forma./Security

Your clients' data, treated as sensitive.

Progress photos, body weights, check-in notes and payment records are personal. This is how forma. handles them.

01Four commitments

What we do, specifically.

  • 01

    Trainer-scoped access

    Access controls at the database level mean you only ever see your own clients' data — never another trainer's.

  • 02

    Encrypted in transit and at rest

    All traffic runs over HTTPS, and data is encrypted at rest by our hosting and database providers.

  • 03

    We don't sell data

    Your client data is used to run your business, full stop — never sold or shared with advertisers.

  • 04

    UK GDPR aligned

    Forma is a UK business and handles personal data in line with UK GDPR — retained only while your account is active, deleted on request.

02What forma. holds

The data that runs your business.

Every view in forma. is built from records your clients and your business already generate.

  • 01

    Check-ins

    Weight, photos and notes clients log against their programme.

  • 02

    Workout completions

    Sets, reps and sessions marked complete.

  • 03

    Payment records

    Subscription and one-off payments, processed securely through Stripe.

  • 04

    Sessions & bookings

    Scheduled sessions and calendar activity linked to each client.

03This website

A separate question: this site.

This page covers the forma. product. How this website handles your enquiry — what we collect, why, and for how long — is set out in the privacy notice.

Read the privacy notice

Questions about your data? Ask us.

Book a short call and we'll walk you through how forma. handles it.