The Everyday Athlete
Sign in
Legal

Privacy Policy.

Last updated: 24 September 2026

1. Introduction

The Everyday Athlete (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share information about you when you use our website (www.everydayathletehub.com), our mobile apps for iOS and Android, and our platform services. In this policy, “platform” means all three.

Please read this policy carefully. By accessing or using our platform, you acknowledge that you have read and understood this Privacy Policy.

2. Who we are

The Everyday Athlete is a fitness coaching and corporate wellness platform based in the United Kingdom. We provide coach-led fitness programmes, training plans, and race hub features to individual members, one-to-one coaching clients, company teams, racing partners, and charities.

3. What data we collect

We may collect and process the following categories of personal data:

3.1 Identity and contact data

  • Full name
  • Email address
  • Profile photo (if provided)
  • Employer or organisation name (for corporate hubs)

3.2 Health and fitness data

  • Race registrations (if provided)
  • Training plan progress (if completed)
  • Any health or fitness goals you choose to share

3.3 Payment data

If you make a purchase on our platform, payment information (such as card details) is processed securely by our third-party payment provider. We do not store full card numbers on our systems.

3.4 Technical and usage data

  • IP address
  • Browser type and version
  • Pages visited and time spent on the platform
  • Referring URLs
  • Device information

3.5 Connected accounts

If you choose to connect your Outlook or Microsoft 365 calendar, we store the secure access token that lets us add your training sessions to it. We do not read the rest of your calendar’s contents for any other purpose, and you can disconnect at any time in your settings.

If you add a fundraising page link to your profile, we read the public page to show your total raised on your hub’s leaderboard. Only the link you give us is used — nothing about you is sent to the fundraising site.

4. How we use your data

We use your personal data for the following purposes:

  • To create and manage your account on our platform.
  • To deliver coaching services, training plans, and race hub features.
  • To process payments and manage subscriptions.
  • To communicate with you about your account, programme updates, and support queries.
  • To send relevant news, updates, or promotional content (where you have consented).
  • To improve and develop our platform and services.
  • To comply with our legal obligations.

5. Legal basis for processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

  • Contract — processing is necessary to fulfil a contract with you (e.g., providing your coaching subscription).
  • Legitimate interests — processing is necessary for our legitimate business interests, where these are not overridden by your rights.
  • Consent — where you have given clear, informed consent (e.g., for marketing emails). You may withdraw consent at any time.
  • Legal obligation — where processing is required to comply with a legal requirement.

Health and fitness data is treated as special category data under UK GDPR and is only processed with your explicit consent or where otherwise permitted by law.

6. Data sharing

We do not sell your personal data to third parties.

We may share your data with:

  • Coaches and instructors on our platform, who require your data to deliver your programme.
  • Payment processors (Stripe), who handle transactions securely on our behalf.
  • Hosting and infrastructure providers (Supabase and Vercel) who store and serve data on our behalf under strict data processing agreements.
  • Our enquiry and membership records system (Airtable). When you submit a form on our website — a contact or hub enquiry, a coaching application, the scorecard, a guide download, an event sign-up or a sponsorship enquiry — the details you provide are stored in Airtable so we can respond and keep track of it.
  • Our email provider (Resend), which delivers the emails we send you, such as confirmations, invitations and the results or guides you ask for.
  • Microsoft, but only if you choose to connect your Outlook or Microsoft 365 calendar. With your permission we add your training sessions to your calendar and keep them up to date. Connecting is entirely optional, and you can disconnect it at any time in your settings — which removes our access.
  • Analytics providers (on an anonymised or aggregated basis where possible).
  • Law enforcement or regulatory bodies where required by law.

All third parties are required to process your data in line with applicable data protection legislation and only for specified purposes.

7. International transfers

Our platform and its database are hosted in Frankfurt, Germany, within the European Economic Area (EEA). The UK recognises the EEA as providing an equivalent standard of data protection, so information held there is covered by UK “adequacy” rules.

Some of the other providers listed above are based in the United States — for example Airtable and Resend — so some of your data is transferred outside the UK and EEA.

Where your personal data is transferred outside the UK, we make sure it is protected to a standard equivalent to UK data protection law. We rely on one or more of the following safeguards:

  • the country having UK “adequacy” status, meaning the UK government has decided it offers an equivalent level of protection; or
  • the UK International Data Transfer Agreement, or the UK Addendum to the European Commission’s Standard Contractual Clauses, in our contract with the provider.

You can ask us for more detail about the safeguards that apply to a particular provider by contacting us at sarah@everydayathletehub.com.

8. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law.

When you close your account, we will delete or anonymise your personal data within a reasonable period, unless we are required to retain it for legal, tax, or accounting reasons.

9. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — you can request a copy of the personal data we hold about you.
  • Right to rectification — you can ask us to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) — you can request that we delete your personal data.
  • Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
  • Right to data portability — you can request your data in a structured, commonly used, machine-readable format.
  • Right to object — you can object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making — you have the right not to be subject to solely automated decisions that significantly affect you.

To exercise any of these rights, please contact us at sarah@everydayathletehub.com. We will respond within one month of receiving your request.

You can also delete your account yourself at any time — see how to delete your account.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies

Our website uses cookies — small text files stored on your device — to improve your experience and analyse how the site is used.

We use the following types of cookies:

  • Essential cookies — required for the platform to function (e.g., maintaining your login session).
  • Preference cookies — remember your settings and choices in the members’ area (for example, your light or dark theme).

For website analytics and performance monitoring we use privacy-friendly, cookieless services (Vercel Analytics and Vercel Speed Insights), which help us understand how visitors use the site and how quickly it loads, without storing analytics or tracking cookies on your device.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform.

11. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and secure data storage.

While we work hard to safeguard your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you and the relevant authorities of any breach where required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “last updated” date at the top of this page and, where appropriate, notify you by email or via the platform.

We encourage you to review this policy periodically to stay informed about how we are protecting your data.

13. Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please contact us: