Privacy policy

CB COACHING PRIVACY POLICY
Last Updated: 09 December 2025
CB Coaching (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains
how we collect, use, store, disclose, and protect your personal information in compliance with UK
GDPR, EU GDPR (where applicable), and the Australian Privacy Act 1988 including the Australian
Privacy Principles (APPs).
1. Information We Collect
We collect personal information necessary to deliver our coaching services, including:
• Identity and contact information
• Health and fitness information (sensitive information under Australian law)
• Payment details (processed by Stripe; we do not store card details)
• Technical data such as IP address and device information
• Coaching interaction data including check-ins and messages
2. How We Collect Information
We collect data directly from you through onboarding forms, apps, check-ins, communication channels,
website interactions, and payment platforms. Australian clients: we only collect personal information
from you unless unreasonable or impracticable.
3. Why We Collect Information
We use data to:
• Deliver 1:1 Coaching and Crumble programmes
• Provide personalised training and nutrition guidance
• Process payments and manage subscriptions
• Communicate with you
• Meet legal and tax obligations
• Improve our services
4. Legal Basis (UK/EU)
For GDPR-covered clients, we process data on the basis of:
• Contractual necessity
• Consent (especially for sensitive health data)
• Legitimate interests
• Legal obligations
5. Consent for Sensitive Information (Australia)
By providing health or fitness information, you consent to us collecting and using it for coaching
purposes. You may withdraw consent, but this may impact your ability to use our services.
6. Data Disclosure
We do not sell your data. We may share information with trusted third-party processors including:
• Stripe
• Everfit / coaching app platforms
• Email service providers
• Cloud hosting services
Australian clients: APP 8 overseas transfer requirements apply. We ensure appropriate privacy
safeguards before sharing data internationally.

7. Data Retention
We retain data only as long as needed:
• Coaching data: up to 24 months after your programme ends
• Financial records: 6 years
• Emails and messages: up to 24 months
• Photos: deleted on request
8. Data Security
We take reasonable steps to protect your information, including encrypted platforms, access
restrictions, secure authentication, and reputable third-party providers.
9. Your Rights
UK/EU GDPR Rights:
• Access, correction, deletion, restriction, objection, portability, and withdrawal of consent.
Australian APP Rights:
• Access and correction of personal information
• Complaint rights under the Privacy Act
10. Cookies
If our website uses cookies, they may collect analytics or improve user experience. You may adjust
cookie settings through your browser.
11. Marketing Communications
You may receive coaching-related updates or optional newsletters. You can unsubscribe at any time.
Transactional communications cannot be opted out of.
12. Third-Party Links
External websites or apps linked through our services are not governed by this Privacy Policy.
13. Complaints
UK/EU: Contact the Information Commissioner’s Office (ICO) at ico.org.uk
Australia: Contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au
We request that you contact us first to resolve concerns.
14. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated via email or
platform notification.
15. Contact Us
CB Coaching
Charlotte@cbcoaching.com.au