Privacy Policy

1. Who We Are

sculpt.coach operates the platform at my.sculpt.coach, connecting personal trainers with their clients. For data protection purposes, we are the data controller for account and platform data. Where a personal trainer uses sculpt.coach to manage their clients, the trainer also acts as a data controller for their clients' data, and we act as a data processor on their behalf.

For any data-related queries, contact us at: hello@sculpt.coach

2. What Data We Collect

• Account data: Name, email address, and account credentials.
• Profile and fitness data: Body measurements, progress photos, check-in responses, workout logs, and any other health or fitness information you or your trainer enter into the platform. This constitutes special category data under UK GDPR and is handled with additional care.
• Payment data: Billing details processed via Stripe. We do not store your full card details — these are held securely by Stripe in accordance with their own privacy policy and PCI-DSS standards.
• Usage data: Log data, IP addresses, browser type, and in-app activity, collected to maintain and improve the service.
• Communications: Any messages you send to us via email or in-app support.

3. How We Use Your Data

We use your data to:

• Provide, operate, and personalise the sculpt.coach platform
• Process payments and calculate applicable platform fees
• Enable communication between trainers and clients within the platform
• Send transactional emails (e.g. receipts, check-in reminders) — not marketing, unless you opt in
• Detect and prevent fraud, abuse, or security incidents
• Comply with our legal obligations

Legal bases (UK GDPR): We process data on the basis of contractual necessity (to provide the service), legitimate interests (platform security and improvement), legal obligation, and — for special category health/fitness data — your explicit consent, which you may withdraw at any time.

4. How We Share Your Data

We do not sell your data. We share it only where necessary:

• Stripe — payment processing
• Cloud infrastructure providers — secure hosting and storage
• Trainers and clients — data you enter is visible to the other party in your training relationship, as intended by the platform
• Legal authorities — where required by law

All third-party processors are contractually bound to handle your data securely and only as instructed.

5. Data Retention

We retain your data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or financial compliance purposes (e.g. transaction records, which are retained for 7 years in line with HMRC requirements).

6. International Transfers

We are based in the UK and primarily store data within the UK and EEA. Where any data is transferred outside these areas (e.g. via third-party processors), we ensure adequate safeguards are in place, such as UK International Data Transfer Agreements or equivalent mechanisms.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), subject to legal retention obligations
• Restrict or object to our processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at hello@sculpt.coach. We will respond within one calendar month. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use essential cookies to keep you logged in and maintain your session. We may use analytics cookies to understand how the platform is used. You can manage cookie preferences in your browser settings. We will ask for your consent before setting any non-essential cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or via an in-app notice. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.