Privacy Policy

Last updated: [13/07/26]

TUFRunCo ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. It applies to visitors to our website and to coaching clients.

We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

Contact: [DAN DURANCE] — [TUFRUNCO@GMAIL.COM]

1. What Data We Collect

1.1 Data you give us directly

  • Contact/enquiry forms: name, email address, and any message content you submit.

  • Coaching clients: name, email, phone number, address (where needed for correspondence or invoicing), date of birth (where relevant to training load), and payment details (processed by our payment provider — see Section 3).

  • Health and training data: where you engage us as a coaching client, we may collect information about your running history, training load, injuries, medical conditions, and other health-related information you choose to share, in order to design and adjust your training plan safely.

  • Email newsletter: name and email address, if you subscribe.

1.2 Data collected automatically

  • Analytics: when you visit our website, we use Google Analytics (or similar) to collect data such as IP address, browser type, device type, pages visited, and time spent on site. This data is aggregated and used to understand how the site is used.

  • Cookies: see Section 6.

2. Special Category Data (Health Information)

Information about your health, injuries, or medical history is classed as "special category data" under UK GDPR, and we treat it with extra care.

  • We only collect health/injury information where you provide it voluntarily as part of coaching — for example, to plan training safely around an injury.

  • Legal basis: we rely on your explicit consent to process this data (UK GDPR Article 9(2)(a)). You will be asked to confirm this consent separately when you sign up as a coaching client, and you can withdraw it at any time by contacting us — though this may affect our ability to coach you safely.

  • We do not use health data for any purpose beyond coaching (e.g. we do not sell it, share it for marketing, or use it for anything unrelated to your training).

  • We limit access to this data to what's necessary to deliver your coaching.

3. Payment Processing

Online payments are handled by third-party payment processors (e.g. Stripe and/or PayPal). We do not store your full card details on our own systems — these are processed directly by the payment provider under their own privacy policy and security standards (both are PCI-DSS compliant).

We retain records of transactions (amount, date, service purchased) for accounting and legal purposes (see Section 7).

4. Why We Process Your Data (Legal Basis)

Purpose Data used Legal basis Responding to enquiries Name, email, message Legitimate interest Delivering coaching services Name, contact details, health/training data Contract (and explicit consent for health data) Processing payments Name, payment details Contract Sending marketing/newsletter emails Name, email Consent Website analytics IP address, browsing behaviour Consent (via cookie banner) / legitimate interest Legal and accounting records Transaction records Legal obligation

5. Email Marketing

If you subscribe to our newsletter or marketing emails, we will use your name and email address to send you updates, offers, or content related to TUFRunCo. You can unsubscribe at any time using the link in any email, or by contacting us directly. We will not add you to marketing lists without your consent (e.g. simply enquiring or booking a coaching session does not automatically sign you up to marketing emails, unless you've separately opted in).

6. Cookies

Our website uses cookies to:

  • Enable core site functionality

  • Understand site usage via analytics (Google Analytics)

  • Support payment processing where applicable

You can control or disable cookies through your browser settings. Disabling cookies may affect site functionality. Where required by law, we will ask for your consent via a cookie banner before setting non-essential cookies.

7. Data Retention

  • Enquiry form data: retained for up to 12 months if no coaching relationship begins, then deleted.

  • Coaching client data (including health data): retained for the duration of the coaching relationship plus [6 years / your preferred period], in line with standard UK record-keeping practice for services involving health/safety considerations.

  • Financial/transaction records: retained for 6 years, as required by HMRC.

  • Marketing list data: retained until you unsubscribe or withdraw consent.

8. Who We Share Data With

We do not sell your data. We share data only with:

  • Payment processors (Stripe/PayPal) to process transactions

  • Email marketing platform (e.g. Mailchimp/similar) if you subscribe to our newsletter

  • Analytics providers (Google Analytics)

  • Accountant/bookkeeper, where necessary for financial record-keeping

  • Authorities, where required by law (e.g. HMRC, or in a medical emergency where disclosure is necessary to protect your safety)

Any third party processing your data on our behalf does so under a data processing agreement and is required to protect your data to UK GDPR standards.

9. International Transfers

Some third-party providers (e.g. Google, Stripe, PayPal) may process data outside the UK/EEA. Where this happens, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or the provider's own UK/EU adequacy arrangements).

10. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate data

  • Erase your data ("right to be forgotten"), subject to legal retention requirements

  • Restrict or object to certain processing

  • Data portability — receive your data in a portable format

  • Withdraw consent at any time, where processing is based on consent (including health data)

  • Complain to the Information Commissioner's Office (ICO) if you believe your data has been mishandled: https://ico.org.uk

To exercise any of these rights, contact us at [TUFRUNCO@GMAIL.COM].

11. Children

Our services are not directed at children under 16. If you are under 16, please do not submit personal data without the involvement of a parent or guardian.

12. Security

We take reasonable technical and organisational measures to protect your data, including secure hosting, restricted access to client health data, and use of reputable third-party processors for payments and analytics. No method of transmission over the internet is 100% secure, but we work to protect your data to industry standards.

13. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top will reflect the most recent revision. Significant changes affecting how we use your data will be communicated directly where appropriate.

14. Contact Us

If you have questions about this policy or how your data is handled, contact:

[DAN DURANCE] [TUFRUNCO@GMAIL.COM] TUFRunCo

You also have the right to lodge a complaint with the ICO: https://ico.org.uk / 0303 123 1113.