Privacy policy

1. Who is responsible

I am Kieron McNeill, trading as Become The Standard Coaching (BTS Coaching), the controller responsible for the personal information described here. This service is intended for adults aged 18 and over.

2. Information collected

Most information comes directly from you, through applications, questionnaires, calls, messages, payments and coaching check-ins. Depending on your interaction, it can include:

• Contact and booking information: name, email, telephone number, date of birth or age, appointment details and communications.
• Coaching information: goals, training experience, height, weight, measurements, activity, lifestyle, nutrition, dietary requirements, progress, photos and uploaded files or videos.
• Health information: allergies, injuries, conditions, medication or eating-related concerns you disclose. This needs additional protection, explained below.
• Order information: programme purchased, payment status, transaction references, billing details, instalments and correspondence. Stripe processes card details; I receive transaction and order information rather than your full card number or security code.
• Technical information: IP address, browser/device information, page activity and security or delivery logs generated by website, booking, payment and email providers.

Booking and payment providers also supply confirmations and status updates. Information you post publicly or send through social platforms may be used to respond to your enquiry. Please share only information needed for that purpose.

3. Why information is used

Enquiries, bookings and coaching

To answer requests, arrange calls, process orders, send onboarding information and deliver personalised coaching. The basis is performing our contract or taking steps you request before entering one.

Business administration and security

To manage records, troubleshoot services, prevent misuse and deal with disputes. Where applicable, the basis is legitimate interests in operating a secure, reliable coaching business, balanced against your rights.

Legal and accounting requirements

To keep required tax, payment and business records and respond to lawful requests. The basis is compliance with legal obligations.

Optional marketing and publicity

To send promotional messages with your consent, or on the basis of legitimate interests in promoting my similar services where every soft opt-in condition is met, including an opt-out when details are collected and in each message. Publishing identifiable progress photos or testimonials requires separate consent, including explicit consent where they reveal health information; buying coaching does not itself grant it.

Information necessary to book, pay or deliver coaching must be provided for those services to work. If you withhold it, I may be unable to complete your request. Optional publicity and marketing choices do not determine whether you can receive coaching.

4. Health information and your choices

Health information is special-category personal data. Using it needs an additional legal condition alongside the ordinary lawful basis. For health information used to tailor your coaching, separate explicit consent is required.

Reading this notice, accepting terms or submitting a questionnaire does not by itself provide that consent. If you have not been asked for separate explicit consent, please contact me before providing health information.

You can decline or withdraw consent by emailing the address above. We will discuss whether coaching can be provided safely without that information. Withdrawal does not affect earlier lawful processing. Any limited retention needed for a legal claim must have its own applicable legal justification.

5. Programme recommendations and messages

The website uses your application answers to suggest a programme. The fat-loss range currently maps under 10 kg to 12 weeks, 10–20 kg to six months, and 20 kg or more to 12 months. Answers are passed in the next page's URL and may appear in browser history or technical logs. Avoid adding medical details to these answers or sharing personalised URLs.

This is a simple recommendation, not a decision with legal or similarly significant effects. You can choose another programme or ask me to review it. Payment confirmations, welcome emails, programme information and appointment reminders are service messages. They do not automatically subscribe you to marketing.

You can object to direct marketing at any time. Use an unsubscribe option in the message or email me. A minimal suppression record may be kept to respect your choice.

6. Providers and sharing

I use providers to operate and deliver coaching:

• GoHighLevel/LeadConnector: website, contacts, bookings, orders and automated communications; LeadConnector Email/Mailgun and Hostinger support email delivery or business mail.
• Stripe: payments, instalments and payment security.
• Google Forms: onboarding questionnaires and submitted information or files.
• Kahunas: training, nutrition, progress and check-ins.
• WhatsApp and Loom: support messages, programme walkthroughs and video feedback.

Access is limited to the purposes of the service concerned. Providers may also act independently for their own security, legal or account-related purposes. Their notices provide further details: HighLevel, Stripe, Google and Kahunas.

Relevant information may also be shared with professional advisers, insurers or authorities when necessary for legal obligations or claims. Your information is not sold.

7. Overseas processing

Some providers process information outside the UK, including in the United States. HighLevel, Google and Stripe describe their transfer arrangements in their published terms. These include applicable adequacy arrangements, such as the UK–US data bridge for eligible recipients, and/or approved contractual clauses with the UK Addendum. The mechanism depends on the provider and service. Other restricted transfers also require an applicable UK adequacy arrangement or appropriate safeguards, such as an International Data Transfer Agreement. Contact me for details of the locations and safeguards relevant to your information, including how to obtain a copy.

8. Retention and security

Information is kept only for as long as needed for its purpose, taking account of:

• Whether an enquiry remains active or coaching and follow-up support continue.
• Whether coaching records remain necessary for your programme, a complaint, insurance or a legal claim. Sensitive health information requires particular care and a continuing justification.
• Legal record-keeping duties. Sole-trader tax records generally need keeping for at least five years after the relevant 31 January filing deadline.
• Consent, marketing preferences, and the need to preserve a minimal opt-out record.

When information is no longer necessary, it should be securely deleted or anonymised. Providers' backup and retention arrangements may affect removal times. Reasonable organisational and technical measures are used to protect information, but no internet service can guarantee complete security.

9. Cookies and similar technologies

The website and embedded booking or payment services may use cookies or similar technologies for sessions, security and requested functions. Providers also generate technical and activity information. Optional analytics or advertising technologies, where used, are subject to the consent or other choices required by applicable law. This notice does not itself give consent. Browser controls can restrict cookies, although some features may stop working; contact me with privacy questions about particular technologies.

10. Your rights and complaints

Depending on the circumstances, you can request access, correction, deletion, restriction or transfer of your information, object to legitimate-interest processing, and withdraw consent. These rights have conditions; for example, deletion may not apply to records required by law. Email me to exercise them. I may need to verify your identity and will normally respond within one calendar month, subject to lawful extensions or other applicable timing rules.

You can also send a data protection complaint to the same email address. I will acknowledge it within 30 days, investigate, keep you informed and explain the outcome without undue delay.

You have the right to complain to the UK's data protection regulator, the ICO: ico.org.uk/make-a-complaint.

11. Changes to this notice

This notice may change as services or legal requirements change. The latest version and update date will appear here. Material new uses of your information will be explained, with additional choices sought where required.