Privacy notice

Last updated: [DATE]

Template, finish before launch. Replace each highlighted [bracketed] detail, then delete this box. This is a starting point, not legal advice.

Who I am

I am [YOUR FULL NAME], trading as Cox Physique Coaching. I decide how your information is used, which makes me the data controller. You can contact me at [YOUR EMAIL].

What I collect

When you apply: your name, email, optional phone number, goal, training experience and anything you write in the form.
When you are a client: your name and email, your training and nutrition plans, and what you log in the app, such as bodyweight, steps, food, sleep, mood, workouts, weekly check-in answers and any pain or injury you tell me about.
Outside the app: physique photos you send me on WhatsApp, and my video feedback to you, which I share by link.

Information about your health and body counts as special category data. I only use it with your explicit consent, which you give when you create your account and can withdraw at any time.

Why I use it

To decide whether I can coach you and to reply to your application.
To build your plans, track your progress and give you feedback.
To run my coaching business, for example to keep records of who I coach.

Who can see it

Only you and I can see your plan and logs. Other clients cannot. I use these services to run the app and my coaching, and they process data for me: Supabase (database and sign-in), [Netlify or your website host] (website hosting), WhatsApp (photos and messages) and Loom (video feedback). [Add or remove services to match what you use.] I do not sell your information.

Where it is stored

App data is stored with Supabase in [the region you chose, for example London]. Some services listed above may process data outside the UK. [Check each provider's international transfer terms and describe them here.]

How long I keep it

I keep your information while you are a client and for [for example, 12 months] afterwards, then delete it. I keep unsuccessful applications for [for example, 6 months]. You can ask me to delete your information sooner.

Your rights

You can ask to see your information, correct it, delete it, restrict how I use it, receive a copy, or object to my use of it. You can also withdraw your consent at any time. To do any of these, email [YOUR EMAIL].

If you are unhappy with how I handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.