Privacy Policy

1. Who we are

BOUDICA ("we", "us", "our") provides online personal training services, coaching subscriptions, and downloadable training programmes. This policy explains how we collect, use, and protect your personal data when you use our website at boudica.co.uk and purchase our services.

For any questions about this policy or your data, contact us at hello@boudica.co.uk.

2. What data we collect

We collect the following categories of personal data:

• Account and contact information: your name and email address, when you register, subscribe, or purchase a programme.
• Payment information: processed securely by Stripe. We do not store your card details on our servers.
• Health and fitness information: details you voluntarily share with us relating to your training goals, fitness level, or injuries, for the purpose of building your personalised training plan.
• Usage data: basic technical information such as your browser type and pages visited, used to keep the site working correctly.

3. How we use your data

We use your personal data to:

• Create and manage your account
• Process payments and manage subscriptions
• Deliver purchased programmes and provide access to coaching services
• Send transactional emails, such as order confirmations and account updates
• Respond to enquiries and provide customer support
• Improve our website and services

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Who we share your data with

We share limited personal data with the following third-party service providers, solely to operate our services:

• Stripe — for secure payment processing
• Supabase — for secure storage of account and subscription data
• Resend — for sending transactional emails
• Our training app provider — to deliver your coaching plan, once you are enrolled as a coaching client

Each of these providers is contractually bound to process your data only for the purposes we specify, and to maintain appropriate security standards.

5. Legal basis for processing

We process your personal data under the UK General Data Protection Regulation (UK GDPR) on the following bases: performance of a contract (to provide the services you have purchased), legitimate interests (to operate and improve our business), and consent (where you have opted in to marketing communications, which you may withdraw at any time).

6. Data retention

We retain your personal data for as long as your account is active, and for a reasonable period afterwards to comply with legal, accounting, or tax obligations. You may request deletion of your account and associated data at any time, subject to any records we are legally required to keep.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at hello@boudica.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses only essential cookies required for the site and payment processing to function correctly. We do not use tracking or advertising cookies.

9. Data security

We take appropriate technical and organisational measures to protect your personal data, including encrypted data storage and secure, PCI-compliant payment processing via Stripe. No method of transmission over the internet is completely secure, but we work to protect your data to industry standards.

10. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.