Privacy Policy
This page explains what personal information I collect, why, where it is kept, who else handles it, and what you can ask me to do with it. It applies if you visit this website, get in touch, sign up for my newsletter, train with me in person or online, attend a workshop, or use the B.BalancedOS app.
B.Balanced is run by me, Rachel Brookes-Bent, through B.Balanced Coaching Ltd. When this page says "I" or "me", it means the company.
1. Who I am
Data controller: B.Balanced Coaching Ltd (trading as B.Balanced)
ICO registration number: ZA00011542875
Contact: rachel@b-balanced.co.uk
Website: www.b-balanced.co.uk
2. The short version
- I collect what I need to coach you safely and run the business, and nothing for advertising.
- Health information (injuries, health notes, pregnancy or postnatal status) is only collected with your explicit consent, and you can withdraw it.
- Your training data lives in my app's database in Ireland. A small number of named providers help me run things, and none of them may use your data for their own purposes.
- I do not sell personal information, and this website does not use analytics or advertising cookies.
- You can ask to see, correct, export or delete your information at any time by emailing me.
3. What I collect
Information you give me
- Contact details: name, email address, phone number.
- Consultation answers: your goals, training history, experience, equipment, schedule and preferences.
- Health information: injuries, health notes, and whether you are pregnant or postnatal, where you choose to share them so I can adapt your training safely. This is special category data under UK GDPR (see section 4).
- Training records: the sessions you complete and the loads, reps, effort ratings (RPE) and range-of-motion stages you log, and your bodyweight if you enter it.
- Check-ins: your answers to check-in questions, and any photos you choose to upload with them.
- Videos of your training that you send me for feedback on your movement.
- Messages you send me by email, WhatsApp, Instagram or the website forms.
- Payment records: what you bought, when, and how much. You pay by bank transfer or by card through Stripe. I never see or store your card details.
- Workshop and event details: if you attend a workshop through your employer, your name and anything you choose to share on the day or afterwards.
Information collected automatically
- Login information: when you use the app, the cookies and records needed to keep you signed in securely.
- Server logs: my hosting provider keeps short-lived technical logs (such as IP address and browser type) to keep the site running and secure.
- Email delivery records: whether an app email (an invite, a reminder) was sent successfully.
- Newsletter engagement: Kit, which sends my newsletter, records whether emails are opened and links clicked.
4. Why I use it, and the legal basis
| Purpose | What I do | Legal basis |
|---|---|---|
| Coaching and the app | Set up your programme, run your sessions, track your progress, adjust your training, reply to your check-ins and videos. | Contract: it is needed to provide the coaching you asked for. |
| Health information | Adapt exercises, loads and progression around injuries, health conditions, pregnancy or the postnatal period. | Your explicit consent. You can withdraw it at any time; if you do, I may not be able to coach you safely and will tell you so. |
| Running the business | Scheduling, invoicing, keeping records of who I coach and when. | Contract, and legitimate interests in running my business properly. |
| Newsletter | Send my monthly newsletter. | Consent: unsubscribe at any time using the link in any email, or by emailing me. |
| Improving the coaching and the app | Look at training records to understand what works and improve how programmes progress. | Legitimate interests, balanced against your rights. Health information is only used in this way with your consent. |
| Legal and accounting | Keep financial records, respond to legal requests. | Legal obligation. |
| Security | Protect the app and website, prevent misuse, investigate problems. | Legitimate interests and legal obligation. |
Where I rely on legitimate interests, you have the right to object (see section 10).
5. How the app makes decisions about your training
B.BalancedOS adjusts your programme using rules I have written: for example, whether to increase a load, hold it, or change an exercise, based on the reps, effort ratings and range of motion you log. These are training suggestions, and I can review or override any of them. The app does not use artificial intelligence services to make these decisions, and it makes no decisions with legal or similarly significant effects on you. If you want me to look at a decision the app has made, email me.
6. Cookies
This website and the app use only strictly necessary cookies: the ones that keep you signed in to the client portal and protect the login. There are no analytics, advertising or social media tracking cookies, so there is no cookie banner to manage. If that ever changes, I will update this page and ask for your consent first.
7. Who else handles your information
I do not sell personal information. These providers process it on my behalf, only to provide their service to me:
| Provider | What for |
|---|---|
| Supabase | The app's database and logins: your profile, consultation, training records and check-ins. Stored in Ireland. |
| Vercel | Hosting the website and app |
| Resend | Sending app emails such as invites and reminders |
| GitHub | Storing the app's code and nightly backups of its database, in a private account |
| Email, calendar, video calls (Google Meet), and the documents and spreadsheets where I keep coaching notes and client records | |
| Kit | Sending the newsletter |
| Stripe | Card payments |
| WhatsApp and Instagram (Meta) | Messages and training videos you send me |
| ManyChat | Automated replies to Instagram messages |
My accountant receives financial records so they can prepare my accounts. I may also share information if the law requires it, or to protect someone's safety.
8. Information stored outside the UK
The app's database is in Ireland, which the UK recognises as providing adequate protection. Several providers above are US companies and may process information in the US. Where personal information goes to the US, the transfer relies on the UK's adequacy regulations for companies certified under the UK Extension to the EU-US Data Privacy Framework, or on the International Data Transfer Agreement or Addendum approved by the ICO. Email me if you want details for a particular provider.
9. How long I keep it
- Training records, consultation and check-ins: while you are a client, then deleted or anonymised 2 years after your last session, unless you ask me to delete them sooner.
- Health information: while you are a client, then deleted on the same timetable, or straight away if you withdraw consent.
- Training videos and check-in photos: deleted once I have given feedback, and within 12 months at the latest.
- Financial records: six years from the end of the relevant tax year, because the law requires it.
- Newsletter: until you unsubscribe. I keep a record that you unsubscribed so you are not added again by mistake.
- Enquiries that don't lead to coaching: 12 months.
- Database backups: kept for 30 days, then overwritten.
10. Your rights
Under UK GDPR you can ask me to:
- give you a copy of the information I hold about you;
- correct anything that is wrong;
- delete your information, in most circumstances;
- restrict how I use it while a concern is looked into;
- stop using it where I rely on legitimate interests, or for the newsletter at any time;
- export your training records in a format you can take elsewhere;
- withdraw consent where I rely on it, without affecting what was done before.
Email rachel@b-balanced.co.uk. I will reply within one month.
If you are unhappy with how I have handled your information, you can complain to the Information Commissioner's Office: ico.org.uk | 0303 123 1113. I would appreciate the chance to put it right first.
11. Keeping it secure
I use established providers, limit access to my own accounts, use two-factor sign-in, back the database up nightly and review the app's security regularly. No system is perfectly secure. If something goes wrong that puts your information at risk, I will tell you and, where the law requires it, the ICO.
12. Under 18s
My coaching and the app are for adults. I do not knowingly collect information from anyone under 18. If you think I have, please tell me and I will delete it.
13. Health note
My coaching and the app are for fitness, strength and movement education. They are not medical advice, diagnosis or treatment. If you have a health condition, an injury or any concern, speak to a qualified medical professional before starting a new training programme.
14. Changes to this page
When I change how I handle personal information, I will update this page and the date at the top. If a change affects how I use information you have already given me, I will tell you directly.
