Who's responsible for your data
YM Athletic is the data controller for the information described here. Contact us at athletic.ym@gmail.com about anything on this page.
What we collect, and why
- Contact details — name, email, phone. To coach you and to run your account. Lawful basis: performance of our contract.
- Health and body information — injuries, conditions, medication, pain, measurements, weight, progress photos and training video. To build and adjust your programme safely. Lawful basis: your explicit consent.
- Lifestyle information — schedule, work pattern, sleep, food. To build a programme that fits your week. Lawful basis: performance of our contract.
- Payment records — amount, date, and the last four digits of your card. We never see or store your full card number; Stripe handles that. Lawful basis: contract, and legal obligation for tax records.
- Enquiry details — what you tell us on the assessment call. Lawful basis: steps taken at your request before entering a contract.
Health information is a special category under UK GDPR. We ask for your explicit consent before collecting it, we use it only to coach you, and you can withdraw that consent at any time — though we may not be able to keep coaching you safely without it.
Who else sees it
We use a small number of services to run the business. Each processes data on our instructions.
- Stripe — payments and subscriptions
- Google — Forms for check-ins, Sheets for your programme and progress, Gmail for email
- Cal.com — call bookings
- WhatsApp (Meta) — day-to-day messaging, if you choose that channel
- Netlify — hosting for this website
- Our accountant and HMRC, where tax law requires it
Some of these transfer data outside the UK. Where they do, they rely on the UK's approved safeguards for international transfers. We never sell your data, and we never share it for anyone else's advertising.
If you'd rather your health information didn't sit in Google Sheets or WhatsApp, tell us and we'll agree a different route with you.
How long we keep it
- Coaching records and health information — 2 years after coaching ends, then deleted.
- Payment and tax records — 6 years, because HMRC requires it.
- Photos and video — deleted when coaching ends, unless you've given separate permission for us to use them publicly.
- Enquiries that don't become clients — 12 months.
Your rights
Under UK data protection law you can ask us to:
- Give you a copy of what we hold about you
- Correct anything that's wrong
- Delete it
- Restrict or stop how we use it
- Send it to you, or another provider, in a portable format
- Stop sending you marketing, at any time
Where we rely on your consent — which is the case for all health information — you can withdraw it at any time. That doesn't undo anything we did before you withdrew it.
Email athletic.ym@gmail.com. We respond within one month, free of charge.
Cookies and this website
This site sets no cookies and runs no analytics or advertising trackers.
It does load fonts from Google Fonts, which means Google receives your IP address when a page loads. Pages that embed booking or payment links pass you to Cal.com, Stripe or Google Forms, each of which sets its own cookies under its own policy once you're there.
Marketing
We only email you about coaching offers if you're a client or you asked us to. Every message has an unsubscribe option, and unsubscribing never affects your coaching.
Complaints
Email athletic.ym@gmail.com and we'll sort it. We read everything, we reply, and we'd much rather fix a problem ourselves than have you go anywhere else with it.
You also have the right to raise a data protection concern with the Information Commissioner's Office, the UK regulator. We'd ask you to come to us first.