1. Who we are / Data Controller

Kathryn Sands is the primary Data Controller for any personal data you provide via this Website or through our Services.

Kathryn Sands contact details:

Email: [email protected]

Address:

Melton Hill Farm

South Lawn Way

North Ferriby

HU14 3BL

2. Partnership & data roles (important)

Optimum Performance Academy Ltd works in partnership with Kathryn Sands to support the delivery of certain aspects of the Services, including:

Providing and managing payment links

Supporting the delivery of parts of the Blueprint Programme

Website operation, administration, and technical support

Unless stated otherwise:

Kathryn Sands acts as the primary Data Controller

Optimum Performance Academy Ltd acts as a Data Processor, processing personal data only on documented instructions from Kathryn Sands

In limited circumstances where both parties jointly determine how and why data is processed (e.g. programme delivery or payment flows), the parties may act as Joint Controllers in accordance with UK GDPR

Appropriate contractual safeguards are in place between Kathryn Sands and Optimum Performance Academy Ltd to ensure compliance with data protection law.

3. What personal data we collect

We may collect and process the following categories of personal data, depending on how you interact with the Website or Services:

Contact information: name, email address, phone number, postal address (if provided)

Account or client details: if you register, enrol in a course, or participate in a programme

Payment information: required for purchases

(Note: payment card details are handled securely by our third-party payment provider, such as Stripe. We do not store card details.)

Technical and usage data: IP address, browser type, device identifiers, pages visited, duration, referral data

Marketing preferences and communication history: newsletter sign-ups, email preferences

Additional information you choose to provide: including form responses, questionnaires, or health / fitness-related information where relevant to the Services

4. How we collect data

We collect personal data:

Directly from you, via sign-up forms, contact forms, purchase or booking forms, enrolment or onboarding processes, and direct communication (email or chat)

Automatically, via cookies or similar technologies when you visit the Website

From trusted third-party service providers, such as payment processors or email-marketing platforms, when you interact with those services through our Website

5. Purpose of processing & lawful basis

We use your personal data for the following purposes:

To provide and manage the Services you request (e.g. programme enrolment, coaching, Blueprint Programme access)

To process payments and fulfil purchases

To communicate with you, including responding to enquiries, confirmations, service updates, and newsletters (where you have opted in)

To improve the Website and Services (analytics, user experience, performance, troubleshooting)

To comply with legal or regulatory obligations

For marketing purposes, where you have provided consent

Our lawful basis for processing typically includes:

Performance of a contract

Legal obligation

Legitimate interests (e.g. service improvement)

Consent, where required (e.g. marketing)

6. Cookies and tracking technologies

We may use cookies or similar technologies to collect technical and usage data.

Cookies may be used for:

Website functionality

Analytics

Improving user experience

Where cookies are non-essential, we will request your consent before enabling them. You may configure your browser to reject or delete cookies; however, this may affect certain Website functionality.

7. Who we share data with

We may share your personal data with:

Optimum Performance Academy Ltd, strictly for the purposes outlined in this Policy and in support of Service delivery

Third-party service providers, such as payment processors, analytics providers, or email-marketing platforms, acting under data-processing agreements

Legal or regulatory authorities, where required by law or to protect our legal rights

We do not sell or rent your personal data to third parties.

8. International transfers

If personal data is transferred outside the UK or the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses, in compliance with UK GDPR.

9. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

Service delivery

Client relationship management

Legal, regulatory, or accounting requirements

10. Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration.

While we take reasonable steps to safeguard data, no internet-based system can be guaranteed to be 100% secure.

11. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

Access your personal data

Request correction of inaccurate or incomplete data

Request erasure of your data (subject to legal limitations)

Restrict or object to certain processing

Withdraw consent at any time (where processing is based on consent)

Request data portability

Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise your rights, please contact us using the details below.

12. Children or minors

The Website and Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the “Last updated” date will be revised accordingly. Continued use of the Website or Services indicates acceptance of the updated Policy.

14. Data roles & contact details

Data Controller:

Kathryn Sands

Email: [email protected]

Data Processor:

Optimum Performance Academy Ltd

Email: [email protected]

Data Protection Officer (DPO) (if applicable):

Name: Kathryn Sands

Email: [email protected]

15. Contact

If you have any questions, concerns or requests regarding this Privacy Policy or how your data is handled, please contact:

Kathryn Sands

Email: [email protected]

Address:

Melton Hill Farm

South Lawn Way

North Ferriby

HU14 3BL