Privacy Policy
This explains what personal data we collect when you use our website or buy from us, why, and your rights.
1. Who we are
[Company name] Ltd (Daily Hyrox) is the controller of your personal data. Contact: [privacy email], [registered office address]. ICO registration number: [ICO registration number]. We don't have a data protection officer; email us about anything in this policy.
2. What we collect and why
| Data | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|
| Name, email, order details (plan, division, target time, price, date) | To take your order, deliver your plan, send your confirmation and provide support | Contract | 6 years after the end of the financial year of purchase, for tax and accounting |
| Payment details | Processed by Stripe to take payment and prevent fraud. We never see or store your full card number | Contract; legitimate interests (fraud prevention) | Held by Stripe under its own policy |
| Checkout confirmations (immediate access, age, terms, marketing choice), with the time and order number | To show you gave the confirmations the law requires | Legal obligation; legitimate interests | 6 years |
| Download records (time, IP address, device type) | To make sure you can access your plan, and to evidence delivery if a payment is disputed | Legitimate interests | 18 months |
| Coaching information you give us (training history, goals, check-ins) | To provide your coaching | Contract | For the length of coaching plus 2 years |
| Health information you choose to share with your coach (e.g. an injury) | To adapt your coaching safely | Your explicit consent, which you can withdraw at any time | Deleted when coaching ends, unless needed for a legal claim |
| Emails and complaints | To reply and resolve issues | Legitimate interests | 2 years after the matter closes |
| Marketing emails | To send training tips and offers | Your consent (an unticked box at checkout or a sign-up form). You can unsubscribe from every email | Until you unsubscribe; we keep a suppression list so we don't email you again |
| Instagram messages via ManyChat (handle, messages) | To reply when you message us or comment a keyword | Legitimate interests; consent for promotional sequences | 12 months after your last message |
Our legitimate interests are running and protecting our business, preventing fraud, and dealing with disputes. You must give us your email and payment details to buy, because we can't deliver your plan without them. We don't make decisions about you based solely on automated processing. Stripe uses automated fraud checks on payments.
We don't collect health data when you buy a plan. Your division and target time are not health data. Please don't send us medical details unless you're a coaching client and want us to use them.
3. Who we share it with
We use trusted providers who process data on our instructions: Stripe (payments), Vercel (website hosting), our email providers (order emails and newsletters), our coaching platform, ManyChat and Instagram (messages), and our accountant. We share data with HMRC and other authorities where the law requires it. We don't sell your data.
4. International transfers
Some providers process data in the United States or elsewhere. When that happens we rely on UK adequacy regulations (including the UK–US data bridge for certified companies) or the UK International Data Transfer Agreement or Addendum. Email us for a copy of the relevant safeguards.
5. Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, and to move it to another provider. You can object to marketing at any time and we'll stop. Where we rely on consent, you can withdraw it at any time. Email [privacy email]. We'll reply within one month.
6. Complaints
If you're unhappy with how we've used your data, email [privacy email] first. We'll acknowledge your complaint within 30 days, look into it and tell you the outcome. You can also complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.
7. Cookies and similar technology
See Cookies and Storage.
8. Children
Our website and products are for adults. We don't knowingly collect data from anyone under 18.
9. Security and changes
We use secure providers, encrypted connections and limited access to protect your data. If a breach is likely to put you at high risk, we'll tell you. We'll update this policy when our practices change and show the date at the top.