Privacy Policy

Privacy Notice
Last updated: [02.02.2026]

This Privacy Notice explains how The Athlete Focused Group Ltd (“we”, “us”, “our”) collects and uses personal data when you use our website, create an account, or purchase our training packages.

1) Contact details

Registered address: 10 Newton Terrace, Charing Cross, Glasgow, United Kingdom, G3 7PJ
Email: info@athletefocused.com
Company number: SC549947
Registered in: Scotland

If you have questions about this notice or your data, email us at info@athletefocused.com.

2) The personal data we collect

We may collect the following categories of personal data:

A. Account and profile data

• Name, email address, phone number (if provided)
• Username/password (password is stored in hashed form)
• Account preferences and settings

B. Purchase and service data

• Training package purchased, subscription status, billing history
• Communications and support messages
• Coaching/training information you provide (e.g., goals, training history)

C. Payment data

• We use Stripe to process payments. We do not store full card details on our servers. Stripe may process your payment details, billing address and transaction information.

D. Marketing data

• Newsletter sign-ups, consent records, email engagement (opens/clicks if enabled)
• We use Hubspot for mailing list management and campaigns.

E. Website usage and device data

• IP address, device/browser information, pages visited, and events
• We use Google Analytics 4 (“GA4”) to understand website performance (subject to cookie consent—see Cookie Policy).

F. Security and fraud-prevention data

• Login attempts, IP addresses, timestamps, and other security event data
• We use Wordfence to help protect our website from malicious activity.

Special category data (health information):
If you choose to share information about injuries, medical conditions, or other health details, this may be “special category” data. We only use it for providing your training service and we apply extra protections (see section 5).

3) Where we get your data from

• Directly from you (forms, account creation, purchases, messages)
• Automatically from your device (cookies, logs, analytics)
• From service providers used to run the site (e.g., payment and email platforms)

4) How we use your data and our lawful bases

We use personal data for:

A. Providing our services (Contract)

• Create and manage your account
• Deliver training packages and subscription access
• Provide customer support and service communications

B. Payments and accounting (Contract / Legal obligation)

• Process payments and manage invoices/receipts
• Maintain accounting and tax records

C. Website security and fraud prevention (Legitimate interests)

• Monitor, prevent, and investigate fraud, abuse, and security incidents

D. Marketing communications (Consent / Legitimate interests where permitted)

• Send newsletters and promotions where you opted in (or where “soft opt-in” applies and you can easily opt out)
• You can unsubscribe at any time using the link in emails

E. Analytics and site improvement (Consent for non-essential cookies; Legitimate interests for strictly necessary logs)

• Measure and improve website performance and user experience
  (We only run non-essential analytics cookies where you consent — see Cookie Policy.)

5) Special category (health) data — how we handle it

If you provide health or injury information, we will:

• Use it only to tailor your training support and maintain safety
• Rely on your explicit consent (where required) and/or another valid legal basis as applicable
• Limit access to trained staff/contractors who need it
• Delete it when no longer needed for the purpose it was collected

You can withdraw consent for this at any time, but that may affect our ability to provide a tailored service.

6) Who we share your data with

We share data only where necessary, including with:

• Payment processing providers (e.g., Stripe)
• Email marketing provider (Mailchimp)
• Analytics provider (GA4, if enabled by consent)
• Hosting, IT, and security providers (including Wordfence features you enable)
• Professional advisers (accountants, legal advisers) where needed
• Regulators, law enforcement, or courts where required by law

7) International data transfers

Some providers may process data outside the UK. Where this happens, we use appropriate safeguards (such as UK adequacy regulations and/or standard contractual clauses/UK addendum) to protect your data.

8) How long we keep your data

We keep personal data only as long as needed for the purposes above. Typical retention:

• Account data: while your account is active; then up to [12–24] months after closure
• Purchases/billing records: typically up to 6 years for accounting/tax purposes
• Marketing list data: until you unsubscribe; we may keep a suppression record to ensure we respect your opt-out
• Security logs: typically [90 days–12 months] depending on risk and settings

9) Your rights

You have rights to:

• Access your data
• Correct inaccurate data
• Request deletion (in some cases)
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent (where we rely on consent)

To exercise rights, email info@athletefocused.com.

10) Complaints

If you’re unhappy with how we handle data, you can complain to the UK data protection regulator, the Information Commissioner’s Office.

11) Children

Our services are intended for customers aged 18+. If we allow under-18 customers, a parent/guardian must purchase and supervise use, and additional safeguards may apply. [Adjust to your actual policy.]

12) Changes to this notice

We may update this notice from time to time. The latest version will be posted on our website with the “Last updated” date.