Data Processing & Subprocessors

You are the controller of your clients' personal data. While we build and support your platform we act as your processor, and only on your instructions.

• Client identity and contact details entered at signup
• Questionnaire answers, goals and training notes
• Uploaded film, images and documents
• Purchase and subscription records (card details are handled by the payment provider, never by us)
• Usage and progress records generated inside the platform

Your platform depends on third-party services. The specific providers for your build are confirmed in writing before launch, and are typically drawn from these categories:

• Payment processing
• Application hosting and database
• File and video storage or delivery
• Transactional email and notifications
• Video calling
• Analytics and error monitoring, where you choose to enable it

We tell you before a new category of subprocessor is introduced to your platform.

Access is limited to the people who need it, protected by unique credentials and multi-factor authentication where the provider supports it. Data is encrypted in transit and at rest by the underlying providers.

Providers may store or process data in regions outside your own. Where that happens we rely on the provider's own transfer safeguards and name the regions involved on request.

We keep working copies of your data only for as long as needed to build and support the platform. At handover, production data lives in accounts you control, and we delete our working copies on request.

If one of your clients contacts us directly we refer them to you. If we become aware of a breach affecting your data we notify you without undue delay and help you assess it.

Many athletes coach under-18s. If your platform will collect data from minors, tell us during scope so we can build the consent, guardian and access controls your jurisdiction requires.