1. Who we are / Controller

Optimum Performance Academy Ltd (trading as Optimum Performance Academy) is the data controller for any personal data you provide via this Website or through our Services. Contact details:

[email protected]

3 Springfield Court

Bury St Edmunds

Suffolk

IP33 3AR

2. What personal data we collect

We may collect and process the following categories of personal data, depending on how you interact with the Website and our Services:

• Contact information: name, email address, phone number, postal address (if provided)

• Account or client details (if you register or enrol in a course or programme)

• Payment information (as required for purchases - note: payment card data is handled by our secure payment provider 'Stripe')

• Technical and usage data: IP address, browser type, device identifiers, pages visited, duration, referral data (if using analytics or site tracking)

• Marketing preferences and communication history (e.g. if you sign up for our newsletter or marketing emails)

• Any additional data you choose to provide (e.g. in forms, course questionnaires, health or fitness information)

3. How we collect data

We collect data:

• Directly from you, via sign-up/contact forms, purchase/booking forms, enrolment or onboarding processes, newsletter sign-up, or communication (email, chat).

• Automatically via cookies or similar technologies when you visit the Website (if we use analytics, tracking, or cookie-based services).

• From third-party service providers (e.g. payment processors, email-marketing platforms) when you interact with those services via our Website.

4. Purpose of processing & lawful basis

We use your personal data for the following purposes:

• To provide and manage the Services you have requested (e.g. enrolment, coaching, events, purchases).

• To process payments and fulfil orders.

• To communicate with you - e.g. respond to enquiries, send confirmations, service updates, newsletters (if you opted in).

• To improve our Website and Services: analytics, user experience, performance, troubleshooting.

• To comply with legal or regulatory obligations, if any.

• With your consent (where required), for marketing purposes.

Our lawful basis for processing your data will typically be: performance of a contract (when you purchase or use Services), legal compliance, legitimate business interest (for analytics/improvements), or your consent (for marketing).

5. Cookies and tracking technologies

We may use cookies or similar technologies to collect technical and usage data. Cookies may help us with functionality, site analytics, or improving user experience. Where cookies or tracking are non-essential (e.g. analytics, marketing), we will ask for your consent before enabling them. You can configure your browser to reject or delete cookies; however, this may affect the functionality of parts of the Website.

6. Who we share data with

We may share your personal data with:

• Third-party service providers (e.g. payment processors, email-marketing platforms, analytics providers) strictly for the purposes of delivering services, processing payments or communications.

• Legal or regulatory authorities if required by law or to protect our legal rights.

We do not sell or lease your personal data to third parties.

7. International transfers

If we transfer personal data outside the UK or European Economic Area (EEA), we will ensure appropriate safeguards are in place (e.g. standard contractual clauses) in compliance with UK law.

8. Data retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected - e.g. to deliver Services, manage client relationships, comply with legal obligations, or in accordance with our business operations.

9. Data security

We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, misuse or alteration. However, no method of data transmission or storage over the internet can be guaranteed 100% secure.

10. Your rights

Under applicable law UK GDPR, Data Protection Act 2018, you have the right to:

• Request access to the personal data we hold about you;

• Request correction of inaccurate or incomplete data;

• Request erasure of your personal data (“right to be forgotten”), subject to legal or contractual limitations;

• Restrict or object to certain processing activities;

• Withdraw consent (where processing is based on your consent), at any time;

• Request data portability, where applicable;

• Lodge a complaint with the relevant supervisory authority (e.g. the UK Information Commissioner’s Office) if you believe your rights have been violated.

If you wish to exercise any of these rights, or have questions about how we process your data, please contact us at:

David Sanders

[email protected]

11. Children or Minors

Our Website and Services are not directed to any person under the age of 18. We do not knowingly collect personal data from minors.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the “last updated” date. Continued use of the Website or Services after changes indicates acceptance of the revised Policy.

13. Data Controller and Contact Information

Data Controller:
Optimum Performance Academy Ltd – Sanders, David
Email: [email protected]

Data Processor:
Optimum Performance Academy Ltd
Email: [email protected]

Data Protection Officer (DPO):
Email: [email protected]

For all privacy-related inquiries, please contact the DPO via the email above or through the general contact email provided.

14. Contact

If you have any questions, concerns or requests regarding this Privacy Policy or your data, please contact:

Optimum Performance Academy

[email protected]

3 Springfield Court

Bury St Edmunds

Suffolk

IP33 3AR.