This policy explains how Paul Welsh, trading as Paul Welsh Coaching ("I", "me"), looks after your personal information. I am the data controller. You can contact me at hello@paulwelshcoaching.com or at 43 Northmead Road, L19 5NN.
I am based in Spain and provide coaching to people in the UK and elsewhere. I follow UK data protection law (the UK GDPR and the Data Protection Act 2018) and, where it applies, the EU GDPR.
What I collect
- When you book a call or get in touch: your name, email address and any notes you add, through Google Calendar's appointment booking or by email.
- When you become a client: your contact details, goals and training history; your answers to the PAR-Q health questionnaire and any other health or injury information you choose to share; your training and progress data in the coaching app (Trainerize); our messages; and any photos or videos you send for form checks.
- Payments: paid by bank transfer to my Monzo business account or through PayPal. I see the name and payment details your bank or PayPal shares with me. I do not store card details.
- When you use this website: basic technical data your browser sends when pages load. If you choose to accept analytics cookies, Google Analytics also records how you use the site, such as pages visited, device type and approximate location. See the cookie notice.
Why I use it, and my legal basis
- To answer your enquiry and book a call: legitimate interests, and steps you ask me to take before a contract.
- To provide coaching: performance of our contract.
- Health information, including your PAR-Q answers: this is special category data. I process it only with your explicit consent, which you can withdraw at any time, although I may then be unable to coach you safely.
- To keep payment and accounting records: legal obligation.
- Website analytics: your consent, through the cookie banner.
Who I share it with
Only the providers I need to run the service. They process data on my instructions or under their own terms. I do not sell your data.
- Google: Google Workspace (my email), Google Calendar (booking), Google Meet (video check-ins), Google Drive (photos and videos you send) and, if you accept, Google Analytics.
- Trainerize: the coaching app that holds your plan and training data.
- Monzo and PayPal: payments.
- Cloudflare and GoDaddy: hosting my website and my domain name.
Some of these providers are based outside the UK and the European Economic Area. Where that happens, I rely on approved safeguards such as the UK International Data Transfer Agreement, standard contractual clauses or an adequacy decision.
How long I keep it
- Coaching records, including health questionnaires, messages, photos and videos: up to 24 months after our work ends, then deleted.
- Payment and accounting records: for as long as the law requires, which is usually 6 years.
- Enquiries that do not become coaching: 12 months, then deleted.
Your rights
You can ask to see, correct, delete or export your data, to restrict or object to how I use it, and to withdraw consent. Email hello@paulwelshcoaching.com and I will reply within one month. If you are unhappy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, or to the Spanish data protection authority, the AEPD, at aepd.es.
Age
Coaching is for adults aged 18 and over.
Changes
If I change this policy I will update the date above.