The Everyday Athlete
Sign in
Legal

Privacy Policy.

Last updated: 08 July 2026

1. Introduction

The Everyday Athlete (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share information about you when you use our website (www.everydayathletehub.com) and platform services.

Please read this policy carefully. By accessing or using our platform, you acknowledge that you have read and understood this Privacy Policy.

2. Who we are

The Everyday Athlete is a fitness coaching and corporate wellness platform based in the United Kingdom. We provide coach-led fitness programmes, training plans, and race hub features for company teams, racing partners, and charities.

3. What data we collect

We may collect and process the following categories of personal data:

3.1 Identity and contact data

  • Full name
  • Email address
  • Profile photo (if provided)
  • Employer or organisation name (for corporate hubs)

3.2 Health and fitness data

  • Race registrations (if provided)
  • Training plan progress (if completed)
  • Any health or fitness goals you choose to share

3.3 Payment data

If you make a purchase on our platform, payment information (such as card details) is processed securely by our third-party payment provider. We do not store full card numbers on our systems.

3.4 Technical and usage data

  • IP address
  • Browser type and version
  • Pages visited and time spent on the platform
  • Referring URLs
  • Device information

4. How we use your data

We use your personal data for the following purposes:

  • To create and manage your account on our platform.
  • To deliver coaching services, training plans, and race hub features.
  • To process payments and manage subscriptions.
  • To communicate with you about your account, programme updates, and support queries.
  • To send relevant news, updates, or promotional content (where you have consented).
  • To improve and develop our platform and services.
  • To comply with our legal obligations.

5. Legal basis for processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

  • Contract — processing is necessary to fulfil a contract with you (e.g., providing your coaching subscription).
  • Legitimate interests — processing is necessary for our legitimate business interests, where these are not overridden by your rights.
  • Consent — where you have given clear, informed consent (e.g., for marketing emails). You may withdraw consent at any time.
  • Legal obligation — where processing is required to comply with a legal requirement.

Health and fitness data is treated as special category data under UK GDPR and is only processed with your explicit consent or where otherwise permitted by law.

6. Data sharing

We do not sell your personal data to third parties.

We may share your data with:

  • Coaches and instructors on our platform, who require your data to deliver your programme.
  • Payment processors (e.g., Stripe), who handle transactions securely on our behalf.
  • Hosting and infrastructure providers (including Supabase and Vercel) who store data on our behalf under strict data processing agreements.
  • Analytics providers (on an anonymised or aggregated basis where possible).
  • Law enforcement or regulatory bodies where required by law.

All third parties are required to process your data in line with applicable data protection legislation and only for specified purposes.

7. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law.

When you close your account, we will delete or anonymise your personal data within a reasonable period, unless we are required to retain it for legal, tax, or accounting reasons.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — you can request that we delete your personal data.
  • Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
  • Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
  • Right to object — you can object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making — you have the right not to be subject to solely automated decisions that significantly affect you.

To exercise any of these rights, please contact us at sarah@everydayathletehub.com. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses cookies — small text files stored on your device — to improve your experience and analyse how the site is used.

We use the following types of cookies:

  • Essential cookies — required for the platform to function (e.g., maintaining your login session).
  • Preference cookies — remember your settings and choices (e.g., your light or dark theme).

For website analytics we use a privacy-friendly, cookieless service (Vercel Analytics), which helps us understand how visitors use the site without storing analytics or tracking cookies on your device.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform.

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and secure data storage.

While we work hard to safeguard your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you and the relevant authorities of any breach where required by law.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “last updated” date at the top of this page and, where appropriate, notify you by email or via the platform.

We encourage you to review this policy periodically to stay informed about how we are protecting your data.

12. Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please contact us: