Legal
Privacy Policy
Last updated: June 24, 2026
We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why we collect it and the rights you have under the EU General Data Protection Regulation (GDPR) and equivalent laws.
1. What Data We Collect
We collect the following categories of personal data:
- Account data: name, email address, password (hashed), profile photo, role (coach or student).
- Profile data: sports, skill level, bio, qualifications, certifications, languages, location.
- Payment data: billing details and transaction history. Card numbers are handled directly by Stripe and never stored on our servers.
- Communications: messages, reviews, and support requests exchanged through the Platform.
- Usage data: pages viewed, features used, device and browser information, IP address, and approximate location derived from your IP.
- Cookies and similar technologies — see the Cookies section below.
2. How We Use Your Data
We use your data to:
- Create and operate your account.
- Match students with relevant coaches and courses.
- Process bookings, payments and payouts via Stripe.
- Send transactional emails (booking confirmations, receipts).
- Provide support and respond to your requests.
- Detect, prevent and investigate fraud or abuse.
- Improve and personalise the Platform, with appropriate safeguards.
- Comply with legal obligations.
The legal bases we rely on under the GDPR include performance of a contract (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), legal obligation (Art. 6(1)(c)) and, where required, your consent (Art. 6(1)(a)).
4. How Long We Keep Your Data
We retain your data only for as long as we need it:
- Active accounts: for the lifetime of your account.
- Deleted accounts: personal data is deleted or anonymised within 30 days of your deletion request, except where we are required to keep records for legal, accounting or fraud prevention purposes.
- Payment records: retained for up to 7 years to comply with tax and accounting laws.
- Support communications: retained for up to 2 years.
5. Your Rights
If you are in the EU, UK or EEA, you have the following rights under the GDPR:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to limit how we process your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — where we rely on your consent, you can withdraw it at any time.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email privacy@sportconnect.com.
7. Data Deletion
You can request deletion of your account and personal data by:
- Emailing privacy@sportconnect.com from the address on your account, or
- Using the "Delete account" option in your account settings (where available).
We will confirm your request and, unless we are legally required to retain certain records (for example, financial records for tax purposes), permanently delete or anonymise your data within 30 days.
8. Contact
The data controller responsible for your personal data is EveryCoach. You can reach our team at:
- Email: privacy@sportconnect.com
- General support: /contact