Privacy policy
DRAFT. Have this reviewed by a solicitor or a data-protection service before you collect health information or take payments. Fill in every [bracket].
1. Who is responsible for your data
Maor Lilov, trading as ML Performance Coaching [registered business name and address], is the data controller. Contact: maorlilov701@gmail.com. [ICO registration number.]
2. What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Name, email, phone you give us (waitlist, free guide, coaching application) | To reply to you and send what you asked for | Consent, or steps you asked us to take before a contract |
| Onboarding form: date of birth, football position and self-assessment, occupation, injuries, training history and routine, goals, medical conditions, family history of cardiovascular disease, menstrual cycle information, sleep, diet and welfare details | To plan your training safely and coach you | Contract. Health information is special category data, which we process only with your explicit consent |
| Payment details (handled by Stripe) and purchase records | To take payment, issue receipts and meet tax rules | Contract and legal obligation |
| Messages and coaching records | To deliver and improve your coaching | Contract, and consent for health information |
| Basic visit counts (Cloudflare Web Analytics, no cookies) | To see how the site is used | Legitimate interests |
You can answer "N/A" or leave questions blank. If you do not give health information, we may be unable to coach you safely.
3. Who receives your data
Only service providers that help us run the business, under written terms: Stripe (payments), Cloudflare (website hosting and analytics), Resend (sending email), Google Workspace (our email and documents), and BridgeAthletic (delivering plans and coaching). [Check this list is complete and add links to each provider's privacy information.] We do not sell your data or use it for advertising.
4. Transfers outside the UK
Some of these providers process data in the United States or other countries. Where they do, we rely on the UK data bridge, the UK International Data Transfer Addendum or an equivalent safeguard. [Confirm for each provider.]
5. How long we keep it
| Data | Kept for |
|---|---|
| Enquiries and waitlist sign-ups | Up to 12 months, or until you unsubscribe |
| Onboarding and coaching records | While you are a client and for [2] years afterwards |
| Financial records | 6 years, as tax law requires |
6. Your rights
You can ask us to see, correct, delete or restrict your data, to move it, and to object to how we use it. Where we rely on consent you can withdraw it at any time. Email us and we will reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
7. Children
We do not knowingly collect data from under-18s without a parent or guardian's involvement. [Describe your process if you coach young athletes.]
8. Cookies and analytics
This site does not use cookies for tracking or advertising. It uses Cloudflare Web Analytics to count visits, which works without cookies. If we add other analytics or advertising tools later, we will ask for your consent first and update this page.
Last updated: [date]