ask us to | Explicit consent |
| Publishing video diaries, testimonials and stories you submit | Explicit consent |
| Listing businesses and providers in our directory | Contract |
| Measuring and improving how the site is used (Matomo analytics) | Consent through our cookie banner |
| Keeping the site secure and preventing fraud and misuse | Legitimate interests |
| Handling complaints, safeguarding concerns and legal claims | Legitimate interests and, where it applies, legal obligation |
| Meeting our legal and regulatory duties | Legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can ask us for more information about this balance, and you have the right to object (see section 9).
5. Health, religious and criminal offence data
We only use health information, information about religious belief and criminal offence data where we have your explicit consent (UK GDPR Article 9(2)(a), and for criminal offence data, Article 10 together with the Data Protection Act 2018, Schedule 1, paragraph 29). We ask for this consent separately, with an unticked box, at the point we collect the data. You can withdraw your consent at any time. This will not affect anything we did before you withdrew it.
Using SABREENLY may suggest that you are Muslim, because our services are designed for Muslim communities. We do not use this to profile you or target you, and we do not share it with advertisers.
Our Appropriate Policy Document explains how we protect this data and how long we keep it.
6. Coaching
SABREENLY trains and certifies wellness coaches and helps you find one. Coaches who have passed our qualification are independent self-employed practitioners. They work for themselves, are not employed by SABREENLY and do not act on our behalf. You agree your coaching arrangements, and pay for coaching, directly with your coach. You do not pay for coaching through SABREENLY. Coaching sessions are not held on the SABREENLY platform. They take place by private video call between you and your coach.
SABREENLY does not attend, record or transcribe coaching sessions, and does not receive any recording or transcript of them. We only hold the information you give us when you enquire about coaching or ask us to put you in touch with a coach (which may include health information, with your explicit consent), and any feedback or complaint you send us. We do not take or hold payment for coaching.
Because coaches are independent, each coach is a separate controller of the personal data they collect from you, including the payment details you give them. Your coach is responsible for the video call service and payment method they use and for any notes, recordings or other records they make during or after your sessions, and their own privacy terms apply. A coach should not record a session without your agreement. Ask your coach how they will look after your information before your first session.
7. Who we share your data with
We do not sell your personal data. We do not share it with advertisers, and we do not use it for targeted advertising.
Service providers (processors). These companies process data on our behalf, only on our instructions and under a written contract:
| Provider | What they do for us | Location |
|---|---|---|
| Cloudways (DigitalOcean) | Website hosting | >to be inserted< |
| Cloudflare, Inc. | Website security, performance and cookie-free visit statistics | Global, including the United States |
| Mailchimp (Intuit Inc.) | Mailing lists and emails | United States |
| Matomo (InnoCraft Ltd) | Website analytics, only with your consent | >to be inserted< |
| Automattic Inc. (Jetpack) | Website security and site tools | United States |
| Square Socket | Website development, support and maintenance | United Kingdom |
Other organisations that make their own decisions about your data (independent controllers):
- Stripe processes your card payments. Stripe receives your payment details directly and uses them under its own privacy policy, including for fraud prevention and its legal duties.
- Independent coaches receive your details only when you ask us to put you in touch with them. Coaches are not employed by SABREENLY. Sessions take place by private video call between you and your coach, you pay your coach directly, and the coach is responsible for the call service and payment method they use and any records they keep.
- Directory providers, clinics, gyms and other businesses receive your details only if you choose to contact them or send them an enquiry through our site. Once they have your details, they are responsible for how they use them.
- Research teams receive your details only if you ask us to pass on your interest in a study. They will give you their own information about the study before you take part.
- Google (Google Translate, YouTube and reCAPTCHA) and Vimeo receive technical data when you use translation, watch embedded videos or use our forms, as explained in our Cookie Policy.
Others. We may share data with our professional advisers (such as lawyers and accountants), with HMRC and other authorities where the law requires it, with the police or safeguarding authorities where someone may be at risk of harm, or with a buyer if our business is sold. If the business is sold, the buyer will be bound by this policy.
8. International transfers
Some of our providers are based in, or access data from, the United States and other countries outside the UK. When we transfer personal data outside the UK, we make sure it is protected by one of the following:
- a UK "adequacy" decision, including the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge") where the US company is certified under it; or
- the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for more information about the safeguards for a particular transfer.
9. Your rights
You have the right to:
- access the personal data we hold about you and receive a copy;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use your data;
- object to us using your data where we rely on legitimate interests, and to direct marketing at any time;
- receive data you gave us in a portable format, and ask us to send it to another organisation (data portability);
- withdraw consent at any time, where we rely on consent.
Some rights have exceptions. For example, we may need to keep order records for tax purposes.
To use any of your rights, please use our data rights page. You can also write to us or email us at the details in section 2, so you do not have to use the form. We will reply within one month. If your request is complex, we may extend this by up to two further months, and we will tell you why. We will only ask for proof of identity if we need it to be sure who you are. Using your rights is free in most cases.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
10. How long we keep your data
We keep personal data only for as long as we need it. Our main retention periods are:
| Data | How long we keep it |
|---|---|
| Enquiries and messages | 2 years after our last contact with you |
| Mailing list details | Until you unsubscribe. We then keep a record that you unsubscribed, so we do not email you again |
| Orders, invoices and payment records | 6 years after the end of the financial year in which the order was made (tax law) |
| Coaching enquiries held by SABREENLY | 2 years after our last contact with you |
| Coach training records and certificates | 6 years after you complete or leave the course |
| Criminal convictions self-declarations | Only while you are a trainee or a certified coach listed on SABREENLY, then deleted |
| Research interest | Until the research you registered for ends, or 2 years, whichever is sooner, unless you ask us to keep you on file |
| Video diaries and testimonials | Until you withdraw consent, or for the period you agreed when you submitted them |
| Complaints and safeguarding records | 6 years after the matter is closed, or longer if the law requires it |
Our Data Retention Schedule gives more detail.
11. How we protect your data
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) across the site, Cloudflare security protection, two-factor authentication for website administrators, and access restricted to people who need it. No method of sending data over the internet is completely secure, but we work to protect your data and review our measures regularly.
If a personal data breach happens that is likely to put your rights at risk, we will report it to the ICO within 72 hours of becoming aware of it, as the law requires. If the breach is likely to put you at high risk, we will tell you without undue delay.
12. Age
Our services, including coaching, coach training, research registration, video diaries and our Halal Intimacy Education content, are only for people aged 18 or over. We do not knowingly collect personal data from children through these services. If you think a child has given us their details, please contact us using the details in section 2 and we will delete them.
13. Cookies
We use cookies and similar technologies on our site. Optional cookies are only used with your consent. Our Cookie Policy explains the cookies we use and how to control them.
14. Links to other websites
Our site links to other websites, including the websites of advertisers and businesses in our directory. We are not responsible for how those websites handle your data. Please read their privacy policies.
15. Complaints
If you are unhappy with how we have used your personal data, please contact our Data Protection Lead first using the details in section 2. We will acknowledge your complaint within 30 days and tell you how we will deal with it. Our Complaints Procedure explains the process.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
16. Changes to this policy
We will update this policy when we change how we use personal data, and we review it at least once a year. The version number and "last updated" date at the top show when it last changed. If we make an important change, we will tell you by email or with a notice on the site before the change takes effect.
This policy is written in English. If you read a translated version, the English version applies.