Privacy policy
Existing Apex Rises Coaching document · effective June 2025
Apex Rises Coaching is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, and how we handle it. We comply with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), and applicable US privacy principles.
Who We Are
Apex Rises Coaching is a remote endurance coaching business specialising in trail and ultra-distance running. We operate as the data controller for the personal information you provide to us.
If you have any questions about how your data is handled, you can contact us directly — see Section 11.
Data We Collect
We collect personal data only where necessary to deliver our coaching services or respond to your enquiries. This may include:
Information you provide directly
- Name, email address, and contact details submitted via application or onboarding forms
- Location (country/region) for legal and programme-delivery purposes
- Training history, race experience, and performance goals
- Health information voluntarily disclosed that is relevant to your training (e.g. injuries, medical conditions)
- Communication records — emails, messages, and coaching notes
Information collected automatically
- Basic website analytics such as page views and referral source (where analytics tools are in use)
- Device and browser type for technical compatibility purposes
Third-party platforms
- Training data you share via platforms such as Garmin Connect, Strava, TrainingPeaks, or similar — subject to those platforms' own privacy policies
How We Use Your Data
Your data is used solely for the purposes for which it was collected. Specifically:
- To assess your application and determine programme suitability
- To design, deliver, and adapt your training programme
- To communicate with you about your coaching, race calendar, and progress
- To send necessary updates about your coaching
- To comply with legal obligations applicable to our business
- To improve our services based on aggregated, anonymised feedback
We do not use your data for automated decision-making or profiling in any way that produces legal or similarly significant effects.
Legal Basis for Processing
Under UK and EU GDPR, we rely on the following legal bases for processing your personal data:
- Contract performance — processing necessary to deliver the coaching services you have engaged us to provide
- Legitimate interests — for business administration, communication, and service improvement, where these do not override your rights
- Consent — where you have given us consent to process your information (you may withdraw consent at any time)
- Legal obligation — where we are required to retain or share data to comply with applicable law
Where we process health-related information (special category data), we do so only on the basis of your explicit consent or where necessary for the performance of our contract with you.
Data Sharing
We do not sell, rent, or trade your personal data. We may share data only in the following limited circumstances:
Service providers
We may use third-party tools to deliver our services — for example, email platforms, form tools, coaching software, or cloud storage. These providers act as data processors on our behalf and are bound by appropriate data protection agreements.
Legal requirements
We may disclose your data if required to do so by law, court order, or regulatory authority.
Business transfers
In the event of a business sale or restructure, your data may be transferred to a successor. We will notify you if this occurs and ensure continued protection of your data.
International transfers
Some of our service providers may be based outside the UK or EU. Where data is transferred internationally, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses — in line with UK GDPR and EU GDPR requirements.
Data Retention
We retain your personal data only for as long as necessary for the purposes it was collected, or as required by law.
- Active client data is retained for the duration of the coaching relationship
- Post-coaching, we may retain limited records (such as contact details and basic coaching history) for up to 3 years for administrative and legal purposes
- Financial and contractual records may be retained for up to 7 years in line with legal requirements
- Enquiry data from individuals who did not proceed with coaching is deleted within 12 months
You may request earlier deletion of your data — see Section 7 for your rights.
Your Rights
Under UK and EU GDPR, you have the following rights regarding your personal data. To exercise any of these rights, contact us using the details in Section 11.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data where there is no lawful reason to retain it.
Ask us to restrict processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
You also have the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are based in an EU member state, you have the right to contact your national data protection authority.
Cookies
Our website may use cookies or similar tracking technologies to understand how visitors use the site. These may include:
- Essential cookies — required for basic site functionality
- Analytics cookies — used to understand traffic and behaviour in aggregate (e.g. via Google Analytics or similar), where consent has been obtained
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the site.
We do not use advertising or targeting cookies.
Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include encrypted communications, access controls, and secure data storage.
No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The effective date at the top of this page will be updated accordingly.
For material changes, we will notify active clients directly. We encourage you to review this page periodically.
Contact Us
For any questions, requests, or concerns regarding your personal data or this Privacy Policy, please contact:
Apex Rises Coaching
Website: apexrises.com
Instagram: @apexrises
We aim to respond to all data-related requests within 30 days in line with UK/EU GDPR requirements.
